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Summary of the Audit Process 


PHASE | 
Plan and design an 
audit approach 


PHASE Il 
Perform tests of 
controls and 
substantive tests 
of transactions 


PHASE Ill 
Perform analytical 
procedures and 
tests of details 

of balances 


PHASE IV 
Complete the 
audit and 
issue an 
audit report 





Accept client and perform 
initial planning 
I 
Understand the client’s 
business and industry 
I 
Assess client business risk 
I 
Perform preliminary 
analytical procedures 
es | 
Set materiality and assess 
acceptable audit risk and 
inherent risk 
I 
Understand internal control 
and assess control risk 
I 
Gather information 
to assess fraud risks 
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Develop overall audit plan 
and audit program 




















Plan 
to reduce 
assessed level of 
control 
risk? 





Perform tests of controls* 
I 
Perform substantive tests 
of transactions 
I 
Assess likelihood of misstatements 
in financial statements 
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Perform analytical procedures 





Perform tests of key items 





Perform additional tests 
of details of balances 


Perform additional tests for 
presentation and disclosure 
I 
Accumulate final evidence 
I 
Evaluate results 
I 
Issue audit report 
I 
Communicate with audit 
committee and management 









































*The extent of testing of controls is determined by planned reliance on controls. For public companies required 
to have an audit of internal control, testing must be sufficient to issue an opinion on internal control over 
financial reporting. 
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A TRIBUTE TO 
ALVIN A. ARENS 


The auditing profession and audit education lost a great friend, 
mentor, and leader with the passing of Alvin A. Arens in December 
2010. Al’s leadership at national and international levels and his 
commitment to expanding knowledge through the development of 
educational materials, resources, articles, and cases profoundly 
impacted students and professionals in auditing. 


As founding author of Auditing and Assurance Services: An Integrated 
Approach, he has shaped classroom instruction and student learning 
about auditing concepts and their practical implementation around 
the world. Since the first edition was published in 1976, his textbook 
has impacted audit education for over 30 years in the U.S. and 
globally, including six different language translations of the most 
recent edition. 


Al was the PricewaterhouseCoopers Auditing Professor and member of 
the Accounting & Information Systems faculty in the Eli Broad College 


usPHE Mth dyasye ce Gnxversity from 1968 through 2007. 


Among his many honors, Al was sélectéd as one of five national auditing educators to hold the first Price 
Waterhouse Auditing professorships, was honored as AICPA Educator of the Year, served on the AICPA’s 
Auditing Standards Board, and was President of the American Accounting Association. Al taught accounting, 
mainly auditing, with a passion that is legendary. He had a heart for sharing his knowledge of auditing with the 
next generation of professionals. He will be missed. 


This 14th edition is dedicated in memory of Al Arens — author, leader, mentor, friend. 
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PREFACE 





INTEGRATED APPROACH FOR RISK ASSESSMENT 


AND AUDIT DECISION-MAKING 





Auditing and Assurance Services: An Integrated Approach is an introduction to auditing and 
other assurance services. It is intended for either a one-quarter or one-semester course at the 
undergraduate or graduate level. This book is also appropriate for introductory professional 
development courses for CPA firms, internal auditors, and government auditors. 

The primary emphasis in this text is on the auditor’s decision-making process in a finan- 
cial statement audit, as well as an integrated audit of both financial statements and internal 
control over financial reporting required for accelerated filer public companies. We believe 
that the most fundamental concepts in auditing concern determining the nature and amount 
of evidence the auditor should gather after considering the unique circumstances of each engage- 
ment. If students of auditing understand the objectives to be accomplished in a given audit 
area, the risks related to the engagement, and the decisions to be made, they should be able 
to determine the appropriate evidence to gather and how to evaluate the evidence obtained. 

Our objective is to provide up-to-date coverage of globally recognized auditing concepts 
with practical examples of the implementation of those concepts in real-world settings. The 
collective experience of the author team in the practice of auditing is extensive. All three 
authors have worked in the auditing profession involving both large international audit firms 
and regional firms. All three authors have taught extensively in continuing education for 
either large international or small CPA firms and they have been involved in standards setting 
activities of the Auditing Standards bapa © PPP POrsphyarrver@ yerves as 
one of the board members of the Comnifttee 6f Sponsoring Organizations of the Treadway 
Commission (COSO). These experiences provide unique perspectives about the integration 
of auditing concepts in real-world settings. 

As the title of this book reflects, our purpose is to integrate the most important interna- 
tionally recognized concepts of auditing in a logical manner to assist students in understand- 
ing audit decision making and evidence accumulation in today’s complex, global auditing 
environment. For example, developments related to international auditing and issues affect- 
ing auditing in a global and economically volatile environment are described throughout the 
book and emphasized in selected mid-chapter vignettes and homework problems. Key con- 
cepts related to risk assessment as emphasized in standards issued by the Auditing Standards 
Board (ASB) and the International Auditing and Assurance Standards Board (IAASB) are 
integrated into all of the planning chapters, as well as each chapter dealing with a particular 
transaction cycle and related accounts. Internal control is related to tests of controls and sub- 
stantive tests of transactions that are performed in a financial statement audit and an inte- 
grated audit of financial statements and internal control over financial reporting, with an 
emphasis on the requirements of PCAOB Auditing Standards. Tests of controls and substan- 
tive tests of transactions are, in turn, related to the tests of details of financial statement bal- 
ances for the area. Audit sampling is applied to the evaluation of audit evidence rather than 
treated as a separate topic. Risk assessment, technology, fraud, and auditing of internal con- 
trol issues are integrated throughout the chapters. 


KEY FEATURES IN THE FOURTEENTH EDITION 


New auditing standards are released without regard to textbook revision cycles. As auditing Current Coverage 
instructors, we appreciate how critical it is to have the most current content available. This 
edition includes coverage of PCAOB Auditing Standard No. 7, Engagement Quality Review, 
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PREFACE 


and new standards covering auditor responsibilities related to supplementary information 
included in financial statements (SAS Nos. 119 and 120). We are committed to continually 
providing you with up-to-date content in this dynamic global auditing environment and 
will keep you updated with highlights posted on our Web site of major changes in new 
standards as they are issued. 


Consistent with the convergence toward international accounting and auditing standards, 
this edition contains integrated coverage of developments related to international auditing 
standards and emphasizes issues affecting audits of multi-national entities. Chapter 1 
introduces the importance of considering international auditing standards developments, 
followed by discussion in Chapter 2 about the role of the International Auditing and 
Assurance Standards Board (IAASB) in the issuance of international auditing standards 
and the Auditing Standards Board’s efforts to converge U.S. standards to international 
standards. Chapter 3 highlights implications for auditor reports on companies reporting 
under International Financial Reporting Standards (IFRS) and describes the SEC’s current 
roadmap proposal for embracing the use of IFRS for financial reporting by U.S. public 
companies. Several chapters throughout the book include text or mid-chapter vignette 
coverage of international issues, and international issues are also addressed in homework 
problems, including Internet problems. 


The requirements of the Sarbanes-Oxley Act of 2002 and the PCAOB’s Auditing Standard 5 
(AS 5) that impact accelerated filer public companies, and the risk assessment standards 
issued by the Auditing Standards Board are integrated throughout the text. Chapter 2 
emphasizes the importance of understanding the client’s business and its environment, 
including internal control. We also introduce the PCAOB’s new risk assessment standards. 
Chapter 3 highlights reporting on internal controls over financial reporting for auditors of 
accelerated filer public companies and describes the permanent exemption of that reporting 
requirement for non-accelerated filers that resulted from the passage of the 2010 federal 
financial reform legislation. We have always emphasized understanding the client’s business 
and ndpago PDE weBhry in aera Geese assessment procedures required by the 
risk assessment’standards in our coverage of planning in Chapter 8 and throughout the text. 
Chapter 10 emphasizes the importance of considering internal control as part of the risk 
assessment process and the chapter also highlights important concepts in AS 5 affecting the 
audit of internal control over financial reporting for large public companies. Subsequent 
chapters that focus on the transaction cycles include extensive coverage of internal controls 
to help students understand how the auditor’s consideration of internal controls is inte- 
grated for audits of the financial statements and internal controls over financial reporting. 

The risk assessment standards include three categories of assertions related to transac- 
tions and events, account balances, and presentation and disclosures. These are described 
in Chapter 6, related to the phases of the audit in Chapter 13, and applied to transaction 
cycles and tests of account balances throughout the text. Additional tests the auditor per- 
forms to address presentation and disclosure objectives are discussed in Chapter 24 on 
completing the audit. 


CPA firms are increasingly using audit software to perform audit testing including tests for 
fraud. We have included selected problems using ACL in several chapters in the text. Many 
CPA firms use audit software to perform audit sampling, and we have included an ACL 
problem on audit sampling in Chapter 17. These problems are related to the topic of the 
chapter so that students can see how audit software is used to perform specific types of 
audit tests. Additional guidance for students on the use of ACL is included both on the text 
Web site and as an appendix to the text. The educational version of ACL software is 
included with every new copy of this edition. 


The annual report for the Hillsburg Hardware Company is included as a four-color insert 
to the text. Financial statements and other information included in the annual report are 
used in examples throughout the text to illustrate chapter concepts. The annual report also 
includes management’s report on internal control required by Section 404a and the auditor’s 
report required by Section 404b consistent with PCAOB Auditing Standard No. 5. 


The Pinnacle Manufacturing integrated case is based on a large, multi-division company. Pinnacle 
The case has been revised and expanded to now consist of seven parts included at the end Manufacturing 
of the chapter to which that part relates. Each part of the case is designed to give students Integrated Case 
hands-on experience, and the parts of the case are connected so that students will gain a 

better understanding of how the parts of the audit are integrated by the audit process. 


All chapters include an Internet-based case/homework assignment that requires students New and Revised 
to use the Internet to research relevant auditing issues. All chapters include several new or Homework Problems 
revised problems. The use of bullets and numbering and a large font size enhance the 

readability of the text and help students retain key concepts. 


ORGANIZATION 


The text is divided into six parts. The chapters are relatively brief and designed to be easily 
read and comprehended by students. 


Part 1, The Auditing Profession (Chapters 1-5) The book begins with an opening 
vignette, featuring the WorldCom fraud, to help students begin to see the connection 
between recent frauds and the responsibilities for auditing internal control and other 
requirements of the Sarbanes—Oxley Act. Chapter 1 introduces key provisions of the Act, 
including the creation of the PCAOB and Section 404 internal control reporting 
requirements. Chapter 2 covers the CPA profession, with particular emphasis on the standards 
setting responsibilities of the International Auditing and Assurance Standards Board 
(IAASB) and the PCAOB and how those responsibilities differ from those of the Auditing 
Standards Board (ASB) of the AICPA. Chapter 3 provides a detailed discussion of audit 
reports, including a separate section on the report on internal control over financial 
reporting for an accelerated filer public company. The chapter also emphasizes conditions 
affecting the type of report the auditoymust issue an e Bots it report applicable to 
each condition under varying levels Apada,. ebE 4 hand emmas, 
professional ethics, independence, and the AICPA Code of Professional Conduct. Chapter 5 
ends this part with an investigation of auditors’ legal liability. 


Part 2, The Audit Process (Chapters 6-13) The first two of these chapters deal with 
auditor and management responsibilities, audit objectives, general concepts of evidence 
accumulation, and audit documentation, including the management assertions and evidence 
concepts in the risk assessment standards. Chapter 8 deals with planning the engagement, 
including understanding the company’s business and its industry as part of risk assessment 
procedures, and using analytical procedures as an audit tool. Chapter 9 introduces materiality 
and risk and how the auditor responds to risks of significant misstatement with further audit 
procedures. Chapter 10 shows how effective internal controls can reduce planned audit 
evidence in the audit of financial statements. Most of the chapter describes how auditors of 
accelerated filer public companies integrate evidence to provide a basis for their report on the 
effectiveness of internal control over financial reporting with the assessment of control risk in 
the financial statement audit. Fraud auditing is the focus of Chapter 11 and describes the 
auditor’s responsibility for assessing fraud risk and detecting fraud. The chapter also includes 
specific examples of fraud and discusses warning signs and procedures to detect fraud. 
Chapter 12 addresses the most important effects of information technology on internal 
controls in businesses, risks the auditor must consider, and audit evidence changes. Chapter 13 
summarizes Chapters 6 through 12 and integrates them with the remainder of the text. 


Part 3, Application of the Audit Process to the Sales and Collection Cycle 
(Chapters 14-17) These chapters apply the concepts from Part 2 to the audit of sales, cash 
receipts, and the related income statement and balance sheet accounts. The appropriate 
audit procedures for accounts in the sales and collection cycle are related to internal control 
and audit objectives for tests of controls, substantive tests of transactions, and tests of 
details of balances in the context of both the audit of financial statements and audit of 
internal control over financial reporting. 
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Students also learn to apply audit sampling to the audit of sales, cash receipts, and 
accounts receivable. Chapter 15 begins with a general discussion of audit sampling for tests 
of controls and substantive tests of transactions. Similarly, Chapter 17 begins with general 
sampling concepts for tests of details of balances. The next topic in each chapter is extensive 
coverage of nonstatistical sampling. The last part of each chapter covers statistical sampling 
techniques. 


Part 4, Application of the Audit Process to Other Cycles (Chapters 18-23) Each of 
these chapters deals with a specific transaction cycle or part of a transaction cycle in much 
the same manner as Chapters 14 through 17 cover the sales and collection cycle. Each 
chapter in Part IV demonstrates the relationship of internal controls, tests of controls, and 
substantive tests of transactions for each broad category of transactions to the related 
balance sheet and income statement accounts. We integrate discussion of implications 
related to the audit of internal control throughout all these transaction cycle chapters. Cash 
in the bank is studied late in the text to demonstrate how the audit of cash balances is 
related to most other audit areas. 


Part 5, Completing the Audit (Chapter 24) This part includes only one chapter, 
which deals with performing additional tests to address presentation and disclosure 
objectives, summarizing all audit tests, reviewing audit documentation, obtaining manage- 
ment representations in an integrated audit of financial statements and internal control, 
communicating with those charged with governance, and all other aspects of completing 
an audit. 


Part 6, Other Assurance and Nonassurance Services (Chapters 25 and 26) The 
last two chapters deal with various types of engagements and reports, other than the audit 
of financial statements using generally accepted accounting principles. Topics covered 
include assurance services, review and compilation services, agreed-upon procedures 
engagements, attestation engagements, other audit engagements, internal financial 
auditing, governmental financial auditing, and operational auditing. 
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Instructor’s Resource Center www.pearsonhighered.com/arens This password- 
protected site is accessible from the catalog page for Auditing and Assurance Services, 14th 
ed. and hosts the following resources: 


Image Library The Image Library allows access to most of the images and illustrations 
featured in the text. 


Instructor’s Resource Manual Suggestions for each chapter include: Homework 
problems, how learning objectives correlate with chapter problem material, and trans- 
parency masters. Chapters have been designed so that their arrangement and selection 
provides maximum flexibility in course design. Sample syllabi and suggested term projects 
are provided. 


Solutions Manual Included are detailed solutions to all the end-of-chapter exercises, 
problems, and cases. Guidelines for responses to review questions and discussion questions 
are offered. 


Test Item File & TestGen The printed Test Item File includes multiple choice exercises, 
true/false responses, essay questions, and questions related to the chapter vignettes. To 
assist the instructor in selecting questions for use in examinations and quizzes, each 
question has been assigned one of three difficulty ratings—easy, medium, or challenging. 
In addition, questions that uniquely relate to the integrated audits of large public 
companies or to the provisions of the Sarbanes—Oxley Act and Section 404 have been 
separately labeled for easy identification by the professor. TestGen testing software is an 
easy-to-use computerized testing program. It can create exams, evaluate, and track student 
results. All Test Item File questions are available in the TestGen format. 


PowerPoint Slides PowerPoint presentations are available for each chapter of the text. 
Instructors have the flexibility to add slides and/or modify the existing slides to meet 
course needs. 


Enhanced Companion Website Prentice Hall’s Learning on the Internet Partnership 
offers the most expansive Internet-based support available. Our Website provides a wealth 
of resources for students and faculty. Resources include: 


* Periodically, faculty will be able to access electronic summaries and PowerPoint 
slides of the most recent changes to professional standards and summaries of major 
issues affecting the auditing profession. This will help instructors to stay informed 
of emerging issues. 

* “Internet Problems,” end-of-chapter assignments available for most chapters, require 
students to utilize the Internet to conduct research in order to develop a solution. 

* “Faculty Web Links” provided for most chapters take interested instructors to 
related Internet sites. 

* Online “Study Guide” provides students with immediate feedback on quizzes, 
including total score, an explanation provided for each incorrect answer, and the 
ability to e-mail the results to a faculty member. All questions are created specifically 
for this Study Guide, and there is no duplication of questions taken from the text or 
test bank. This is included with the price of the text. 


CAST: Comprehensive Assurance and Systems Tool by Buckless/Ingraham/ 
Jenkins This integrated practice set enables students to complete accounting transactions 
based on the day-to-day operations of a real winery. Three modules are available— 
assurance, manual AIS, and computerized AIS. Appropriate for use in auditing as well as in 
AIS or intermediate courses. 


The Lakeside Company: Cases in Auditing, 11th ed. by Trussel & Frazer This 
practice set guides the student through the life cycle of an audit from beginning to end. The 


cases are designed to create a realistic RKpAags angS SEPT oRAHeH Gap an 


audit. 


Auditing Cases, 4th ed., by Beasley/Buckless/Glover/Prawitt This collection of 44 
auditing cases addresses most major activities performed during the conduct of an audit, 
from client acceptance to issuance of an audit report. Several cases ask students to work 
with realistic audit evidence to prepare and evaluate audit schedules. The cases are available 
as a collection or as part of the Pearson Custom Publishing Resources Program. For details, 
go to www.pearsoncustom.com. 
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1-5 





THE AUDITING PROFESSION 





These first five chapters in Part | provide background for performing financial 
audits, which is our primary focus. This background will help you understand 
why auditors perform audits the way they do. 


e Chapters 1 and 2 describe assurance services, including auditing, and the 
role of certified public accounting (CPA) firms and other organizations in 
performing audits. 

e Chapter 3 provides a detailed discussion of audit reports, which are the final 
products of audits. 

e Chapters 4 and 5 emphasize the regulation and control of CPA firms 
through ethical standards and the legal responsibilities of auditors. 














THE DEMAND FOR 


AUDIT AND OTHER LEARNING OBJECTIVES 
ASSURANCE SERVICES 


you should be able to 


1-1 Describe auditing. 
Auditors Have A Great Responsibility 1-2 Distinguish between auditing 


a“ u * d ti . 
Oh my!” Gene Morse was stunned. He stared at the computer screen in Nemes 


his cubicle, unable to believe that he had found an unsupported entry for 
$500 million in computer acquisitions. He immediately took his discovery 
to his supervisor, Cynthia Cooper, vice president for internal audit at 
WorldCom. “Keep going,” directed Cooper. Her team of internal auditors 


1-3 Explain the importance of 
auditing in reducing information 
risk. 


1-4 List the causes of information 
tisk, and explain how this risk 








kept digging. They worked late into the night to avoid detection, concerned cela ee rected 

that they would be fired if superiors found out what they were doing. They Se eer er eer ee 

burned data onto CDs because they feared the data might be destroyed. and distinguish audit services 
from other assurance and 

Major frauds often begin at the top, and such was the case at WorldCom. nonassurance services provided 

Bernie Ebbers, WorldCom's founder and CEO, had told Cooper not to use by CPAs. 

the term “internal controls” claiming that he did not understand it. 1-6 Differentiate the three main 

However, Cooper fought for respect and more resources for the internal types of audits. 

audit department. She told Ebbets AB aks PDE! Bahkricer 1-7 Identify the primary types of 

of dollars of wasteful operations with"interMal controls. In the years that auditors. 

followed, “we paid for ourselves many times over” said Cooper. 1-8 Describe the requirements for 
becoming a CPA. 

As she pursued the trail of fraud, Cooper was obstructed at every turn. k ) 





In late May 2002, Cooper’s team found a gaping hole in the books. The 

company had recorded billions of dollars of regular fees paid to local 

telephone companies as capital assets. This accounting trick allowed the company to turn a $662 million loss into a 
$2.4 billion profit in 2001. The company’s CFO, Scott Sullivan, called her to his office and asked her what they were up 
to. He then asked her to delay her investigation to the following quarter, but she refused. In June 2002, the company 
announced that it had inflated assets by $3.8 billion, the largest accounting fraud in history. When the investigation 
was complete, the total amount of the fraud had grown to an astonishing $11 billion. 


Sources: Adapted from 1. Amanda Ripley, “The Night Detective,” Time (December 30, 2002); 2. Susan Pulliam and Deborah Solomon, 
“Uncooking the Books: How Three Unlikely Sleuths Discovered Fraud at WorldCom,” The Wall Street Journal (October 30, 2002) p. Al. 


Each chapter's opening story illustrates important auditing principles based on realistic situations. Some of these stories are 
based on public information about the audits of real companies, whereas others are fictitious. Any resemblance in the latter 
stories to real firms, companies, or individuals is unintended and purely coincidental. 





he opening story involving Cynthia Cooper and WorldCom illustrates the importance of company controls and 

the role of auditors in detecting fraud. In the aftermath of WorldCom and other major financial reporting 
frauds, Congress passed the Sarbanes—Oxley Act, called by many the most significant securities legislation since the 
1933 and 1934 Securities Acts. The provisions of the Act apply to publicly held companies and their audit firms. 
Section 404 of the Act expanded the audit of public companies to include reporting on the effectiveness of the 
company’s internal control over financial reporting. 

This chapter introduces auditing and other assurance services provided by auditors, as well as auditors’ role in 
society. These services provide value by offering assurance on financial statements, the effectiveness of internal 
control, and other information. There is also a discussion of the types of audits and auditors, including the 
requirements for becoming a certified public accountant (CPA). 


NATURE OF AUDITING 


We have introduced the role of auditors in society, and how auditors’ responsibilities 
have increased to include reporting on the effectiveness of internal control over 
financial reporting for public companies. We now examine auditing more specifically 
using the following definition: 





Describe auditing. 








Auditing is the accumulation and evaluation of evidence about information to determine and report 
on the degree of correspondence between the information and established criteria. Auditing should 
be done by a competent, independent person. 





The definition includes several key words and phrases. For ease of understanding, 
we'll discuss the terms in a different order than they occur in the description. 


Information and To do an audit, there must be information in a verifiable form and some standards 

Established Criteria (criterAPAGga thPDFor En han GEMormation. Information can and does 
take many forms. Auditors routinely perform audits of quantifiable information, 
including companies’ financial statements and individuals’ federal income tax returns. 
Auditors also audit more subjective information, such as the effectiveness of computer 
systems and the efficiency of manufacturing operations. 

The criteria for evaluating information also vary depending on the information 
being audited. In the audit of historical financial statements by CPA firms, the 
criteria may be U.S. generally accepted accounting principles (GAAP) or Inter- 
national Financial Reporting Standards (IFRS). This means that in an audit of 
Boeing’s financial statements, the CPA firm will determine whether Boeing’s financial 
statements have been prepared in accordance with GAAP. For an audit of internal 
control over financial reporting, the criteria will be a recognized framework for 
establishing internal control, such as Internal Control—Integrated Framework issued 
by the Committee of Sponsoring Organizations of the Treadway Commission (widely 
known as COSO). 

For the audit of tax returns by the Internal Revenue Service (IRS), the criteria are 
found in the Internal Revenue Code. In an IRS audit of Boeing’s corporate tax return, 
the internal revenue agent uses the Internal Revenue Code as the criteria for correctness, 
rather than GAAP. 

For more subjective information, it is more difficult to establish criteria. Typically, 
auditors and the entities being audited agree on the criteria well before the audit 
starts. For example, in an audit of the effectiveness of specific aspects of computer 
operations, the criteria might include the allowable level of input or output errors. 


Accumulating and Evidence is any information used by the auditor to determine whether the information 
Evaluating Evidence being audited is stated in accordance with the established criteria. Evidence takes many 


different forms, including: 
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* Electronic and documentary data about transactions 

* Written and electronic communication with outsiders 
* Observations by the auditor 

* Oral testimony of the auditee (client) 


To satisfy the purpose of the audit, auditors must obtain a sufficient quality and 
volume of evidence. Auditors must determine the types and amount of evidence 
necessary and evaluate whether the information corresponds to the established 
criteria. This is a critical part of every audit and the primary subject of this book. 


The auditor must be qualified to understand the criteria used and must be competent to 
know the types and amount of evidence to accumulate to reach the proper conclusion 
after examining the evidence. The auditor must also have an independent mental 
attitude. The competence of those performing the audit is of little value if they are 
biased in the accumulation and evaluation of evidence. 

Auditors strive to maintain a high level of independence to keep the confidence of 
users relying on their reports. Auditors reporting on company financial statements are 
often called independent auditors. Even though such auditors are paid fees by the 
company, they are normally sufficiently independent to conduct audits that can be 
relied on by users. Even internal auditors—those employed by the companies they 
audit—usually report directly to top management and the board of directors, keeping 
the auditors independent of the operating units they audit. 


The final stage in the auditing process is preparing the audit report, which com- 
municates the auditor’s findings to users. Reports differ in nature, but all must inform 
readers of the degree of correspondence between the information audited and 
established criteria. Reports also differ in form and can vary from the highly technical 
type usually associated with financial sages i to a simple oral report in the 
case of an operational audit of a smal "PORE grtiv 

The key parts in the ject vee} aré 1 Bates AR Ce Ting an 
IRS agent’s audit of an individual’s tax ene as an example. To ee whether the 
tax return was prepared in a manner consistent with the requirements of the federal 
Internal Revenue Code, the agent examines supporting records provided by the 
taxpayer and from other sources, such as the taxpayer’s employer. After completing the 


ao Audit of a Tax Return ) 
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Competent, 


Independent Person 


Reporting 


audit, the internal revenue agent issues a report to the taxpayer assessing additional 
taxes, advising that a refund is due, or stating that there is no change in the status of the 
tax return. 


DISTINCTION BETWEEN AUDITING AND ACCOUNTING 





Distinguish between 
auditing and accounting. 





Many financial statement users and the general public confuse auditing with accounting. 
The confusion results because most auditing is usually concerned with accounting 
information, and many auditors have considerable expertise in accounting matters. 
The confusion is increased by giving the title “certified public accountant” to many 
individuals who perform audits. 

Accounting is the recording, classifying, and summarizing of economic events in a 
logical manner for the purpose of providing financial information for decision making. 
To provide relevant information, accountants must have a thorough understanding of 
the principles and rules that provide the basis for preparing the accounting information. 
In addition, accountants must develop a system to make sure that the entity’s economic 
events are properly recorded on a timely basis and at a reasonable cost. 

When auditing accounting data, auditors focus on determining whether recorded 
information properly reflects the economic events that occurred during the accounting 
period. Because U.S. or international accounting standards provide the criteria for 
evaluating whether the accounting information is properly recorded, auditors must 
thoroughly understand those accounting standards. 

In addition to understanding accounting, the auditor must possess expertise in the 
accumulation and interpretation of audit evidence. It is this expertise that distinguishes 
auditors from accountants. Determining the proper audit procedures, deciding the 


nam agO Se) ee Sroluating the results are unique to the auditor. 


ECONOMIC DEMAND FOR AUDITING 





Explain the importance 
of auditing in reducing 
information risk. 





To illustrate the need for auditing, consider the decision of a bank officer in making a 
loan to a business. This decision will be based on such factors as previous financial 
relationships with the business and the financial condition of the business as reflected 
by its financial statements. If the bank makes the loan, it will charge a rate of interest 
determined primarily by three factors: 


1. Risk-free interest rate. This is approximately the rate the bank could earn by 
investing in U.S. treasury notes for the same length of time as the business 
loan. 

2. Business risk for the customer. This risk reflects the possibility that the business 
will not be able to repay its loan because of economic or business conditions, 
such as a recession, poor management decisions, or unexpected competition in 
the industry. 

3. Information risk. Information risk reflects the possibility that the information 
upon which the business risk decision was made was inaccurate. A likely cause 
of the information risk is the possibility of inaccurate financial statements. 


Auditing has no effect on either the risk-free interest rate or business risk, but it 
can have a significant effect on information risk. If the bank officer is satisfied that 
there is minimal information risk because a borrower’s financial statements are 
audited, the bank’s risk is substantially reduced and the overall interest rate to the 
borrower can be reduced. The reduction of information risk can have a significant 
effect on the borrower’s ability to obtain capital at a reasonable cost. For example, 
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assume a large company has total interest-bearing debt of approximately $10 billion. If 
the interest rate on that debt is reduced by only 1 percent, the annual savings in interest 
is $100 million. 


As society becomes more complex, decision makers are more likely to receive unreliable 
information. There are several reasons for this: remoteness of information, biases and 
motives of the provider, voluminous data, and the existence of complex exchange 
transactions. 


Remoteness of Information In a global economy, it is nearly impossible for a 
decision maker to have much firsthand knowledge about the organization with which 
they do business. Information provided by others must be relied upon. When informa- 
tion is obtained from others, the likelihood of it being intentionally or unintentionally 
misstated increases. 


Biases and Motives of the Provider If information is provided by someone whose 
goals are inconsistent with those of the decision maker, the information may be biased 
in favor of the provider. The reason can be honest optimism about future events or an 
intentional emphasis designed to influence users. In either case, the result is a misstate- 
ment of information. For example, when a borrower provides financial statements to a 
lender, there is considerable likelihood that the borrower will bias the statements to 
increase the chance of obtaining a loan. The misstatement could be incorrect dollar 
amounts or inadequate or incomplete disclosures of information. 


Voluminous Data As organizations become larger, so does the volume of their 
exchange transactions. This increases the likelihood that improperly recorded informa- 
tion is included in the records—perhaps buried in a large amount of other information. 
For example, if a large government agency overpays a vendor’s invoice by $2,000, it is 
unlikely to be uncovered unless the agency has instituted reasonably complex procedures 


to find this type of misstatement. fApageo: IPDPEn#&rrhainaéyovered, 


the combined total can be significant. 


Complex Exchange Transactions In the past few decades, exchange transactions 
between organizations have become increasingly complex and therefore more difficult 
to record properly. For example, the correct accounting treatment of the acquisition of 
one entity by another poses relatively difficult accounting problems. Other examples 
include properly combining and disclosing the results of operations of subsidiaries in 
different industries and properly disclosing derivative financial instruments. 


After comparing costs and benefits, business managers and financial statement users 
may conclude that the best way to deal with information risk is simply to have it remain 
reasonably high. A small company may find it less expensive to pay higher interest costs 
than to increase the costs of reducing information risk. 

For larger businesses, it is usually practical to incur costs to reduce information 
risk. There are three main ways to do so. 


User Verifies Information The user may go to the business premises to examine 
records and obtain information about the reliability of the statements. Normally, this is 
impractical because of cost. In addition, it is economically inefficient for all users to 
verify the information individually. Nevertheless, some users perform their own 
verification. For example, the IRS does considerable verification of business and 
individual tax returns to determine whether the tax returns filed reflect the actual tax 
due the federal government. Similarly, if a business intends to purchase another 
business, it is common for the purchaser to use a special audit team to independently 
verify and evaluate key information of the prospective business. 


User Shares Information Risk with Management There is considerable 
legal precedent indicating that management is responsible for providing reliable 


Causes of 
Information Risk 


OBJECTIVE 1-4 





List the causes of 
information risk, and 
explain how this risk can 
be reduced. 





Reducing 
Information Risk 
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lovee Relationships Among Auditor, Client, and External Users 





Client or audit Auditor issues 
committee hires report relied upon 
auditor by users to reduce 


information risk 


Provides capital 







External 
Users 
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Client provides 
financial statements 
to users 











information to users. If users rely on inaccurate financial statements and as a result 
incur a financial loss, they may have a basis for a lawsuit against management. A 
difficulty with sharing information risk with management is that users may not be able 
to collect on losses. If a company is unable to repay a loan because of bankruptcy, it is 
unlikely that management will have sufficient funds to repay users. 


Audited Financial Statements Are Provided The most common way for users to 
obtain reliable information is to have an independent audit. Typically, management of 
a private company or the audit committee for a public company engages the auditor to 
provide assurances to users that the financial statements are reliable. 

External users such as stockholders and lenders who rely on those financial state- 
ments esi PD Riya Ge zitor’s report as an indication of the 
statements’ refiability. Decision makers can then use the audited information on the 
assumption that it is reasonably complete, accurate, and unbiased. They value the 
auditor’s assurance because of the auditor’s independence from the client and 
knowledge of financial statement reporting matters. Figure 1-2 illustrates the rela- 
tionships among the auditor, client, and financial statement users. 


ASSURANCE SERVICES 


An assurance service is an independent professional service that improves the quality 
of information for decision makers. Such services are valued because the assurance 





Describe assurance 


services and distinguish provider is independent and perceived as being unbiased with respect to the infor- 
audit services from other mation examined. Individuals who are responsible for making business decisions seek 
assurance and nonassurance assurance services to help improve the reliability and relevance of the information used 
services provided by CPAs. as the basis for their decisions. 





Assurance services can be done by CPAs or by a variety of other professionals. For 
example, Consumers Union, a nonprofit organization, tests a wide variety of products 
used by consumers and reports their evaluations of the quality of the products tested in 
Consumer Reports. The organization provides the information to help consumers make 
intelligent decisions about the products they buy. Many consumers consider the 
information in Consumer Reports more reliable than information provided by the 
product manufacturers because Consumers Union is independent of the manu- 
facturers. Similarly, the Better Business Bureau (BBB) online reliability program, the 
BBB Accredited Business Seal, allows Web shoppers to check BBB information about a 
company and be assured the company will stand behind its service. Other assurance 
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services provided by firms other than CPAs include the Nielsen television and Internet 
ratings and Arbitron radio ratings. 

The need for assurance is not new. CPAs have provided many assurance services 
for years, particularly assurances about historical financial statement information. CPA 
firms have also performed assurance services related to lotteries and contests to 
provide assurance that winners were determined in an unbiased fashion in accordance 
with contest rules. More recently, CPAs have expanded the types of assurance services 
they perform to include forward-looking and other types of information, such as 
company financial forecasts and Web site controls. For example, businesses and 
consumers using the Internet to conduct business need independent assurances about 
the reliability and security of electronic information. The demand for assurance 
services continues to grow as the demand increases for real-time electronic information. 


One category of assurance services provided by CPAs is attestation services. An 
attestation service is a type of assurance service in which the CPA firm issues a report 
about the reliability of an assertion that is made by another party. Attestation services 
fall into five categories: 


1. Audit of historical financial statements 

2. Audit of internal control over financial reporting 

3. Review of historical financial statements 

4, Attestation services on information technology 

5. Other attestation services that may be applied to a broad range of subject matter 


Audit of Historical Financial Statements In an audit of historical financial state- 
ments, management asserts that the statements are fairly stated in accordance with 
applicable U.S. or international accounting standards. An audit of these statements is a 
form of attestation service in which the auditor issues a written report expressing an 
opinion about whether the financial statements are fairly stated in accordance with the 
applicable accounting standards. ThApaigee RDEt Enhance xrervice 
provided by CPA firms. 

Publicly traded companies in the United States are required to have audits under 
the federal securities acts. Auditor reports can be found in all public companies’ annual 
financial reports. Most public companies’ audited financial statements can be accessed 
over the Internet from the Securities and Exchange Commission (SEC) EDGAR 
database or directly from each company’s Web site. Many privately held companies also 
have their annual financial statement audited to obtain financing from banks and other 
financial institutions. Government and not-for-profit entities often have audits to meet 
the requirements of lenders or funding sources. 


Audit of Internal Control over Financial Reporting For an audit of internal 
control over financial reporting, management asserts that internal controls have been 
developed and implemented following well established criteria. Section 404 of the 
Sarbanes—Oxley Act requires public companies to report management’s assessment of 
the effectiveness of internal control. The Act also requires auditors to attest to the 
effectiveness of internal control over financial reporting. This evaluation, which is 
integrated with the audit of the financial statements, increases user confidence about 


Attestation Services 








“AND THE OSCAR GOES TO... You probably recognize these statements from the Academy Awards, 
the Miss America Pageant, and the New York State Lottery drawing. What you 


“THERE SHE IS, MISS AMERICA...” may not recognize is what these well-known events have to do with assurance 
“WELCOME TO THE NEW YORK services. Each event is observed by CPAs from a major accounting firm to 


assure viewers that the contests were fairly conducted. So when you become 
STATE LOTTERY ...” a member of a CPA firm, you might not win an Oscar—but you could be on the 
Oscars! 
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Other 
Assurance Services 


future financial reporting, because effective internal controls reduce the likelihood of 
future misstatements in the financial statements. 


Review of Historical Financial Statements For a review of historical financial 
statements, management asserts that the statements are fairly stated in accordance 
with accounting standards, the same as for audits. The CPA provides a lower level of 
assurance for reviews of financial statements compared to a high level for audits, 
therefore less evidence is needed. A review is often adequate to meet financial state- 
ment users’ needs. It can be provided by the CPA firm at a much lower fee than an audit 
because less evidence is needed. Many nonpublic companies use this attestation option 
to provide limited assurance on their financial statements without incurring the cost of 
an audit. 


Attestation Services on Information Technology For attestations on information 
technology, management makes various assertions about the reliability and security of 
electronic information. Many business functions, such as ordering and making pay- 
ments, are conducted over the Internet or directly between computers using electronic 
data interchange (EDI). As transactions and information are shared online and in real 
time, businesspeople demand even greater assurances about information, transactions, 
and the security protecting them. WebTrust and SysTrust are examples of attestation 
services developed to address these assurance needs. 


* WebTrust services. The AICPA and the Canadian Institute of Chartered Accountants 
(CICA) jointly created the WebTrust attestation service. CPA firms that are licensed 
by the AICPA to perform this service provide assurance to users of Web sites 
through the CPA’s electronic WebTrust seal displayed on the Web site. This seal 
assures the user that the Web site owner has met established criteria related to 
business practices, transaction integrity, and information processes. 

* SysTrust services. The AICPA and CICA jointly created the SysTrust attestation 

ApagovPDEd Bnhrancdeitty in areas such as security and data 
integrity. Whereas the WebTrust assurance service is primarily designed to provide 
assurance to third-party users of a Web site, SysTrust services might be done by CPAs 
to provide assurance to management, the board of directors, or third parties about 
the reliability of information systems used to generate real-time information. 


The AICPA and CICA have developed five principles related to online privacy, 
security, processing integrity, availability, and confidentiality to be used in performing 
services such as WebTrust and SysTrust. These services and principles are discussed 
further in Chapter 25. 


Other Attestation Services CPAs provide numerous other attestation services. 
Many of these services are natural extensions of the audit of historical financial 
statements, as users seek independent assurances about other types of information. In 
each case, the organization being audited must provide an assertion before the CPA can 
provide the attestation. For example, when a bank loans money to a company, the loan 
agreement may require the company to engage a CPA to provide assurance about the 
company’s compliance with the financial provisions of the loan. The company 
requesting the loan must assert the loan provisions to be attested to before the CPA can 
accumulate the evidence needed to issue the attestation report. CPAs can also, for 
example, attest to the information in a client’s forecasted financial statements, which 
are often used to obtain financing. We discuss attestation services further in Chapter 25. 


Most of the other assurance services that CPAs provide do not meet the definition of 
attestation services, but the CPA must still be independent and must provide assurance 
about information used by decision makers. These assurance services differ from 
attestation services in that the CPA is not required to issue a written report, and the 
assurance does not have to be about the reliability of another party’s assertion about 
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GREEN __ Global interest in sustainability and corporate formal assurance increased from 30 percent to 
responsibility has triggered a surge in corporate 40 percent over the three year period. Major 
INITIATIVES reports that address these topics. In a 2008 KPMG accounting firms were the most common choice 
BRING _ survey, 80 percent of the Global Fortune 250 of assurance provider. Other assurance providers 
released environmental, social, and governance included certification bodies and technical expert 
ASSURANCE data in standalone reports or integrated into firms. 
OPPORTUNITIES, annual financial reports, up from 50 percent in 
the last survey three years earlier. Over half of Source: Adapted from KPMG International Survey 
COMPETITION these reports included some form of commentary of Corporate Responsibility Reporting 2008, KPMG 
or formal assurance on the reports. Reports with Sustainability Services, KPMG LLP. 








compliance with specified criteria. These other assurance service engagements focus on 
improving the quality of information for decision makers, just like attestation services. 
For example, a CPA might provide assurances on a company’s use of personal data 
provided by customers. 

CPA firms face a larger field of competitors in the market for other assurance 
services. Audits and some types of attestation services are limited by regulation to 
licensed CPAs, but the market for other forms of assurance is open to non-CPA 
competitors. For example, CPAs must compete with market research firms to assist 
clients in the preparation of customer surveys and in the evaluation of the reliability 
and relevance of survey information. However, CPA firms have the competitive 
advantage of their reputation for competence and independence. 

The types of assurance services that CPAs can provide are almost limitless. A survey 
of large CPA firms identified more than 200 assurance services that are currently being 
provided. Table 1-1 lists some of the other assurance service opportunities for CPAs. 


Additional information on the pezformance of. ncgseryices is included in 
Chapter 25. Apago PDF En ancer 


[ med Other Assurance Services Examples ) 


Other Assurance Services 








Service Activities 





Controls over and risks related to investments, 
including policies related to derivatives 


Assess the processes in a company’s investment practices to identify risks 
and to determine the effectiveness of those processes 





Mystery shopping Perform anonymous shopping to assess sales personnel dealings with 


customers and procedures they follow 





Assess risks of accumulation, distribution, 
and storage of digital information 


Assess security risks and related controls over electronic data, including 
the adequacy of backup and off-site storage 





Fraud and illegal acts risk assessment Develop fraud risk profiles, and assess the adequacy of company systems 


and policies in preventing and detecting fraud and illegal acts 





Compliance with trading policies and 
procedures 


Examine transactions between trading partners to ensure that transactions 
comply with agreements; identify risks in the agreements 





Compliance with entertainment royalty 
agreements 


Assess whether royalties paid to artists, authors, and others comply with 
royalty agreements 





ISO 9000 certifications Certify a company’s compliance with ISO 9000 quality control standards, 


which help ensure company products are of high quality 





Corporate responsibility and sustainability Report on whether the information in a company’s corporate 
responsibility report is consistent with company information and 


established reporting criteria 
SS eee 








Source: Adapted from AICPA Special Committee on Assurance Services. 
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Relationships Among Assurance Services, Attestation Services, and Nonassurance Services 













ASSURANCE SERVICES NONASSURANCE SERVICES 





Other Management 
Consulting 





ATTESTATION SERVICES 


































Audits Reviews 


















































Internal Control 


over Financial Reporting Certain 


Management 
Consulting 


Accounting and 
Bookkeeping 





























Attestation Services on 
Information Technology and 
Other Attestation Services 











Tax 
Services 




























Other Assurance Services 

















Nonassurance CPA firms perform numerous other services that generally fall outside the scope of 
Services Provided assurance services. Three specific examples are: 
by CPAs 1. Accounting and bookkeeping services 


2. ‘Tax services 
3... Management consulting services 
Apago PbF Enhancer 

MosTaccotnting and bookkeeping services, tax services, and management consult- 
ing services fall outside the scope of assurance services, although there is some 
common area of overlap between consulting and assurance services. While the primary 
purpose of an assurance service is to improve the quality of information, the primary 
purpose of a management consulting engagement is to generate a recommendation to 
management. 

Although the quality of information is often an important criterion in management 
consulting, this goal is normally not the primary purpose. For example, a CPA may be 
engaged to design and install a new information technology system for a client as a 
consulting engagement. The purpose of that engagement is to install the new system, 
with the goal of improved information being a by-product of that engagement. 

Figure 1-3 reflects the relationship between assurance and nonassurance services. 
Audits, reviews, reports on the effectiveness of internal control over financial reporting, 
attestation services on information technology, and other attestation services are all 
examples of attestation services, which fall under the scope of assurance services. Some 


assurance services, such as WebTrust and SysTrust, also meet the criteria of attestation 
services. 


TYPES OF AUDITS 


OBJECTIVE 1-6 CPAs perform three primary types of audits, as illustrated with examples in Table 1-2: 


Differentiate the three main 1. Operational audit 
types of audits. 2. Compliance audit 
3. Financial statement audit 
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Examples of the Three Types of Audits 




















Type of Audit Example Information Established Criteria Available Evidence 
Operational Evaluate whether Number of payroll Company standards Error reports, payroll 
audit the computerized records processed in for efficiency and records, and payroll 
payroll processing for in a month, costs of effectiveness in processing costs 
a Chinese subsidiary the department, and payroll department 
is operating efficiently number of errors 
and effectively made 
Compliance Determine whether Company records Loan agreement Financial statements 
audit bank requirements provisions and calculations by 
for loan continuation the auditor 
have been met 
Financial Annual audit of Boeing’s Boeing's financial Generally accepted Documents, records, 
statement financial statements statements accounting principles and outside sources 
audit of evidence 
X 4 
An operational audit evaluates the efficiency and effectiveness of any part of an Operational Audits 


organization’s operating procedures and methods. At the completion of an operational 
audit, management normally expects recommendations for improving operations. For 
example, auditors might evaluate the efficiency and accuracy of processing payroll 
transactions in a newly installed computer system. Another example, where most 
accountants feel less qualified, is evaluating the efficiency, accuracy, and customer 
satisfaction in processing the distribution of letters and packages by a company such as 
Federal Express. 

In operational auditing, the reviews are not limited to accounting. They can 
include the evaluation of organiza pager PDb ui phaACeuction 
methods, marketing, and any other area in which the auditor is qualified. Because of 
the many different areas in which operational effectiveness can be evaluated, it is 
impossible to characterize the conduct of a typical operational audit. In one organi- 
zation, the auditor might evaluate the relevancy and sufficiency of the information 
used by management in making decisions to acquire new fixed assets. In a different 
organization, the auditor might evaluate the efficiency of the information flow in 
processing sales. 

It is more difficult to objectively evaluate whether the efficiency and effectiveness 
of operations meets established criteria than it is for compliance and financial statement 
audits. Also, establishing criteria for evaluating the information in an operational audit 
is extremely subjective. In this sense, operational auditing is more like management 
consulting than what is usually considered auditing. Operational auditing is discussed 
in greater depth in Chapter 26. 





XBRL __ Extensible Business Reporting Language (XBRL) 
is a language for the electronic communication 
ELECTRONIC DATA of business and financial data developed by a 
TO IMPROVE _ Non-profit consortium of companies and 
government agencies to enhance the usability 
FINANCIAL of financial information. XBRL is used to encode 
REPORTING __ financial statements using data tags so that the data. 


financial information can be read automatically 
by XBRL-enabled software and more easily 
sorted and compared. 





companies are not required to obtain assurance 
from auditors or other parties on the interactive 


Sources: 1. “Interactive Data to Improve Financial 
Reporting,” SEC Final Rules (sec.gov/rules/final/2009/ 
33-9002.pdf); 2. XBRL International (www.xbrl.org). 


In 2009 the SEC adopted rules requiring public 
companies to provide interactive financial state- 
ment data in XBRL format. Although auditors may 
attest to this data under attestation standards, 
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Compliance Audits 


Financial 
Statement Audits 


A compliance audit is conducted to determine whether the auditee is following specific 
procedures, rules, or regulations set by some higher authority. Following are examples 
of compliance audits for a private business. 


* Determine whether accounting personnel are following the procedures pre- 

scribed by the company controller. 

* Review wage rates for compliance with minimum wage laws. 

» Examine contractual agreements with bankers and other lenders to be sure the 

company is complying with legal requirements. 

Governmental units, such as school districts, are subject to considerable compliance 
auditing because of extensive government regulation. Many private and not-for-profit 
organizations have prescribed policies, contractual agreements, and legal requirements 
that may require compliance auditing. Compliance audits for federally funded grant 
programs are often done by CPAs and are discussed in detail in Chapter 26. 

Results of compliance audits are typically reported to management, rather than 
outside users, because management is the primary group concerned with the extent 
of compliance with prescribed procedures and regulations. Therefore, a significant 
portion of work of this type is often done by auditors employed by the organizational 
units. When an organization such as the IRS wants to determine whether individuals or 
organizations are complying with its requirements, the auditor is employed by the 
organization issuing the requirements. 


A financial statement audit is conducted to determine whether the financial statements 
(the information being verified) are stated in accordance with specified criteria. 
Normally, the criteria are U.S. or international accounting standards, although auditors 
may conduct audits of financial statements prepared using the cash basis or some other 
basis of accounting appropriate for the organization. In determining whether financial 
statements are fairly stated in accordance with accounting standards, the auditor gathers 


Apago PDF Enhancer 





FRAUD FIGHTERS: 
DEMAND FOR 
FORENSIC 
ACCOUNTANTS 
REMAINS STRONG 
THROUGH 
ECONOMIC 
DOWNTURN 


When Ron Forster conducts interviews, he 
watches his subjects as much as he listens to 
them. Even a seemingly innocuous gesture — an 


computing forensic experts usually have a 
background in IT and receive accounting training 
on the job. 


interviewee moving his hand away from his face 
before answering a sensitive question — could be 
a sign the subject is lying. Mr. Forster is a forensic 
accountant, a growing subset of the accounting 
field focused on uncovering financial fraud. 

And while forensic accountants do their share 
of number crunching and computer analysis, they 
also do work that resembles television crime 
show investigations. “Forensic accountants are 
really financial detectives,” says Alex Brown of 
the United Kingdom Institute of Chartered 
Accountants’ forensic group. Brown has worked 
on cases involving Caribbean money laundering, 
Eastern European smuggling, and major 
commercial disputes. Forensic accountants use 
rigorous accounting skills and a flair for 
investigation to sniff out fraud, uncover money- 
laundering and trace missing assets. 

The day-to-day work of a forensic accountant 
involves interviewing key people, studying 
accounts and, increasingly, examining electronic 
documents. The ever-growing volume of such 
documentation means that there is now a new 
branch of forensic accounting. Specialist 
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Forensic accounting is booming, and 
continues to expand through the recent global 
recession. Over a five year period, the number 
of fraud examiners certified by the Association 
of Certified Fraud examiners increased from 
just over 15,000 to nearly 25,000. “During a 
declining economy, fraud activity often comes 
to light” says Marc Brdar, a forensic accountant 
in Pittsburgh. “Prosperity can hide a multitude 
of sins.” 

“| was attracted to forensic accountancy 
because, like science, you need to have investi- 
gative skills,” says forensic trainee Amy Hawkins. 
“| really like the sleuthing side of the job, where 
you're finding out whodunit and where the 
money went.’ Forensic accountant Simon Bevan 
adds, “When you find that killer document it’s a 
real reward for all your hard work.” 


Sources: Adapted from 1. Anya Sostek, “Fraud 
Fighters: Forensic Accountants on Front Line in 
Fight Against Fraud,” Pittsburgh Post Gazette 
(March 29, 2009); 2. Amy McClellan, “Forensic 
Accountancy: Hot on the Trail of the Fraudsters,” 
The Independent (April 26, 2006). 





evidence to determine whether the statements contain material errors or other 
misstatements. The primary focus of this book is on financial statement audits. 

As businesses increase in complexity, it is no longer sufficient for auditors to focus 
only on accounting transactions. An integrated approach to auditing considers both the 
risk of misstatements and operating controls intended to prevent misstatements. The 
auditor must also have a thorough understanding of the entity and its environment. 
This understanding includes knowledge of the client’s industry and its regulatory and 
operating environment, including external relationships, such as with suppliers, 
customers, and creditors. The auditor also considers the client’s business strategies and 
processes and critical success factors related to those strategies. This analysis helps the 
auditor identify business risks associated with the client’s strategies that may affect 
whether the financial statements are fairly stated. 


TYPES OF AUDITORS 


Several types of auditors are in practice today. The most common are certified public 
accounting firms, government accountability office auditors, internal revenue agents, 
and internal auditors. 


Certified public accounting firms are responsible for auditing the published historical 
financial statements of all publicly traded companies, most other reasonably large 
companies, and many smaller companies and noncommercial organizations. Because 
of the widespread use of audited financial statements in the U.S. economy, as well as 
businesspersons’ and other users’ familiarity with these statements, it is common to use 
the terms auditor and CPA firm synonymously, even though several different types of 
auditors exist. The title certified pAkpeagonPDEiinkance Mditors 
who express audit opinions on financial statements must be licensed as CPAs. CPA 
firms are often called external auditors or independent auditors to distinguish them 
from internal auditors. 


A government accountability office auditor is an auditor working for the U.S. Govern- 
ment Accountability Office (GAO), a nonpartisan agency in the legislative branch of 
the federal government. Headed by the Comptroller General, the GAO reports to and is 
responsible solely to Congress. 

The GAO’s primary responsibility is to perform the audit function for Congress, 
and it has many of the same audit responsibilities as a CPA firm. The GAO audits much 
of the financial information prepared by various federal government agencies before it 
is submitted to Congress. Because the authority for expenditures and receipts of 
governmental agencies is defined by law, there is considerable emphasis on compliance 
in these audits. 

An increasing portion of the GAO’s audit efforts are devoted to evaluating the 
operational efficiency and effectiveness of various federal programs. Also, because of 
the immense size of many federal agencies and the similarity of their operations, the 
GAO has made significant advances in developing better methods of auditing through 
the widespread use of highly sophisticated statistical sampling and computer risk 
assessment techniques. 

In many states, experience as a GAO auditor fulfills the experience requirement for 
becoming a CPA. In those states, if an individual passes the CPA examination and 
fulfills the experience stipulations by becoming a GAO auditor, he or she may then 
obtain a CPA certificate. 

As a result of their great responsibility for auditing the expenditures of the federal 
government, their use of advanced auditing concepts, their eligibility to be CPAs, and 





Identify the primary types 
of auditors. 





Certified Public 
Accounting Firms 


Government 
Accountability 
Office Auditors 
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Internal Revenue 
Agents 


Internal Auditors 


their opportunities for performing operational audits, GAO auditors are highly 
regarded in the auditing profession. 


The IRS, under the direction of the Commissioner of Internal Revenue, is responsible 
for enforcing the federal tax laws as they have been defined by Congress and inter- 
preted by the courts. A major responsibility of the IRS is to audit taxpayers’ returns to 
determine whether they have complied with the tax laws. These audits are solely 
compliance audits. The auditors who perform these examinations are called internal 
revenue agents. 

It might seem that the audit of returns for compliance with the federal tax laws is a 
simple and straightforward problem, but nothing is farther from the truth. Tax laws are 
highly complicated, and there are hundreds of volumes of interpretations. The tax 
returns being audited vary from the simple returns of individuals who work for only 
one employer and take the standard tax deduction to the highly complex returns of 
multinational corporations. Taxation problems may involve individual income taxes, 
gift taxes, estate taxes, corporate taxes, trusts, and so on. An auditor involved in any of 
these areas must have considerable tax knowledge and auditing skills to conduct effec- 
tive audits. 


Internal auditors are employed by all types of organizations to audit for management, 
much as the GAO does for Congress. Internal auditors’ responsibilities vary considerably, 
depending on the employer. Some internal audit staffs consist of only one or two 
employees doing routine compliance auditing. Other internal audit staffs may have 
more than 100 employees who have diverse responsibilities, including many outside the 
accounting area. Many internal auditors are involved in operational auditing or have 
expertise in evaluating computer systems. 

To maintain independence from other business functions, the internal audit group 
phe. o} orts dir Ae) th ident, a high executive officer, or the audit 
com a Vefe) oF Pa aelet bekerS nternal auditors cannot be entirely 
independent of the entity as long as an employer—employee relationship exists. Users 
from outside the entity are unlikely to want to rely on information verified solely 
by internal auditors because of their lack of independence. This lack of independence is 
the major difference between internal auditors and CPA firms. 

In many states, internal audit experience can be used to fulfill the experience 
requirement for becoming a CPA. Many internal auditors pursue certification as a 
certified internal auditor (CIA), and some internal auditors pursue both the CPA and 
CIA designations. 





CBT-e: 

THE CPA EXAM 
GETS A 
MAKEOVER 


The CPA examination changed to computer-based 
testing (CBT) in 2004. The next generation of the 


advancement,” says Colleen Conrad, Chair of the 
AICPA Board of Examiners. “More than a series of 


exam, known as CBT-e (the “e” is for evolution), 
became effective January 1, 2011. The revision 
includes new content and skill specification 
outline revisions, changes in the structure of the 
exam and weighting of individual exam com- 
ponents, coverage of international auditing and 
financial reporting standards, and new task- 
|based simulations. Although the overall length 
of the exam did not change, the testing times 
for individual sections were adjusted to reflect 
the new content specifications. 

“CBT-e — the next generation of the 
CPA Examination — represents a significant 
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examination improvements, CBT-e is a leap into 
a more advanced technological environment - 
an environment that is necessary in order to 
enhance the operational and psychometric 
quality of the CPA Examination, improve the 
candidate experience, and provide a platform 
for further innovation.” 


Sources: Adapted from 1. The Uniform CPA 
Examination Alert (Spring 2009); 2. The Uniform 
CPA Examination Alert (Fall 2009) (www.cpa.org). 


CERTIFIED PUBLIC ACCOUNTANT 


Use of the title certified public accountant (CPA) is regulated by state law through the 
licensing departments of each state. Within any state, the regulations usually differ for 
becoming a CPA and retaining a license to practice after the designation has been 
initially achieved. To become a CPA, three requirements must be met. These are 
summarized in Figure 1-4. 

For a person planning to become a CPA, it is essential to know the requirements in 
the state where he or she plans to obtain and maintain the CPA designation. The best 
source of that information is the State Board of Accountancy for the state in which the 
person plans to be certified. The National Association of State Boards of Accountancy 
(NASBA) Web site (www.nasba.org) provides information on licensure requirements 
and links to the Web site of each state board. It is possible to transfer the CPA desig- 
nation from one state to another, but additional requirements often must be met for 
formal education, practice experience, or continuing education. 

Most young professionals who want to become CPAs start their careers working 
for a CPA firm. After they become CPAs, many leave the firm to work in industry, 
government, or education. These people may continue to be CPAs but often give up 
their right to practice as independent auditors. To maintain the right to practice as 
independent auditors in most states, CPAs must meet defined continuing education 
and licensing requirements. Therefore, it is common for accountants to be CPAs who 
do not practice as independent auditors. 

Information about the CPA examination can be found in The Uniform CPA 
Examination Candidate Bulletin and the Content and Skill Specifications for the Uniform 
CPA Examination, both of which can be downloaded from the CPA Examination site 
found on the AICPA Web site (www.aicpa.org). The AICPA also publishes selected 
examination questions with unoffigg i to ication 
outlines of the examination. Apayo ‘PDF Entiat cet 

Some of the questions and problems at the end of the chapters in this book have 
been taken from past CPA examinations. They are designated “AICPA” or “AICPA 
adapted.” 


amerod Three Requirements for Becoming a CPA | 


Educational 
Requirement 


OBJECTIVE 1-8 


Describe the requirements 
for becoming a CPA. 




















Uniform CPA Experience 
Examination Requirement Requirement 




















Normally, an undergraduate or 
graduate degree with a major 
in accounting, including a 
minimum number of 


semester credits before 
receiving the CPA certificate. 


























Computer-based examination 
offered at various testing centers. 
Examination sections are as follows: 


¢ Auditing and Attestation 


accounting credits. Most states rhe experience working for 
now require 150 semester = Fingneial Accounting and Repartin governmental units or in 
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SUMMARY 


This chapter defined auditing and distinguished auditing from accounting. Audits are 
valuable because they reduce information risk, which lowers the cost of obtaining capital. 
The chapter also described attestation and assurance services, including reports on the 
effectiveness of internal control over financial reporting, and described the relationships 
among audits, attestation services, and assurance services. The chapter also described 
different types of audits and auditors and requirements for becoming a CPA. 


ESSENTIAL TERMS 


Accounting—the recording, classifying, 
and summarizing of economic events in a 
logical manner for the purpose of pro- 
viding financial information for decision 
making 


Assurance service—an independent pro- 
fessional service that improves the quality 
of information for decision makers 


Attestation service—a type of assurance 
service in which the CPA firm issues a 
report about the reliability of an assertion 
that is the responsibility of another party 


Audit of historical financial statements— 


a cr RPago” PDF Brifv¥tanc 


auditor Isues™a written report stating 
whether the financial statements are in 
material conformity with accounting 
standards 


Audit report—the communication of 
audit findings to users 


Auditing—the accumulation and evalu- 
ation of evidence about information to 
determine and report on the degree of 
correspondence between the information 
and established criteria 


Certified public accountant—a person 
who has met state regulatory requirements, 
including passing the Uniform CPA 
Examination, and has thus been certified; 
a CPA may have as his or her primary 
responsibility the performance of the 
audit function on published historical 
financial statements of commercial and 
noncommercial financial entities 


Compliance audit—(1) a review of an 
organization's financial records performed 
to determine whether the organization is 
following specific procedures, rules, or 
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regulations set by some higher authority; 
(2) an audit performed to determine 
whether an entity that receives financial 
assistance from the federal government 
has complied with specific laws and 
regulations 


Evidence—any information used by the 
auditor to determine whether the infor- 
mation being audited is stated in accord- 
ance with established criteria 


Financial statement audit—an audit 
conducted to determine whether the 
overall financial statements of an entity 
are stated in accordance with specified 


@Qeria (usually U.S. or international 


accounting standards) 


Government accountability office audi- 
tor—an auditor working for the U.S. 
Government Accountability Office (GAO); 
the GAO reports to and is responsible 
solely to Congress 


Independent auditors—certified public 
accountants or accounting firms that 
perform audits of commercial and non- 
commercial financial entities 


Information risk—the risk that informa- 
tion upon which a business decision is 
made is inaccurate 


Internal auditors—auditors employed by 
a company to audit for the company’s 
board of directors and management 


Internal control over financial reporting— 
an engagement in which the auditor reports 
on the effectiveness of internal control 
over financial reporting; such reports are 
required for accelerated filer public 
companies under Section 404 of the 
Sarbanes—Oxley Act 


Internal revenue agents—auditors who 
work for the Internal Revenue Service 
(IRS) and conduct examinations of tax- 
payers’ returns 





Operational audit—a review of any part 
of an organization’s operating procedures 
and methods for the purpose of evalu- 
ating efficiency and effectiveness 


Review of historical financial state- 
ments—a form of attestation in which a 
CPA firm issues a written report that 


provides less assurance than an audit as 
to whether the financial statements are 
in material conformity with accounting 
standards 


Sarbanes—Oxley Act—a federal securities 
law passed in 2002 that provides for 
additional regulation of public companies 
and their auditors; the Act established the 
Public Company Accounting Oversight 
Board and also requires auditors to audit 
the effectiveness of internal control over 
financial reporting 


REVIEW QUESTIONS 


1-1 (Objective 1-5) Explain the relationships among audit services, attestation services, and 
assurance services, and give examples of each. 


1-2 (Objective 1-3) Discuss the major factors in today’s society that have made the need for 
independent audits much greater than it was 50 years ago. 


1-3 (Objective 1-3) Distinguish among the following three risks: risk-free interest rate, 
business risk, and information risk. Which one or ones does the auditor reduce by per- 
forming an audit? 


1-4 (Objective 1-4) Identify the major causes of information risk and identify the three 
main ways information risk can be reduced. What are the advantages and disadvantages of 
each? 


1-5 (Objective 1-1) Explain what is Apage...RDF.,.: nh 0 Seater 


between information and established criteria. What are the information and established 
criteria for the audit of Jones Company’s tax return by an internal revenue agent? What 
are they for the audit of Jones Company’s financial statements by a CPA firm? 


1-6 (Objectives 1-1, 1-7) Describe the nature of the evidence the internal revenue agent 
will use in the audit of Jones Company’s tax return. 


1-7 (Objective 1-2) In the conduct of audits of financial statements, it would be a serious 
breach of responsibility if the auditor did not thoroughly understand accounting. 
However, many competent accountants do not have an understanding of the auditing 
process. What causes this difference? 


1-8 (Objective 1-6) What are the differences and similarities in audits of financial state- 
ments, compliance audits, and operational audits? 


1-9 (Objectives 1-6, 1-7) List five examples of specific operational audits that can be 
conducted by an internal auditor in a manufacturing company. 


1-10 (Objectives 1-5, 1-6) What knowledge does the auditor need about the client’s 
business in an audit of historical financial statements? Explain how this knowledge may be 
useful in performing other assurance or consulting services for the client. 


1-11 (Objective 1-7) What are the major differences in the scope of the audit respon- 
sibilities for CPAs, GAO auditors, IRS agents, and internal auditors? 


1-12 (Objective 1-8) Identify the four parts of the Uniform CPA Examination. 


1-13 (Objective 1-5) Explain why CPAs need to be knowledgeable about information 
technology, including e-commerce technologies. 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


1-14 (Objectives 1-1, 1-3, 1-5) The following questions deal with audits by CPA firms. 
Choose the best response. 


a. Which of the following best describes why an independent auditor is asked to express 
an opinion on the fair presentation of financial statements? 

(1) It is difficult to prepare financial statements that fairly present a company’s 
financial position, operations, and cash flows without the expertise of an inde- 
pendent auditor. 

(2) Itis management’s responsibility to seek available independent aid in the appraisal 
of the financial information shown in its financial statements. 

(3) The opinion of an independent party is needed because a company may not be 
objective with respect to its own financial statements. 

(4) It isa customary courtesy that all stockholders of a company receive an independent 
report on management’s stewardship of the affairs of the business. 


b. Independent auditing can best be described as 

(1) abranch of accounting. 

(2) a discipline that attests to the results of accounting and other functional operations 
and data. 

(3) a professional activity that measures and communicates financial and business 
data. 

(4) a regulatory function that prevents the issuance of improper financial informa- 
tion. 


c. Which of the following professional services is an attestation engagement? 
(1) A consulting service engagement to provide computer-processing advice to a 
client. 
(2) An engagement to report on. compliance with statutory requirements. 


(APAaAGgGoe tR DEeoknhaneekial and state tax returns. 


(4) The compilation of financial statements from a client’s financial records. 


d. Which of the following attributes is likely to be unique to the audit work of CPAs as 
compared to the work performed by practitioners of other professions? 
(1) Due professional care. 
(2) Competence. 
(3) Independence. 
(4) Complex body of knowledge. 


1-15 (Objectives 1-6, 1-7) The following questions deal with types of audits and auditors. 
Choose the best response. 


a. Operational audits generally have been conducted by internal auditors and govern- 
mental audit agencies but may be performed by certified public accountants. A 
primary purpose of an operational audit is to provide 
(1) a means of assurance that internal accounting controls are functioning as 
planned. 

(2) a measure of management performance in meeting organizational goals. 

(3) the results of internal examinations of financial and accounting matters to a 
company’s top-level management. 

(4) aid to the independent auditor, who is conducting the audit of the financial 
statements. 


b. In comparison to the external auditor, an internal auditor is more likely to be con- 
cerned with 
(1) internal administrative control. 
(2) cost accounting procedures. 
(3) operational auditing. 
(4) internal control. 
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Which of the following best describes the operational audit? 

(1) It requires the constant review by internal auditors of the administrative controls 
as they relate to the operations of the company. 

(2) It concentrates on implementing financial and accounting control in a newly 
organized company. 

(3) It attempts and is designed to verify the fair presentation of a company’s results of 
operations. 

(4) It concentrates on seeking aspects of operations in which waste could be reduced 
by the introduction of controls. 


. Compliance auditing often extends beyond audits leading to the expression of 


opinions on the fairness of financial presentation and includes audits of efficiency, 
economy, effectiveness, as well as 

(1) accuracy. 

(2) evaluation. 

(3) adherence to specific rules or procedures. 

(4) internal control. 


(Objective 1-5) The list below indicates various audit, attestation, and assurance 


engagements involving auditors. 


1 


2. 


10. 


a. 


b. 


1-17 
with 


. A report on the effectiveness of internal control over financial reporting as required 

by Section 404 of the Sarbanes—Oxley Act. 

An auditor’s report on whether the financial statements are fairly presented in 

accordance with International Financial Reporting Standards. 

. A report stating whether the company has complied with restrictive covenants 
related to officer compensation vs) ayment Wieden ined in abank loan 
Accent ABAYS" PDF" EAHAAGE? 

. An electronic seal indicating that an electronic seller observes certain practices. 

. A report indicating whether a governmental entity has complied with certain 
government regulations. 

. A report on the examination of a financial forecast. 

. A review report that provides limited assurance about whether financial statements 
are fairly stated in accordance with U.S. GAAP. 

. Areport on management's assertion on the company’s level of carbon emissions. 

. A report about management’s assertion on the effectiveness of controls over the 

availability, reliability, integrity, and maintainability of its accounting information 

system. 

An evaluation of the effectiveness of key measures used to assess an entity’s success 

in achieving specific targets linked to an entity’s strategic plan and vision. 


Explain or use a diagram to indicate the relationships among audit services, attesta- 
tion services, and assurance services. 


For each of the services listed above, indicate the type of service from the list that 
follows. 

(1) An audit of historical financial statements. 

(2) An attestation service other than an audit service. 

(3) An assurance service that is not an attestation service. 


(Objective 1-3) Busch Corporation has an existing loan in the amount of $4.5 million 
an annual interest rate of 5.5%. The company provides an internal company-prepared 


financial statement to the bank under the loan agreement. Two competing banks have 
offered to replace Busch Corporation’s existing loan agreement with a new one. United 
National Bank has offered to loan Busch $4.5 million at a rate of 4.5% but requires Busch 
to provide financial statements that have been reviewed by a CPA firm. First City Bank has 
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Required 


Required 


offered to loan Busch $4.5 million at a rate of 3.5% but requires Busch to provide financial 
statements that have been audited by a CPA firm. Busch Corporation’s controller 
approached a CPA firm and was given an estimated cost of $20,000 to perform a review and 
$45,000 to perform an audit. 


a. Explain why the interest rate for the loan that requires a review report is lower than 
that for the loan that did not require a review. Explain why the interest rate for the 
loan that requires an audit report is lower than the interest rate for the other two 
loans. 


b. Calculate Busch Corporation’s annual costs under each loan agreement, including 
interest and costs for the CPA firm’s services. Indicate whether Busch should keep its 
existing loan, accept the offer from United National Bank, or accept the offer from 
First City Bank. 


c. Assume that United National Bank has offered the loan at a rate of 4.0% with a review, 
and the cost of the audit has increased to $55,000 due to new auditing standards 
requirements. Indicate whether Busch should keep its existing loan, accept the offer 
from United National Bank, or accept the offer from First City Bank. 


d. Discuss why Busch may desire to have an audit, ignoring the potential reduction in 
interest costs. 


e. Explain how a strategic understanding of the client’s business may increase the value 
of the audit service. 


1-18 (Objectives 1-3, 1-4, 1-5) Consumers Union is a nonprofit organization that provides 
information and counsel on consumer goods and services. A major part of its function is 
the testing of different brands of consumer products that are purchased on the open 
market and then the reporting of the results of the tests in Consumer Reports, a monthly 
publication. Examples of the types of products it tests are middle-sized automobiles, 
residential dehumidifiers, flat-screen TVs, and boys’ jeans. 


a. LApAaAge rPDEvEnhancemnsumers Union similar to assurance 
services provided by CPA firms? 


b. Compare the concept of information risk introduced in this chapter with the infor- 
mation risk problem faced by a buyer of an automobile. 


c. Compare the four causes of information risk faced by users of financial statements as 
discussed in this chapter with those faced by a buyer of an automobile. 


d. Compare the three ways users of financial statements can reduce information risk 
with those available to a buyer of an automobile. 


1-19 (Objective 1-1) James Burrow is the loan officer for the National Bank of Dallas. 
National has a loan of $325,000 outstanding to Regional Delivery Service, a company 
specializing in delivering products of all types on behalf of smaller companies. National’s 
collateral on the loan consists of 25 small delivery trucks with an average original cost of 
$24,000. 

Burrow is concerned about the collectibility of the outstanding loan and whether the 
trucks still exist. He therefore engages Samantha Altman, CPA, to count the trucks, using 
registration information held by Burrow. She was engaged because she spends most of her 
time auditing used automobile and truck dealerships and has extensive specialized 
knowledge about used trucks. Burrow requests that Altman issue a report stating the 
following: 


1. Which of the 25 trucks is parked in Regional’s parking lot on the night of June 30, 
2011. 

2. Whether all of the trucks are owned by Regional Delivery Service. 

. The condition of each truck, using the guidelines of poor, good, and excellent. 

4, The fair market value of each truck, using the current “blue book” for trucks, which 
states the approximate wholesale prices of all used truck models, and also using the 
poor, good, and excellent condition guidelines. 


1S) 
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a. For each of the following parts of the definition of auditing, state which part of the 
preceding narrative fits the definition: 
(1) Information 
(2) Established criteria 
(3) Accumulating and evaluating evidence 
(4) Competent, independent person 
(5) Reporting results 


b. Identify the greatest difficulties Virms is likely to have doing this audit. 


1-20 (Objective 1-7) Five college seniors with majors in accounting are discussing alter- 
native career plans. The first senior plans to become an internal revenue agent because his 
primary interest is income taxes. He believes the background in tax auditing will provide 
him with better exposure to income taxes than will any other available career choice. The 
second senior has decided to go to work for a CPA firm for at least 5 years, possibly as a 
permanent career. She believes the variety of experience in auditing and related fields offers 
a better alternative than any other available choice. The third senior has decided on a career 
in internal auditing with a large industrial company because of the many different aspects 
of the organization with which internal auditors become involved. The fourth senior plans 
to become an auditor for the GAO because she believes that this career will provide 
excellent experience in computer risk assessment techniques. The fifth senior plans to 
pursue some aspect of auditing as a career but has not decided on the type of organization 
to enter. He is especially interested in an opportunity to continue to grow professionally, 
but meaningful and interesting employment is also a consideration. 


a. What are the major advantages and disadvantages of each of the four types of auditing 
careers? 


b. What other types of auditing careers are available to those who are qualified? 


auditors often conduct audits or revi OAS APAGiOl ok, F Enhancer 


1. Federal income tax returns of an officer of the corporation to determine whether he 
or she has included all taxable income in his or her return. 

2. Disbursements of a branch of the federal government for a special research project 
to determine whether it would have been possible to accomplish the same research 
results at a lower cost to the taxpayers. 

3. Computer operations of a corporation to evaluate whether the computer center is 
being operated as efficiently as possible. 

4, Annual statements for the use of management. 

5. Operations of the IRS to determine whether the internal revenue agents are using 
their time efficiently in conducting audits. 

6. Statements for bankers and other creditors when the client is too small to have an 
audit staff. 

7. Financial statements of a branch of the federal government to make sure that the 
statements present fairly the actual disbursements made during a period of time. 

8. Federal income tax returns of a corporation to determine whether the tax laws have 
been followed. 

9. Financial statements for use by stockholders when there is an internal audit staff. 

10. A bond indenture agreement to make sure a company is following all requirements 
of the contract. 

11. The computer operations of a large corporation to evaluate whether the internal 
controls are likely to prevent misstatements in accounting and operating data. 

12. Disbursements of a branch of the federal government for a special research project 
to determine whether the expenditures were consistent with the legislative bill that 
authorized the project. 


1-21 (Objectives 1-6, 1-7) In the normal course of RDF Eah their responsibilities, 


a. For these 12 examples, state the most likely type of auditor (CPA, GAO, IRS, or 
internal) to perform each. 
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Required 


b. In each example, state the type of audit (financial statement audit, operational audit, 
or compliance audit). 


1-22 (Objectives 1-3, 1-5) Dave Czarnecki is the managing partner of Czarnecki and 
Hogan, a medium-sized local CPA firm located outside of Chicago. Over lunch, he is 
surprised when his friend James Foley asks him, “Doesn’t it bother you that your clients 
don’t look forward to seeing their auditors each year? Dave responded, “Well, auditing is 
only one of several services we provide. Most of our work for clients does not involve 
financial statement audits, and our audit clients seem to like interacting with us.” 


a. Identify ways in which a financial statement audit adds value for clients. 
b. List other services other than audits that Czarnecki and Hogan likely provides. 


c. Assume Czarnecki and Hogan has hired you as a consultant to identify ways in which 
they can expand their practice. Identify at least one additional service that you believe 
the firm should provide and explain why you believe this represents a growth 
opportunity for CPA firms. 


INTERNET PROBLEM 1-1: CPA REQUIREMENTS 


Required 


Individuals are licensed as CPAs by individual states. Information on the requirements for 
each state can be found on the National Association of State Boards of Accountancy 
(NASBA) web site (www.nasba.org). The Uniform CPA Examination is administered by 
the American Institute of Certified Public Accountants (AICPA), and information on CPA 
examination requirements can be found on the AICPA web site (www.aicpa.org). 


a. Identify the education requirements to be eligible to sit for the CPA exam in your 
state. Include any specific educational content requirements. 


ist any frequent] PHF“ questians (FAQ) for _o state, if there are any. 


AP aO.,;P s Anan ce 


d. What was the passing rate for each exam section in the most recent quarter? 
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THE CPA PROFESSION 


Good Auditing Includes Good Client Service 


“It had been a good week,” thought Jeanine Wilson, as she drove out of the 
parking lot of Solberg Paints on Friday afternoon. Just a few months earlier, 
she graduated from State University and sat for the CPA examination. Still, 
Jeanine did not think her transition to professional life had been all that 
smooth, and she was surprised at how much there still was to learn. But 
she had made great progress on the Solberg job. 


John Hernandez was the audit senior on the Solberg Paints audit, and 
he had a reputation as a patient teacher and supervisor. Jeanine was not 
disappointed. At the start of the engagement, John told her, “Don’t be afraid 
to ask questions. If you see anything that seems unusual, let’s discuss it. 
And most importantly, if you have any ideas that will help the client, bring 
them up. The client expects us to deliver more than an audit report.” 


“I'd say | delivered,” thought Jeanine. She found an error in the way the 
company had calculated LIFO inventory that was going to save the client 
a significant amount of taxes. But her biggest contribution almost did not 
happen. Jeanine read as much as she could about paint manufacturers and 
learned about some new production control methods that seemed like 


they could apply to Solberg. She wad oink DFhiknhancer oe 


couldn't possibly know anything that the client didn’t already know, but 
John encouraged her to discuss it with the client. The result was that the 
client wanted to meet further with Jeanine’s firm to better understand how 
they could improve their production processes. 


Friday was the last day of field work on the audit, and the partner, Bill 
Marlow, was at the client’s office to complete his review of the audit files. 


LEARNING OBJECTIVES 


After studying this chapter, 
you should be able to 





- 


2-1 Describe the nature of CPA firms, 
what they do, and their structure. 


2-2 Understand the role of 
the Public Company Accounting 
Oversight Board and the effects 
of the Sarbanes-Oxley Act 
on the CPA profession. 


2-3 Summarize the role of the 
Securities and Exchange 
Commission in accounting and 
auditing. 

2-4 Describe the key functions 
performed by the AICPA. 


2-5 Understand the role of 
international auditing standards 
and their relation to U.S. auditing 
standards. 


Use U.S. auditing standards as 
a basis for further study. 


2-7 Identify quality control standards 
and practices within the 
accounting profession. 





Jeanine was surprised to hear him say to her, “What are you doing on the 15th? We're going to meet with the client 
to discuss our audit findings. You've made a real contribution on this audit, and I’d like you to be there.” Jeanine tried 
not to show her excitement too much, but she couldn't hide the smile on her face. “Yes, it had been a good week.” 





e learned in the first chapter that auditing plays an important role in society by reducing information risk and 

facilitating access to capital and that audit firms provide additional, value-added service to their clients. As 
the opening story to this chapter demonstrates, audit professionals at all experience levels serve as valued advisors 
to their clients. This chapter describes the organization of CPA firms and the types of services they provide. We also 
discuss the effects on auditing of the Sarbanes—Oxley Act and the Public Company Accounting Oversight Board 
(PCAOB), as well as other standards and regulatory agencies that influence auditor performance. 


CERTIFIED PUBLIC ACCOUNTING FIRMS 


Except for certain governmental organizations, the audits of all general use financial 
statements in the United States are done by CPA firms. The legal right to perform 





Describe the nature of ne : : 
CPA firms, what they do, audits is granted to CPA firms by regulation of each state. CPA firms also provide 


and their structure. many other services to their clients, such as tax and advisory services. 


It is estimated that more than 45,000 CPA firms exist in the United States. These 
firms range in size from 1 person to 20,000 partners and staff. Table 2-1 provides 
revenue and other data for some of the largest accounting firms in the United States. 
Four size categories are used to describe CPA firms: Big Four international firms, 
national firms, regional and large local firms, and small local firms. 





* Big Four international firms. The four largest CPA firms in the United States are 
called the “Big Four” international CPA firms. They are the first four firms listed 


























—__— 
feat Revenue and Other Data for the Largest CPA Firms in the United States 
Percentage of Total 
Revenue from 
Accounting and 
2010 Net Revenue— Auditing/Taxes/ 
Size by U.S. Only U.S. Management 
Revenue Firm (in $ millions) Partners Professionals Offices Consulting and Other 
BIG FOUR 
] Deloitte & Touche $ 10,722.0 2,968 30,637 102 37/24/39 
2. Ernst & Young $ 7,620.0 2,500 17,500 80 41/33/26 
3 PricewaterhouseCoopers $ 7,369.4 DISS 22,729 76 54/31/15 
4 KPMG $ 5,076.0 1,847 15,803 88 48/27/25 
NATIONAL 
5 RSM McGladrey/McGladrey & Pullen) $ 1,460.7 751 5,331 93 44/35/21 
6 Grant Thornton $ 1,147.8 535 3,700 52 47/26/27 
7 BDO Seidman $ 620.0 215) 1,849 Si 60/25/15 
8 CBIZ/Mayer Hoffman McCann) $ 600.7 465 2,085 180 23/27/50 
REGIONAL®) 
9 Crowe Horwath $ 508.0 240 1,636 25 65/22/13 
10 BKD $ 393.0 258 1,256 31 52/30/18 
it Moss Adams $ 323.0 240 1,130 18 49/34/17 
12 Plante & Moran $ 301.2 221 1,108 18 50/32/18 
LARGE LOCAL 
50 Holthouse Carlin & Van Trigt $ 58.0 Dif, 164 i 22/67/11 
7 LeMaster & Daniels $ 41.7 27 193 12 28/51/21 
xg 4 








() RSM McGladrey and McGladrey & Pullen have an alternative practice structure in which each is a separate and independent legal entity. The firm now operates 
under the single name McGladrey. 

(2) CBIZ and Mayer Hoffman and McCann are affiliated through an alternative practice structure. 

(8) Only the four largest regional firms are listed. 


Source: Accounting Today (www.webcpa.com). 
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in Table 2-1. These four firms have offices throughout the United States and 
throughout the world. The Big Four firms audit nearly all of the largest companies 
both in the United States and worldwide and many smaller companies as well. 
National firms. Four CPA firms in the United States are called national firms 
because they have offices in most major cities. These are firms 5 through 8 in Table 
2-1. These firms are large but considerably smaller than the Big Four. The national 
firms perform the same services as the Big Four firms and compete directly with 
them for clients. Each national firm is affiliated with firms in other countries and 
therefore has an international capability. 

Regional and large local firms. There are less than 200 CPA firms with professional 
staffs of more than 100 people. Some have only one office and serve clients 
primarily within commuting distances. Others have several offices in a state or 
region and serve a larger radius of clients. For example, Table 2-1 shows that the 
largest regional firms are not dramatically smaller than the four national firms. 
Regional and large local firms compete for clients with other CPA firms, including 
national and Big Four firms. Many of the regional and large local firms are 
affiliated with associations of CPA firms to share resources for such things as 
technical information and continuing education. Many of these firms also have 
international affiliations. 

Small local firms. More than 95 percent of all CPA firms have fewer than 25 
professionals in a single-office firm. They perform audits and related services 
primarily for smaller businesses and not-for-profit entities, although some have 
one or two clients with public ownership. Many small local firms do not perform 
audits and primarily provide accounting and tax services to their clients. 


ACTIVITIES OF CPA FIRMS 





pod ancer 

As discussed in Chapter 1, CPA firms provide audit services, as well as other attestation 
and assurance services. Additional services commonly provided by CPA firms include 
accounting and bookkeeping services, tax services, and management consulting 
services. CPA firms continue to develop new products and services, such as financial 
planning, business valuation, forensic accounting, and information technology 
advisory services. 


» Accounting and bookkeeping services. Many small clients with limited accounting 
staff rely on CPA firms to prepare their financial statements. Some small clients lack 
the personnel or expertise to use accounting software to maintain their own 
accounting records. Thus, CPA firms perform a variety of accounting and book- 
keeping services to meet the needs of these clients. In many cases in which the 
financial statements are to be given to a third party, a review or even an audit is also 
performed. When neither of these is done, the financial statements are accompanied 
by a type of report by the CPA firm called a compilation report, which provides no 
assurance to third parties. As Table 2-1 shows, attestation services and accounting 
and bookkeeping services are the major source of revenue for most large CPA firms. 
Tax services. CPA firms prepare corporate and individual tax returns for both audit 
and nonaudit clients. Almost every CPA firm performs tax services, which may 
include estate tax, gift tax, tax planning, and other aspects of tax services. For many 
small firms, such services are far more important to their practice than auditing, as 
most of their revenue may be generated from tax services. 

Management consulting services. Most CPA firms provide certain services that 
enable their clients to operate their businesses more effectively. These services are 
called management consulting or management advisory services. These services 
range from simple suggestions for improving the client’s accounting system to 
advice in risk management, information technology and e-commerce system design, 
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PEER REVIEW __ The AICPA created a voluntary uniform peer it was revealed that his sole practitioner auditor 
review program in 1977 with the establishment was not peer reviewed. In response, New York 
EXPANDS AFTER of the Division for CPA Firms. Firms were required passed a peer review requirement for all CPA 
MADOFEF SCANDAL _ tobe peer reviewed every three years to make firms in New York State, increasing to 45 the 


certain all firms conducting attest functions 


adhered to generally accepted auditing standards. 


In 1988, AICPA members approved mandatory 
peer reviews for all members. However, since 
membership in the AICPA is voluntary, firms that 
were not members were not subject to peer 
review unless required by the state in which the 
firm practiced. 

Interest in peer review seemed to diminish 


number of states with a peer review requirement. 
When the New York requirement is implemented 
in 2012, the number of CPA firms in New York 
subject to peer review will nearly double, from 
approximately 1,800 to about 3,000. Ironically, 
Madoff’s auditor would not have been required to 
have a peer review under the new requirements, 
as firms with one or two practitioners are exempt 
from the requirement. 


when PCAOB quality inspections replaced peer 
review for auditors of public companies. 
However, the Ponzi scheme involving Bernie 
Madoff refocused attention on peer review when 


Sources: Adapted from 1. Richard Stolz, “Peer Review in 
Need of Review?” (April 20, 2009) (www.webcpa.com); 
2. Robert Bunting, “Transparency, the New Peer Review 
Watchword,” The CPA Journal (October 2004) p. 6. 








mergers and acquisitions due diligence, business valuations, and actuarial benefit 
consulting. Many large CPA firms have departments involved exclusively in 
management consulting services with little interaction with the audit or tax staff. 

Although the Sarbanes—Oxley Act and Securities and Exchange Commission 
(SEC) restrict auditors from providing many consulting services to public company 
audit clients, some services are allowed, and audit firms are not restricted from 
providing consulting to private companies and public companies that are not audit 
clients. Table 2-1 (p. 26) shows that management consulting and other services are 
a significant source of revenue for most accounting firms. 


Apago PDF Enhancer 


STRUCTURE OF CPA FIRMS 


CPA firms vary in the nature and range of services offered, which affects the organi- 
zation and structure of the firms. Three main factors influence the organizational 
structure of all firms: 


1. The need for independence from clients. Independence permits auditors to 
remain unbiased in drawing conclusions about the financial statements. 

2. The importance of a structure to encourage competence. Competence permits 
auditors to conduct audits and perform other services efficiently and effectively. 

3. The increased litigation risk faced by auditors. Audit firms continue to experience 
increases in litigation-related costs. Some organizational structures afford a 
degree of protection to individual firm members. 


Organizational 
Structures 


Six organizational structures are available to CPA firms. Except for the proprietorship, 
each structure results in an entity separate from the CPA personally, which helps 
promote auditor independence. The last four organizational structures provide some 
protection from litigation loss. 


Proprietorship Only firms with one owner can operate in this form. Traditionally, all 
one-owner firms were organized as proprietorships, but most have changed to organi- 
zational forms with more limited liability because of litigation risks. 


General Partnership This form of organization is the same as a proprietorship, 
except that it applies to multiple owners. This organizational structure has also become 
less popular as other forms of ownership that offer some legal liability protection 
became authorized under state laws. 
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General Corporation The advantage of a corporation is that shareholders are liable 
only to the extent of their investment in the corporation. Most CPA firms do not organize 
as general corporations because they are prohibited by law from doing so in most states. 


Professional Corporation A professional corporation (PC) provides professional 
services and is owned by one or more shareholders. PC laws in some states offer 
personal liability protection similar to that of general corporations, whereas the 
protection in other states is minimal. This variation makes it difficult for a CPA firm 
with clients in different states to operate as a PC. 


Limited Liability Company A limited liability company (LLC) combines the most 
favorable attributes of a general corporation and a general partnership. An LLC is 
typically structured and taxed like a general partnership, but its owners have limited 
personal liability similar to that of a general corporation. All of the states have LLC 
laws, and most also allow accounting firms to operate as LLCs. 


Limited Liability Partnership A limited liability partnership (LLP) is owned by 
one or more partners. It is structured and taxed like a general partnership, but the 
personal liability protection of an LLP is less than that of a general corporation or an 
LLC. Partners of an LLP are personally liable for the partnership’s debts and obliga- 
tions, their own acts, and acts of others under their supervision. Partners are not 
personally liable for liabilities arising from negligent acts of other partners and 
employees not under their supervision. It is not surprising that all of the Big Four firms 
and many smaller firms now operate as LLPs. 


The organizational hierarchy in a typical CPA firm includes partners or shareholders, 
managers, supervisors, seniors or in-charge auditors, and assistants. A new employee 
usually starts as an assistant and spends 2 or 3 years in each classification before 
achieving partner status. The titles of the positions vary from firm to firm, but the 
structure is similar in all. When we refer in this text to the auditor, we mean the person 
performing some aspect of an audit A PaAGQMonRDEe oh DAANCeT from 
each level on larger engagements. 

Table 2-2 summarizes the experience and responsibilities of each classification level 
within CPA firms. Advancement in CPA firms is fairly rapid, with evolving duties and 
responsibilities. In addition, audit staff members usually gain diversity of experience 
across client engagements. Because of advances in computer and audit technology, 
beginning assistants on the audit are rapidly given greater responsibility and challenges. 

The hierarchical nature of CPA firms helps promote competence. Individuals at 
each level of the audit supervise and review the work of others at the level just below 
them in the organizational structure. A new staff assistant is supervised directly by the 
senior or in-charge auditor. The staff assistant’s work is then reviewed by the in-charge 
as well as by the manager and partner. 


Hierarchy of a 
Typical CPA Firm 





Staff Levels and Responsibilities 

















Average 
Staff Level Experience Typical Responsibilities 
Staff Assistant 0-2 years Performs most of the detailed audit work. 
Senior or 2-5 years Coordinates and is responsible for the audit field work, including supervising and reviewing staff 
in-charge auditor work. 
Manager 5-10 years Helps the in-charge plan and manage the audit, reviews the in-charge’s work, and manages relations 
with the client. A manager may be responsible for more than one engagement at the same time. 
Partner 10+ years Reviews the overall audit work and is involved in significant audit decisions. A partner is an owner of 
the firm and therefore has the ultimate responsibility for conducting the audit and serving the client. 





4 
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SARBANES-OXLEY ACT AND 


PUBLIC COMPANY ACCOUNTING OVERSIGHT BOARD 








Understand the role of 


the Public Company 
Accounting Oversight Board 
and the effects of the 
Sarbanes-Oxley Act on 

the CPA profession. 





Triggered by the bankruptcies and alleged audit failures involving such companies as 
Enron and WorldCom, the Sarbanes—Oxley Act is considered by many to be the most 
important legislation affecting the auditing profession since the 1933 and 1934 
Securities Acts. The provisions of the Act dramatically changed the relationship 
between publicly held companies and their audit firms. 

The Sarbanes—Oxley Act established the Public Company Accounting Oversight 
Board (PCAOB), appointed and overseen by the SEC. The PCAOB provides oversight 
for auditors of public companies, establishes auditing and quality control standards for 
public company audits, and performs inspections of the quality controls at audit firms 
performing those audits. 

The PCAOB conducts inspections of registered accounting firms to assess their 
compliance with the rules of the PCAOB and SEC, professional standards, and each 
firm’s own quality control policies. The PCAOB requires annual inspections of 
accounting firms that audit more than 100 issuers and inspections of other registered 
firms at least once every three years. Any violations could result in disciplinary action 
by the PCAOB and be reported to the SEC and state accountancy boards. 


SECURITIES AND EXCHANGE COMMISSION 


OBJECTIVE 2-3 


Summarize the role of the 


Securities and Exchange 
Commission in accounting 
and auditing. 





The Securities and Exchange Commission (SEC), an agency of the federal govern- 
ment, assists in providing investors with reliable information upon which to make 
NSAP AGU 'P. “Bhat Ce pequires most companies planning to 
issue new secrtrities to the public to submit a registration statement to the SEC for 
approval. The Securities Exchange Act of 1934 provides additional protection by 
requiring public companies and others to file detailed annual reports with the com- 
mission. The commission examines these statements for completeness and adequacy 
before permitting the company to sell its securities through the securities exchanges. 

Although the SEC requires considerable information that is not of direct interest to 
CPAs, the securities acts of 1933 and 1934 require financial statements, accompanied 
by the opinion of an independent public accountant, as part of a registration statement 
and subsequent reports. 

Of special interest to auditors are several specific reports that are subject to the 
reporting provisions of the securities acts. The most important of these are as 
follows: 


* Form S-1. “S” forms apply to the Securities Act of 1933 and must be completed 
and registered with the SEC when a company plans to issue new securities to the 
public. The S-1 form is the general form used when there is no specifically 
prescribed form. The others are specialized forms. For example, S-11 is for regis- 
tration of securities of certain real estate companies. 

» Form 8-K. This report is filed to report significant events that are of interest to 
public investors. Such events include the acquisition or sale of a subsidiary, a change 
in officers or directors, an addition of a new product line, or a change in auditors. 

* Form 10-K. This report must be filed annually within 60 to 90 days after the close of 
each fiscal year, depending on the size of the company. Extensive detailed financial 
information, including audited financial statements, is contained in this report. 

* Form 10-Q. This report must be filed quarterly for all publicly held companies. It 
contains certain financial information and requires auditor reviews of the financial 
statements before filing with the commission. 
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Because large CPA firms usually have clients that must file one or more of these 
reports each year, and the rules and regulations affecting filings with the SEC are 
extremely complex, most CPA firms have specialists who spend a large portion of their 
time ensuring that their clients satisfy all SEC requirements. 

The SEC has considerable influence in setting generally accepted accounting 
principles (GAAP) and disclosure requirements for financial statements as a result of 
its authority for specifying reporting requirements considered necessary for fair 
disclosure to investors, such as the recent requirement to begin filing financial statement 
data in XBRL format. The SEC has power to establish rules for any CPA associated with 
audited financial statements submitted to the commission. The SEC’s attitude is 
generally considered in any major change proposed by the Financial Accounting 
Standards Board (FASB), the independent organization that establishes U.S. GAAP. 

The SEC requirements of greatest interest to CPAs are set forth in the commission’s 
Regulation S-X, Accounting Series Releases, and Accounting and Auditing Enforcement 
Releases. These publications constitute important regulations, as well as decisions and 
opinions on accounting and auditing issues affecting any CPA dealing with publicly 
held companies. 


AMERICAN INSTITUTE OF 


CERTIFIED PUBLIC ACCOUNTANTS (AICPA) 





CPAs are licensed by the state in which they practice, but a significant influence on 
CPAs is exerted by their national professional organization, the American Institute of 
Certified Public Accountants (AICPA). Membership in the AICPA is restricted to 
CPAs, but not all members are practicing as independent auditors. Many members 
formerly worked for CPA firms but age currentl “por wermment, industry, and 
education. AICPA membership is Apage n PAL bE GE Bc0,000 
CPAs, the AICPA is the largest professional association for CPAs in the United States. 

The AICPA sets professional requirements for CPAs, conducts research, and pub- 
lishes materials on many different subjects related to accounting, auditing, attestation 
and assurance services, management consulting services, and taxes. The AICPA also 
promotes the accounting profession through organizing national advertising campaigns, 
promoting new assurance services, and developing specialist certifications to help 
market and ensure the quality of services in specialized practice areas. For example, the 
association currently offers specialty designations in business valuation, financial 
planning, information technology, and financial forensics. 


The AICPA sets standards and rules that all members and other practicing CPAs must 
follow. Four major areas in which the AICPA has authority to set standards and make 
rules are as follows: 

1. Auditing standards. The Auditing Standards Board (ASB) is responsible for issuing 
pronouncements on auditing matters for all entities other than publicly traded 
companies. ASB pronouncements are called Statements on Auditing Standards 
(SASs). They are further discussed later in this chapter and throughout the text. 

2. Compilation and review standards. The Accounting and Review Services Com- 
mittee is responsible for issuing pronouncements of the CPA’s responsibilities 
when a CPA is associated with financial statements of privately owned companies 
that are not audited. They are called Statements on Standards for Accounting 
and Review Services (SSARS), and they provide guidance for performing com- 
pilation and review services. In a compilation service, the accountant helps the 
client prepare financial statements without providing any assurance. In a review 
service, the accountant performs inquiry and analytical procedures that provide 
a reasonable basis for expressing limited assurance on the financial statements. 


OBJECTIVE 2-4 


Describe the key functions 
performed by the AICPA. 








Establishing 
Standards and Rules 
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3. Other attestation standards. Statements on Standards for Attestation Engage- 
ments provide a framework for the development of standards for attestation 
engagements. Detailed standards have been developed for specific types of 
attestation services, such as reports on prospective financial information in 
forecasts and projections. Attestation standards are studied in Chapter 25. 

4. Code of Professional Conduct. The AICPA Professional Ethics Executive 
Committee sets rules of conduct that CPAs are required to meet. The rules and 
their relationships to ethical conduct are the subject of Chapter 4. 


Other In addition to writing and grading the CPA examination, the AICPA performs many 

AICPA Functions educational and other functions for CPAs. The association supports research by its own 
research staff and provides grants to others. It also publishes a variety of materials, 
including journals such as the Journal of Accountancy, industry audit guides for several 
industries, periodic updates of the Codification of Statements on Auditing Standards, 
and the Code of Professional Conduct. 

CPAs must meet continuing education requirements to maintain their licenses 
to practice and to stay current on the extensive and ever-changing body of knowledge 
in accounting, auditing, attestation and assurance services, management consulting 
services, and taxes. The AICPA provides a considerable number of seminars and 
educational aids in a variety of subjects, such as online continuing education oppor- 
tunities and reference materials in its CPExpress online learning library and its daily 
email alert about emerging professional issues through its CPA Letter Daily. 


INTERNATIONAL AND U.S. AUDITING STANDARDS 


Auditing standards are aa guidelines to aid auditors in fulfilling their professional 
on Apa in op st ¥ eer statements. They include considera- 
tion ae nce and independence, reporting 





Understand the role of 


international auditing . ‘ie , 
standards and their relation requirements, and evidence. The — main Ra of auditing standards are International 


to U.S. auditing standards. Standards on Auditing, U.S. Generally Accepted Auditing Standards for entities other 





than public companies, and PCAOB Auditing Standards. 


International International Standards on Auditing (ISAs) are issued by the International Auditing 
Standards on Auditing —_ and Assurance Standards Board (IAASB) of the International Federation of Accountants 
(IFAC). IFAC is the worldwide organization for the accountancy profession, with 159 


























CLARITY AND ___ The AICPA Auditing Standards Board has When all of the sections of auditing standards 
undertaken a significant effort to make U.S. have been clarified, they will be issued as one 
CONVERGENCE generally Sed auditing standards (GAAS) SAS. When the new plies becomes effective, 
PROJECT easier to read, understand and apply. The project SASs issued prior to SAS 117 will be superseded 
originated with the ASB plan to converge U.S. and new AU Sections will be created. Additionally, 
COMPLETION — Gaas with the ISAs and align its agenda with the when the clarified standards become effective, 
IMPACTS AUDITING _ !AASB. the 10 GAAS standards will be moved to the 
The foundation of the clarity project is the Preface of the AU Sections as principles governing 
STANDARDS establishment of an objective for each auditing the conduct of an audit. The principles will be 
standard to reflect a principles-based approach to organized consistent with the current structure, 
standard-setting. Conventions applied by the ASB but the GAAS headings of “General” and 
in drafting standards include: “Fieldwork” will be changed to “Responsibilities” 
Establishing objectives for each standard and “Performance,” respectively, to better reflect 
¢ Including a definitions section, where the content. The Reporting principles will be less 
relevant, in each standard detailed than the current reporting standards. 
Separating requirements from application Sources: 1. “Clarity Project: Update and Final 
and other explanatory material Product, May 2010" (www.aicpa.org); 
Using bulleted lists and other formatting 2. AICPA Auditing Standards Board Clarity and 







techniques to enhance readability Convergence Explanatory Memorandum (July 2008). 
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member organizations in 124 countries, representing more than 2.5 million accountants 
throughout the world. The IAASB works to improve the uniformity of auditing practices 
and related services throughout the world by issuing pronouncements on a variety of 
audit and attest functions and by promoting their acceptance worldwide. 

ISAs do not override a country’s regulations governing the audit of financial or 
other information, as each country’s own regulations generally govern audit practices. 
These regulations may be either government statutes or statements issued by regu- 
latory or professional bodies, such as the Australian Auditing & Assurance Standards 
Board or Spain’s Instituto de Contabilidad y Auditoria de Cuentas. Most countries, 
including the United States, base their auditing standards on ISAs, modified as 
appropriate for each country’s regulatory environment and statutory requirements. 

The Auditing Standards Board in the U.S. has revised most of its standards to 
converge with the international standards. In addition, the PCAOB considers existing 
international standards in developing its standards. As a result, U.S. standards are 
mostly consistent with international standards, except for certain requirements that 
reflect unique characteristics of the U.S. environment, such as legal and regulatory 
requirements. For example, PCAOB Standard 5 (AS 5) addresses audits of internal 
control over financial reporting required by the Sarbanes—Oxley Act. 


Auditing standards for private companies and other entities in the United States are 
established by the Auditing Standards Board (ASB) of the AICPA. These standards are 
referred to as Statements on Auditing Standards (SASs). These Generally Accepted 
Auditing Standards (GAAS) are similar to the ISAs, although there are some differences. 
If an auditor in the United States is auditing historical financial statements in accordance 
with ISAs, the auditor must meet any ISA requirements that extend beyond GAAS. 

Prior to passage of the Sarbanes—Oxley Act, the ASB established auditing standards 
for private and public companies. The PCAOB now has responsibility for auditing 
standards for public companies, while the ASB sony? Fey e auditing standards 
for private companies and other en ago nhnancer 


The PCAOB initially adopted existing auditing standards established by the ASB as 
interim audit standards. In addition, the PCAOB considers international auditing 
standards when developing new standards. As a result, auditing standards for U.S. 
public and private companies are mostly similar. Standards issued by the PCAOB are 
referred to as PCAOB Auditing Standards in the audit reports of public companies and 
when referenced in the text, and apply only to the audits of public companies. 


Figure 2-1 summarizes the relations among international auditing standards, 
generally accepted auditing standards, and PCAOB auditing standards. International 


foetal Relation of U.S. and International Auditing Standards ) 
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auditing standards as adopted by standard-setting bodies in individual countries 
apply to audits of entities outside the United States. Generally accepted auditing 
standards are similar to international auditing standards and apply to the audits of 
private companies and other entities in the United States. PCAOB auditing standards 
apply to audits of U.S public companies and other SEC registrants. 

The overlapping ovals illustrate that there are more similarities than differences in 
the three sets of standards. The auditing concepts illustrated throughout this book are 
generally applicable to all audits. When we refer to “auditing standards,” the term 
applies to all audits unless otherwise noted. 





GENERALLY ACCEPTED AUDITING STANDARDS 


OBJECTIVE 2-6 


Use U.S. auditing standards 
as a basis for further study. 





General Standards 


The broadest guidelines available to auditors in the U.S. are the 10 generally accepted 
auditing standards (GAAS), which were developed by the AICPA. As illustrated in 
Figure 2-2, the 10 generally accepted auditing standards fall into three categories: 


* General standards 
¢ Standards of field work 
» Reporting standards 


The individual standards in each category are included in Table 2-3. These standards 
are not sufficiently specific to provide any meaningful guide to practitioners, but they 
do represent a framework upon which the AICPA can provide interpretations. 


The general standards stress the important personal qualities that the auditor should 
possess. 


Adequate Technical Training and Proficiency The first general standard is 


rap ag SS PDF BAhatoe have formal education in auditing 
ntine, ctical experience 


and acc adequate pra or the work being performed, and 
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favo) Generally Accepted Auditing Standards 





General Standards 





1. The auditor must have adequate technical training and proficiency to perform the audit. 
2. The auditor must maintain independence in mental attitude in all matters relating to the audit. 


Standards of Field Work 


1. The auditor must adequately plan the work and must properly supervise any assistants. 


audit procedures. 


regarding the financial statements under audit. 
Standards of Reporting 


3. The auditor must exercise due professional care in the performance of the audit and the preparation of the report. 


2. The auditor must obtain a sufficient understanding of the entity and its environment, including its internal control, to assess the risk of 
material misstatement of the financial statements whether due to error or fraud, and to design the nature, timing, and extent of further 


3. The auditor must obtain sufficient appropriate audit evidence by performing audit procedures to afford a reasonable basis for an opinion 





accounting principles (GAAP). 


current period in relation to the preceding period. 





1. The auditor must state in the auditor’s report whether the financial statements are presented in accordance with generally accepted 
2. The auditor must identify in the auditor's report those circumstances in which such principles have not been consistently observed in the 


3. When the auditor determines that informative disclosures are not reasonably adequate, the auditor must so state in the auditor's report. 

4. The auditor must either express an opinion regarding the financial statements, taken as a whole, or state that an opinion cannot be 
expressed, in the auditor's report. When the auditor cannot express an overall opinion, the auditor should state the reasons therefor in the 
auditor's report. In all cases where an auditor’s name is associated with financial statements, the auditor should clearly indicate the 
character of the auditor's work, if any, and the degree of responsibility the auditor is taking, in the auditor's report. 








continuing professional education. Recent court cases clearly demonstrate that auditors 
must be technically qualified and experienced in those industries in which their audit 
clients are engaged. 

In any case in which the CPA ARAge. DE ad nhance Ferform 
the work, a professional obligation exists to acquire the requisite knowledge and skills, 
suggest someone else who is qualified to perform the work, or decline the engagement. 


Independence in Mental Attitude The importance of independence was emphasized 
in Chapter 1 under the definition of auditing. The Code of Professional Conduct and 
SASs stress the need for independence. CPA firms are required to follow several 
practices to increase the likelihood of independence of all personnel. For example, 
there are established procedures on larger audits when there is a dispute between 
management and the auditors. Specific methods to ensure that auditors maintain their 
independence are studied in Chapter 4. 


Due Professional Care The third general standard involves due care in the perfor- 
mance of all aspects of auditing. Simply stated, this means that auditors are professionals 
responsible for fulfilling their duties diligently and carefully. Due care includes con- 
sideration of the completeness of the audit documentation, the sufficiency of the audit 
evidence, and the appropriateness of the audit report. As professionals, auditors must 
not act negligently or in bad faith, but they are not expected to be infallible. 


The standards of field work concern evidence accumulation and other activities during 
the actual conduct of the audit. 


Adequate Planning and Supervision The first standard requires that the audit be 
sufficiently planned to ensure an adequate audit and proper supervision of assistants. 
Supervision is essential in auditing because a considerable portion of the field work is 
done by less experienced staff members. 


Understand the Entity and its Environment, Including Internal Control To 
adequately perform an audit, the auditor must have an understanding of the client’s 
business and industry. This understanding helps the auditor identify significant client 


Standards 
of Field Work 
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Standards 
of Reporting 


business risks and the risk of significant misstatements in the financial statements. For 
example, to audit a bank, an auditor must understand the nature of the bank’s 
operations, federal and state regulations applicable to banks, and risks affecting signifi- 
cant accounts such as loan loss reserves. 

One of the most widely accepted concepts in the theory and practice of auditing is 
the importance of the client’s system of internal control for mitigating client business 
risks, safeguarding assets and records, and generating reliable financial information. 
If the auditor is convinced that the client has an excellent system of internal control, one 
that includes adequate internal controls for providing reliable data, the amount of audit 
evidence to be accumulated can be significantly less than when controls are not 
adequate. In some instances, internal control may be so inadequate as to preclude 
conducting an effective audit. 


Sufficient Appropriate Evidence Decisions about how much and what types of 
evidence to accumulate for a given set of circumstances require professional judgment. 
A major portion of this book is concerned with the study of evidence accumulation 
and the circumstances affecting the amount and types needed. 


The four reporting standards require the auditor to prepare a report on the financial 
statements taken as a whole, including informative disclosures. The reporting 
standards also require that the report state whether the statements are presented in 
accordance with GAAP and also identify any circumstances in which GAAP have not 
been consistently applied in the current year compared with the previous one. 


STATEMENTS ON AUDITING STANDARDS 


Classification of 
Statements on 
Auditing Standards 


GAAS and Standards 
of Performance 


The 10 generally accepted auditing standards are too general to provide meaningful 
guidadpagagorRDMo Hnhban@enhe AsB for more specific guidance. 
These statements interpret the 10 generally accepted auditing standards and have the 
status of GAAS and are often referred to as auditing standards or GAAS, even though 
they are not part of the 10 generally accepted auditing standards. This book follows 
common practice and refers to these interpretations as auditing standards or SASs. 
Generally accepted auditing standards and SASs are regarded as authoritative literature, 
and every member who performs audits of historical financial statements is required to 
follow them under the AICPA Code of Professional Conduct. The ASB issues new 
statements when an auditing problem arises of sufficient importance to warrant an 
official interpretation. At this writing, SAS 120 was the last one issued and incorporated 
into the text materials, but readers should be alert to subsequent standards that 
influence auditing requirements. 


All SASs are given two classification numbers: an SAS and an AU number that indicates 
location in the Codification of Auditing Standards. Both classification systems are used 
in practice. For example, the Statement on Auditing Standards, The Relationship of 
Generally Accepted Auditing Standards to Quality Control Standards, is SAS 25 and AU 
161. The SAS number identifies the order in which it was issued in relation to other 
SASs; the AU number identifies its location in the AICPA codification of all SASs. AUs 
beginning with a “2” are always interpretations of the general standards. Those 
beginning with a “3” are related to field work standards, and those beginning with a “4,” 
“5,” or “6” deal with reporting standards. 


Although GAAS and the SASs are the authoritative auditing guidelines for members of 
the profession, they provide less direction to auditors than might be assumed. A limited 
number of specific audit procedures are required by the standards, and there are no 
specific requirements for auditors’ decisions, such as determining sample size, selecting 
sample items from the population for testing, or evaluating results. Many practitioners 
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believe that the standards should provide more clearly defined guidelines for determining 
the extent of evidence to be accumulated. Such specificity would eliminate some difficult 
audit decisions and provide a line of defense for a CPA firm charged with conducting an 
inadequate audit. However, highly specific requirements could turn auditing into 
mechanistic evidence gathering, devoid of professional judgment. From the point of 
view of both the profession and the users of auditing services, there is probably greater 
harm in defining authoritative guidelines too specifically than too broadly. 

GAAS and the SASs should be looked on by practitioners as minimum standards of 
performance rather than as maximum standards or ideals. At the same time, the 
existence of auditing standards does not mean the auditor must always follow them 
blindly. If an auditor believes that the requirement of a standard is impractical or 
impossible to perform, the auditor is justified in following an alternative course of 
action. Similarly, if the issue in question is immaterial in amount, it is also unnecessary 
to follow the standard. However, the burden of justifying departures from the standards 
falls on the auditor. 

When auditors desire more specific guidelines, they must turn to less authoritative 
sources, including textbooks, journals, and technical publications. Materials published 
by the AICPA, such as the Journal of Accountancy and industry audit guides, furnish 
assistance on specific questions. We provide further study of the standards and make 
frequent reference to specific standards throughout the text. 


QUALITY CONTROL 


For a CPA firm, quality control comprises the methods used to ensure that the firm 
meets its professional responsibilities to clients and others. These methods include the 
organizational structure of the CPA: y e ee I. es ishes. For 
example, a CPA firm might have aba ro structure tha Han aria 
review of every engagement by a partner who has expertise in the client’s industry. 
Auditing standards require each CPA firm to establish quality control policies and 
procedures. The standards recognize that a quality control system can provide only 
reasonable assurance, not a guarantee, that auditing standards are followed. 

Quality control is closely related to but distinct from GAAS. To ensure that 
generally accepted auditing standards are followed on every audit, a CPA firm follows 
specific quality control procedures that help it meet those standards consistently on 
every engagement. Quality controls are therefore established for the entire CPA firm, 
whereas GAAS are applicable to individual engagements. 


Each firm should document its quality control policies and procedures. Procedures 
should depend on such things as the size of the firm, the number of practice offices, and 
the nature of the practice. The quality control procedures of a 150-office international 
firm with many complex multinational clients should differ considerably from those of 
a five-person firm specializing in small audits in one or two industries. 

The system of quality control should include policies and procedures that address 
six elements. These are listed in Table 2-4 (p. 38) with brief descriptions and pro- 
cedural examples that firms might use to satisfy the requirement. 


Public accounting firms must be enrolled in an AICPA approved practice-monitoring 
program for members in the firm to be eligible for membership in the AICPA. Practice- 
monitoring, also known as peer review, is the review, by CPAs, of a CPA firm’s 
compliance with its quality control system. The purpose of a peer review is to deter- 
mine and report whether the CPA firm being reviewed has developed adequate quality 
control policies and procedures and follows them in practice. Unless a firm has a peer 
review, all members of the CPA firm lose their eligibility for AICPA membership. 


Identify quality control 


standards and practices 
within the accounting 
profession. 








Elements of 
Quality Control 


Peer Review 
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TABLE 2-4 


Elements of Quality Control 





Element 


Summary of Requirements Example of a Procedure 





Leadership responsibilities 
for quality within the firm 
(tone at the top”) 


The firm’s training programs emphasize 
the importance of quality work, and this 
is reinforced in performance evaluation 
and compensation decisions. 


The firm should promote a culture that quality is 
essential in performing engagements and 
should establish policies and procedures that 
support that culture. 





Relevant ethical 
requirements 


All personnel on engagements should maintain 
independence in fact and in appearance, 
perform all professional responsibilities with 
integrity, and maintain objectivity in performing 
their professional responsibilities. 


Each partner and employee must answer 
an “independence questionnaire” 
annually, dealing with such things 
as stock ownership and membership 
on boards of directors. 





Acceptance and 
continuation of clients 
and engagements 


A client evaluation form, dealing with 
such matters as predecessor auditor 
comments and evaluation of manage- 
ment, must be prepared for every 
new client before acceptance. 


Policies and procedures should be established for 
deciding whether to accept or continue a client 
relationship. These policies and procedures 
should minimize the risk of associating with a 
client whose management lacks integrity. The 
firm should also only undertake engagements 
that can be completed with professional 
competence. 





Human resources 


Policies and procedures should be established to Each professional must be evaluated on 
provide the firm with reasonable assurance that every engagement using the firm’s 
* All new personnel should be qualified to individual engagement evaluation 
perform their work competently. report. 
* Work is assigned to personnel who have 
adequate technical training and proficiency. 
* All personnel should participate in continuing 
professional education and professional 
development activities that enable them to 
fulfill their assigned responsibilities. 
« Personnel selected for advancement have 
the qualifications necessary for the fulfillment 
of their assigned responsibilities. 








Engagement Policies and procedures should exist to ensure The firm's director of accounting and 
performance that the work performed by engagement auditing is available for consultation 

personnel meets applicable professional and must approve all engagements 
standards, regulatory requirements, and before their completion. 
the firm’s standards of quality 

Monitoring Policies and procedures should exist to ensure The quality control partner must test the 
that the other quality control elements are quality control procedures at least 
being effectively applied. annually to ensure the firm is in 

compliance. 
L 








The AICPA Peer Review Program is administered by the state CPA societies under 
the overall direction of the AICPA peer review board. Reviews are conducted every 
three years, and are normally performed by a CPA firm selected by the firm being 
reviewed, although the firm can request that it be assigned a reviewer through the 
administering state society. Firms required to be registered with and inspected by the 
PCAOB must be reviewed by the AICPA National Peer Review Committee to evaluate 
the non-SEC portion of the firm’s accounting and auditing practice that is not 
inspected by the PCAOB. After the review is completed, the reviewers issue a report 
stating their conclusions and recommendations. Results of the peer review are included 
in a public file by the AICPA. 

Peer review benefits individual firms by helping them meet quality control 
standards, which, in turn, benefits the profession through improved practitioner per- 
formance and higher-quality audits. A firm having a peer review can further benefit if 
the review improves the firm’s practice, thereby enhances its reputation and effectiveness, 
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Relationships Among GAAS, Quality Control, AICPA Practice 
Centers, and Peer Review 











Quality control 





Generally accepted 





standards 








Standards applicable to a 
CPA firm to aid in satisfying 


= auditing standards 





Standards applicable to 
each audit 







generally accepted auditing 
standards 


Audit practice 
and quality centers 








Peer review 

















Method to determine 
whether a CPA firm meets 
quality control standards 


Organizations intended to 
help firms meet quality 

control standards and audit 
standards 























y- 
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and reduces the likelihood of lawsuits. Of course, peer reviews are expensive to con- 
duct, so the benefits come at a cost. 


The AICPA has established audit practice and quality centers as resource centers to 
improve audit practice quality. The Center for Audit Quality (CAQ) is an autonomous 
public policy organization affiliated with the AICPA serving investors, public company 
auditors and the capital markets. The Center’s mission is to foster confidence in the 
audit process and to make public company audits even more reliable and relevant for 
investors. The Private Companies PARAaG@onRDB) AGE Fanage- 
ment information to firms of all sizes. 

In addition to these firm resources, the AICPA has established audit quality centers 
for governmental audits and employee benefit plan audits. Figure 2-3 summarizes the 
relationships among GAAS, quality control, the audit practice and quality centers, and 
peer review in ensuring audit quality. 


Audit Practice 
and Quality Centers 


SUMMARY 


This chapter discussed the nature of the CPA profession and the activities of CPA firms. 
Because CPA firms play an important social role, several organizations, including the 
PCAOB, SEC, and AICPA provide oversight to increase the likelihood of appropriate audit 
quality and professional conduct. These are summarized in Figure 2-4 (p. 40). Shaded 
circles in the figure indicate items discussed in this or the last chapter. The AICPA Code of 
Professional Conduct provides a standard of conduct for practitioners and is discussed in 
Chapter 4. The potential for legal liability is also a significant influence on auditor conduct 
and is discussed in Chapter 5. 


ESSENTIAL TERMS 


AICPA—American Institute of Certified 
Public Accountants, a voluntary organiza- 
tion of CPAs that sets professional require- 
ments, conducts research, and publishes 
materials relevant to accounting, auditing, 
management consulting services, and taxes 


Center for Audit Quality (CAQ)—An 
autonomous public policy organization 
with a mission to foster confidence in the 
audit process and to make public company 
audits even more reliable and relevant 
for investors 
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Ways the Profession and Society Encourage CPAs to Conduct 
Themselves at a High Level 










CPA 
examination 





Quality 








GAAS and 
interpretations 












Continuing 
education 
requirements 











control 











Conduct 


of Legal 
CPA firm liability 
personnel 


























Peer review 







Code 
PCAOB and SEC 















Professional 
Conduct 





AICPA 
practice and 
quality centers 





of 








Generally accepted auditing standards 

(GAAS)—10 auditing standards, developed 

by the AICPA, consisting of general 

standards, standards of field work, and 

standards of reporting, along with inter- 

pretatigns; ae ao pir was 
anc 


Internat br Pe sees on Auditing 
(ISAs)—statements issued by the Inter- 
national Auditing and Assurance Standards 
Board of the International Federation of 
Accountants to promote international 
acceptance of auditing standards 


Peer review—the review by CPAs of a 
CPA firm’s compliance with its quality 
control system 


Public Company Accounting Oversight 
Board (PCAOB)—Board created by the 
Sarbanes—Oxley Act to oversee auditors of 


public companies, including establishing 
auditing and quality control standards 
and performing inspections of registered 
accounting firms 


Quality control—methods used by a CPA 

to ensure that the firm meets its 

OP onl responsibilities to clients and 
others 


Securities and Exchange Commission 
(SEC)—a federal agency that oversees 
the orderly conduct of the securities markets; 
the SEC assists in providing investors 
in public corporations with reliable infor- 
mation upon which to make investment 
decisions 


Statements on Auditing Standards 
(SASs)—pronouncements issued by the 
AICPA to interpret generally accepted 
auditing standards 


REVIEW QUESTIONS 


2-1 (Objective 2-1) State the four major types of services CPAs perform, and explain each. 


2-2. (Objectives 2-1, 2-7) What major characteristics of the organization and conduct of 
CPA firms permit them to fulfill their social function competently and independently? 


2-3 (Objective 2-2) What is the role of the Public Company Accounting Oversight Board? 


2-4 (Objective 2-3) Describe the role of the SEC in society and discuss its relationship with 


and influence on the practice of auditing. 


2-5 (Objective 2-4) What roles are played by the American Institute of Certified Public 


Accountants for its members? 
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2-6 (Objective 2-4) What are the purposes of the AICPA Statements on Standards for 
Attestation Engagements? 


2-7 (Objectives 2-2, 2-4, 2-5) Who is responsible for establishing auditing standards for 
audits of U.S. public companies? Who is responsible for establishing auditing standards for 
U.S. private companies? Explain. 


2-8 (Objective 2-6) Distinguish between generally accepted auditing standards and gen- 
erally accepted accounting principles, and give two examples of each. 


2-9 (Objective 2-6) The first standard of field work requires the performance of the audit 
by a person or persons having adequate technical training and proficiency as an auditor. 
What are the various ways in which auditors can fulfill the requirement of the standard? 


2-10 (Objective 2-6) Generally accepted auditing standards have been criticized by 
different sources for failing to provide useful guidelines for conducting an audit. The critics 
believe the standards should be more specific to enable practitioners to improve the quality 
of their performance. As the standards are now stated, some critics believe that they 
provide little more than an excuse to conduct inadequate audits. Evaluate this criticism of 
the 10 generally accepted auditing standards. 

2-11 (Objective 2-5) Describe the role of International Standards on Auditing. What is the 
relationship between International Standards on Auditing and U.S. Generally Accepted 
Auditing Standards? 

2-12 (Objective 2-7) What is meant by the term quality control as it relates to a CPA firm? 
2-13 (Objective 2-7) The following is an example of a CPA firm’s quality control procedure 
requirement: “Any person being considered for employment by the firm must have 
completed a basic auditing course and have been interviewed and approved by an audit 
partner of the firm before he or she can be hired for the audit staff?” Which element of 
quality control does this procedure affect and what is the purpose of the requirement? 


2-14 (Objective 2-7) State what is meant by the term peer review. What are the implications 
; ae 

of peer review for the profession? Apago PDF Enhance r 

2-15 (Objective 2-7) What are the two ‘AICPA resource centers to which CPA firms may 

belong? What are the primary purposes of the two centers? 





MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


2-16 (Objective 2-6) The following questions deal with auditing standards. Choose the best 
response. 


a. International Standards on Auditing are established by the 
(1) International Accounting Standards Board. 
(2) International Auditing and Assurance Standards Board. 
(3) Auditing Standards Board. 
(4) Global Auditing Standards Board. 


b. Which of the following best describes what is meant by U.S. generally accepted auditing 
standards? 
(1) Acts to be performed by the auditor. 
(2) Measures of the quality of the auditor’s performance. 
(3) Procedures to be used to gather evidence to support financial statements. 
(4) Audit objectives generally determined on audit engagements. 


c. The general group of U.S. generally accepted auditing standards includes a requirement 
that 
(1) field work be adequately planned and supervised. 
(2) the auditor’s report state whether or not the financial statements conform to 
generally accepted accounting principles. 
(3) due professional care be exercised by the auditor. 
(4) informative disclosures in the financial statements be reasonably adequate. 
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d. What is the general character of the three generally accepted auditing standards 

classified as standards of field work? 

(1) The competence, independence, and professional care of persons performing the 
audit. 

(2) Criteria for the content of the auditor’s report on financial statements and related 
footnote disclosures. 

(3) The criteria of audit planning and evidence gathering. 

(4) The need to maintain an independence in mental attitude in all matters pertaining 
to the audit. 


2-17 (Objective 2-7) The following questions concern quality control standards. Choose 
the best response. 


a. A CPA firm is reasonably assured of meeting its responsibility to provide services that 
conform with professional standards by 
(1) adhering to generally accepted auditing standards. 
(2) having an appropriate system of quality control. 
(3) joining professional societies that enforce ethical conduct. 
(4) maintaining an attitude of independence in its engagements. 


b. The nature and extent of a CPA firm’s quality control policies and procedures depend 
on 





The CPA The Nature of the Cost-benefit 
Firm’s Size CPA Firm’s Practice Considerations 
(1) Yes Yes Yes 
(2) Yes Yes No 
(3) Yes No Yes 
(4) No Yes Yes 





c. Which of the following are elements of a CPA firm’s quality control that should be 


“APAGS “PDE PHAR E? icies and procedures? 





Human Resources onitoring Engagement Performance 
(1) Yes Yes No 
(2) Yes Yes Yes 
(3) No Yes Yes 
(4) Yes No Yes 





d. One purpose of establishing quality control policies and procedures for deciding 
whether to accept a new client is to 
(1) enable the CPA firm to attest to the reliability of the client. 
(2) satisfy the CPA firm’s duty to the public concerning the acceptance of new clients. 
(3) provide reasonable assurance that the integrity of the client is considered. 
(4) anticipate before performing any field work whether an unqualified opinion can 
be issued. 


DISCUSSION QUESTIONS AND PROBLEMS 


2-18 (Objectives 2-2, 2-7) The following comments summarize the beliefs of some 
practitioners about the Sarbanes—Oxley Act and the PCAOB. 


The Sarbanes—Oxley Act is unnecessary regulation of the profession. The costs of 
requirements such as reporting on the effectiveness of internal control over financial 
reporting greatly exceed the benefits. These increased costs will discourage companies 
from issuing publicly traded stock in the United States. The regulation also gives a 
competitive advantage to national CPA firms because they are best prepared to meet 
the increased requirements of the Act. Three things already provide sufficient 
assurance that quality audits are performed without PCAOB oversight. They are 
competitive pressures to do quality work, legal liability for inadequate performance, 


Part 1 / THE AUDITING PROFESSION 


a. 


b. 


and a code of professional conduct requiring that CPA firms follow generally accepted 
auditing standards. 


State the pros and cons of those comments. 


Evaluate whether the Sarbanes—Oxley Act and PCAOB regulation are worth their 
cost. 


2-19 (Objective 2-7) For each of the following procedures taken from the quality control 
manual of a CPA firm, identify the applicable element of quality control from Table 2-4 
on page 38. 


a. 


eh 


Appropriate accounting and auditing research requires adequate technical reference 
materials. Each firm professional has online password access through the firm’s 
Internet Web site to electronic reference materials on accounting, auditing, tax, SEC, 
and other technical information, including industry data. 


. Each office of the firm shall be visited at least annually by review persons selected by 


the director of accounting and auditing. Procedures to be undertaken by the reviewers 
are illustrated by the office review program. 


. All potential new clients are reviewed before acceptance. The review includes 


consultation with predecessor auditors, and background checks. All new clients are 
approved by the firm management committee, including assessing whether the firm 
has the technical competence to complete the engagement. 


. Each audit engagement must include a concurring partner review of critical audit 


decisions. 


. Audit engagement team members enter their electronic signatures in the firm’s 


engagement management software to indicate the completion of specific audit 
program steps. At the end of the audit engagement, the engagement management 
software will not allow archiving of the engagement file until all audit program steps 
have been electronically signed. 


. At all stages of any engagemenAD GGFOs PDB rnEnhancexiaft at 


appropriate levels in the accounting and auditing decisions. Various approvals of the 
manager or senior accountant are obtained throughout the audit. 


. No employee will have any direct or indirect financial interest, association, or rela- 


tionship (for example, a close relative serving a client in a decision-making capacity) 
not otherwise disclosed that might be adverse to the firm’s best interest. 


. Individual partners submit the nominations of those persons whom they wish to be 


considered for partner. To become a partner, an individual must have exhibited a high 
degree of technical competence; must possess integrity, motivation, and judgment; 
and must have a desire to help the firm progress through the efficient dispatch of the 
job responsibilities to which he or she is assigned. 


. Through our continuing employee evaluation and counseling program and through 


the quality control review procedures as established by the firm, educational needs are 
reviewed and formal staff training programs modified to accommodate changing 
needs. At the conclusion of practice office reviews, apparent accounting and auditing 
deficiencies are summarized and reported to the firm’s director of personnel. 


. The firm’s mission statement indicates its commitment to quality, and this commit- 


ment is emphasized in all staff training programs. 


2-20 (Objectives 2-2, 2-3, 2-6) The Howard Mobile Home Manufacturing Company is 
audited by Olson and Riley, CPAs. Howard Mobile Home has decided to issue stock to the 
public and wants Olson and Riley to perform all the audit work necessary to satisfy the 
requirements for filing with the SEC. Olson and Riley has never had a client go public 
before. 


a. 


b. 


What factors should Olson and Riley consider before accepting the engagement? 


List additional issues confronting auditors of companies that file with the SEC as 
compared to dealing with a private company audit client. 
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Required 


2-21 (Objective 2-6) Ray, the owner of a small company, asked Holmes, a CPA, to conduct 
an audit of the company’s records. Ray told Holmes that an audit was to be completed in 
time to submit audited financial statements to a bank as part of a loan application. Holmes 
immediately accepted the engagement and agreed to provide an auditor’s report within 3 
weeks. Ray agreed to pay Holmes a fixed fee plus a bonus if the loan was granted. 

Holmes hired two accounting students to conduct the audit and spent several hours 
telling them exactly what to do. Holmes told the students not to spend time reviewing 
internal controls but instead to concentrate on proving the mathematical accuracy of 
the ledger accounts and summarizing the data in the accounting records that support 
Ray’s financial statements. The students followed Holmes’s instructions and after 2 weeks 
gave Holmes the financial statements, which did not include footnotes. Holmes reviewed 
the statements and prepared an unqualified auditor’s report. The report did not refer 
to generally accepted accounting principles or to the consistent application of such 
principles. 

Briefly describe each of the 10 generally accepted auditing standards and indicate how the 
action(s) of Holmes resulted in a failure to comply with each standard. 


Organize your answer as follows:* 
Holmes’ Actions Resulting in Failure 
Brief Description of GAAS to Comply with GAAS 


2-22 (Objective 2-5) For each engagement described below, indicate whether the engage- 
ment is likely to be conducted under international auditing standards, U.S. generally 
accepted auditing standards, or PCAOB auditing standards. 


a. An audit of a U.S. private company with no public equity or debt. 

b. An audit of a German private company with public debt in Germany. 
c. An audit of a U.S. public company. 
d 


. An audit of a United tl public company that is listed in the United States and 
Ww v= financial B Ff tied with the SEC. 
no 


RAD. 


. An pe of a U.S. private company to be used for a loan from a publicly-traded bank. 


mh oO 


t-for- “Enh RACE 


g. An audit of a U.S public company that is a subsidiary of a Japanese company that will 
be used for reporting by the parent company in Japan. 


h. An audit of a U.S. private company that has publicly-traded debt. 


INTERNET PROBLEM 2-1: INTERNATIONAL AUDITING 


AND ASSURANCE STANDARDS BOARD 


Required 





International Standards on Auditing (ISAs) are issued by the International Auditing and 
Assurance Standards Board (IAASB). Use the IAASB web site (http://www.ifac.org/IAASB/) 
to learn more about the IAASB and its standard-setting activities. 


a. What is the objective of the AASB? Who uses International Standards on Auditing? 
b. Summarize the due process followed by the AASB in setting standards. 
c. How is the IAASB committed to transparency in the standard-setting process? 


*AICPA adapted. 
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AUDIT REPORTS 


The Audit Report Was Timely, But At What Cost? 


Halvorson & Co., CPAs was hired as the auditor for Machinetron, Inc., a 
company that manufactured high-precision, computer-operated lathes. 
The owner, Al Trent, thought that Machinetron was ready to become a 
public company, and he hired Halvorson to conduct the upcoming audit 
and assist in the preparation of the registration statement for a securities 
offering. 


Because Machinetron’s machines were large and complex, they were 
expensive. Each sale was negotiated individually by Trent, and the sales 
often transpired over several months. As a result, improper recording of 
one or two machines could represent a material misstatement of the 
financial statements. 


The engagement partner in charge of the Machinetron audit was Bob 
Lehman, who had significant experience auditing manufacturing companies. 
He recognized the risk for improper recording of sales, and he insisted that 
his staff confirm all receivables at year-end directly with customers. 
Lehman conducted his review of the Machinetron audit files the same day 
that Trent wanted to file the company’s registration statement for the initial 
public stock offering with the SEC. L 
sale at year-end was supported by a fax, rather than the usual written 
confirmation reply. Apparently, relations with this customer were “touchy,” 
and Trent had discouraged the audit staff from communicating with the 
customer. 


At the end of the day, there was a meeting in Machinetron’s office. It was 
attended by Lehman, Trent, the underwriter of the stock offering, and the 
company’s attorney. Lehman indicated that a better form of confirmation 
would be required to support the receivable. After hearing this, Trent blew 
his stack. Machinetron’s attorney stepped in and calmed Trent down. He 
offered to write a letter to Halvorson & Co. stating that in his opinion, a fax 
had legal substance as a valid confirmation reply. Lehman, feeling 


QGciatPPRakbnhapcer 


LEARNING OBJECTIVES 


After studying this chapter, 
you should be able to 


3-1 


3-2 


3-3 


3-4 


3-5 


3-6 


3-7 


3-8 


3-9 





Describe the parts of the 
standard unqualified audit report. 


Specify the conditions required to 
issue the standard unqualified 
audit report. 


Understand reporting on 
financial statements and 
internal control over financial 
reporting under Section 404 of 
the Sarbanes-Oxley Act. 


Describe the five circumstances 
when an unqualified report with 
an explanatory paragraph or 
modified wording is appropriate. 


Identify the types of audit 
reports that can be issued when 
an unqualified opinion is not 
justified. 

Explain how materiality affects 
audit reporting decisions. 


Draft appropriately modified 
audit reports under a variety of 
circumstances. 


Determine the appropriate audit 
report for a given audit situation. 


Understand proposed use of 
international accounting and 
auditing standards 





tremendous pressure, accepted this proposal and signed off on an unqualified audit opinion about Machinetron’s 


financial statements. 


Six months after the stock offering, Machinetron issued a statement indicating that its revenues for the prior year were 
overstated as a result of improperly recorded sales, including the sale supported by the fax confirmation. The 
subsequent SEC investigation uncovered that the fax was returned to the audit firm by Trent, not the customer. 
Halvorson & Co. recalled their unqualified audit report, but this was too late to prevent the harm done to investors. 
Halvorson & Co. was forced to pay substantial damages, and Bob Lehman was forbidden to practice before the SEC. 


He subsequently left public accounting. 





Re are essential to audit and assurance engagements because they communicate the auditor’s findings. Users 
of financial statements rely on the auditor’s report to provide assurance on the company’s financial statements. 
As the story at the beginning of this chapter illustrates, the auditor will likely be held responsible if an incorrect audit 


report is issued. 


The audit report is the final step in the entire audit process. The reason for studying it now is to permit reference 
to different audit reports as we study the accumulation of audit evidence throughout this text. These evidence 
concepts are more meaningful after you understand the form and content of the final product of the audit. We begin 
by describing the content of the standard auditor’s report. 


STANDARD UNQUALIFIED AUDIT REPORT 


Parts of 
Standard Unqualified 
Audit Report 





Describe the parts of the 
standard unqualified audit 
report. 





To allow users to understand audit reports, AICPA professional standards provide 
uniform wording for the auditor’s report, as illustrated in the auditor’s standard 
unqualified audit report in Figure 3-1. Different auditors may alter the wording or 
presentation slightly, but the meaning will be the same. 


The auditor’s standard unqualified audit report contains seven distinct parts, and 
these are labeled in bold letters in the margin beside Figure 3-1. 


1. Report title. Auditing standards require that the report be titled and that the title 
include the word independent. For example, appropriate titles include “independent 
auditor’s report,” “report of independent auditor,” or “independent accountant’s 
opinion.” The requirement that the title include the word independent conveys to 
users that the audit was unbiased in all aspects. 

2. Audit report address. The report is usually addressed to the company, its 
stockholders, or the board of directors. In recent years, it has become customary to 
address the report to the board of directors and stockholders to indicate that the 
auditApagodcPDFe Bmhancer 

3. Introductory paragraph. The first paragraph of the report does three things: First, 
it makes the simple statement that the CPA firm has done an audit. This is intended to 
distinguish the report from a compilation or review report. The scope paragraph (see 
part 4) clarifies what is meant by an audit. 

Second, it lists the financial statements that were audited, including the balance sheet 
dates and the accounting periods for the income statement and statement of cash flows. 
The wording of the financial statements in the report should be identical to those used by 
management on the financial statements. Notice that the report in Figure 3-1 is on com- 
parative financial statements. Therefore, a report on both years’ statements is needed. 

Third, the introductory paragraph states that the statements are the responsibility 
of management and that the auditor’s responsibility is to express an opinion on the 
statements based on an audit. The purpose of these statements is to communicate that 
management is responsible for selecting the appropriate accounting principles and 
making the measurement decisions and disclosures in applying those principles and to 
clarify the respective roles of management and the auditor. 

4. Scope paragraph. The scope paragraph is a factual statement about what the 
auditor did in the audit. This paragraph first states that the auditor followed U.S. 
generally accepted auditing standards. For an audit of a public company, the paragraph 
will indicate that the auditor followed standards of the Public Company Accounting 
Oversight Board. Because financial statements prepared in accordance with U.S. 
accounting principles and audited in accordance with U.S. auditing standards are 
available throughout the world on the Internet, the country of origin of the accounting 
principles used in preparing the financial statements and auditing standards followed 
by the auditor are identified in the audit report. 

The scope paragraph states that the audit is designed to obtain reasonable assurance 
about whether the statements are free of material misstatement. The inclusion of the word 
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a Standard Unqualified Report on Comparative Statements for a U.S. Public Company ) 





ANDERSON and ZINDER, P.C. 
Certified Public Accountants 
Suite 100 
Park Plaza East 
Denver, Colorado 80110 
303/359-0800 


Independent Auditor's Report 


To the Stockholders 
General Ring Corporation 


We have audited the accompanying balance sheets of General Ring Corporation as of December 
31, 2011 and 2010, and the related statements of income, retained earnings, and cash flows for 
the years then ended. These financial statements are the responsibility of the Company's 
management. Our responsibility is to express an opinion on these financial statements based on 
our audits. 


We conducted our audits in accordance with auditing standards generally accepted in the United 
States of America. Those standards require that we plan and perform the audit to obtain 
reasonable assurance about whether the financial statements are free of material misstatement. 
An audit includes examining, on a test basis, evidence supporting the amounts and disclosures 
in the financial statements. An audit also includes assessing the accounting principles used and 
significant estimates made by management, as well as evaluating the overall financial statement 
presentation. We believe that our audits provide a reasonable basis for our opinion. 


In our opinion, the financial statements referred to above present fairly, in all material respects, 
the financial position of General Ring Corporation as of December 31, 2011 and 2010, and the 
results of its operations and its cash flows for the years then ended in conformity with 
accounting principles generally accepted in the United States of America. 

ANDERSON AND ZINDER, P.C., CPAs 


February 15, 2012 





Report Title 
Audit Report Address 


Introductory Paragraph 
(Factual Statement) 


Scope Paragraph 
(Factual Statement) 


Opinion Paragraph 
(Conclusions) 


Name of CPA Firm 


Audit Report Date (Date Audit 
Field Work Is Completed) 





wt 





material conveys that auditors are responsible only to search for significant misstatements, 
not minor misstatements that do not affect users’ decisions. The use of the term reasonable 
assurance is intended to indicate that an audit cannot be expected to completely eliminate 
the possibility that a material misstatement will exist in the financial statements. In 
other words, an audit provides a high level of assurance, but it is not a guarantee. 

The remainder of the scope paragraph discusses the audit evidence accumulated 
and states that the auditor believes that the evidence accumulated was appropriate for 
the circumstances to express the opinion presented. The words test basis indicate that 
sampling was used rather than an audit of every transaction and amount on the 
statements. Whereas the introductory paragraph of the report states that management 
is responsible for the preparation and content of the financial statements, the scope 
paragraph states that the auditor evaluates the appropriateness of those accounting 
principles, estimates, and financial statement disclosures and presentations given. 

5. Opinion paragraph. The final paragraph in the standard report states the 
auditor’s conclusions based on the results of the audit. This part of the report is so 
important that often the entire audit report is referred to simply as the auditor’s 
opinion. The opinion paragraph is stated as an opinion rather than as a statement of 
absolute fact or a guarantee. The intent is to indicate that the conclusions are based on 
professional judgment. The phrase in our opinion indicates that there may be some 
information risk associated with the financial statements, even though the statements 
have been audited. 
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EU REQUIRES AND 
PCAOB CONSIDERS 
AUDIT PARTNER'S 
PERSONAL 


SIGNATURE ON 
AUDIT REPORT 


Conditions for 
Standard Unqualified 
Audit Report 





Specify the conditions 
required to issue the 
standard unqualified 
audit report. 





While some countries in continental Europe 
already required that the personal signature of 
the engagement partner be included in the audit 
report, the passage of The European Union's Eighth 
Company Law Directive in 2006 made it mandatory 
for all EU member states. The 2008 final report of 
the U.S. Department of Treasury's Advisory Commit- 


Sign the Audit Report.” Proponents argue that the 
requirement would increase the partner's sense of 
accountability to users and it would increase trans- 
parency about who is responsible for performing 
the audit. Opponents note that only including the 
audit firm signature signals to users that the 
entire audit firm stands behind the opinion. 


tee on the Auditing Profession urged the PCAOB 
to consider mandating the engagement partner's 
signature on the auditor's report. In 2009 the 
PCAOB issued and received comments on “Concept 
Release on Requiring the Engagement Partner to 


Source: “Concept Release on Requiring the 
Engagement Partner to Sign the Audit Report,” 
PCAOB Release No. 2009-005, July 28, 2009, 
PCAOB Rulemaking Docket Matter No. 29 
(www.pcaobus.org). 





The opinion paragraph is directly related to the first and fourth generally accepted 
auditing reporting standards listed on page 35. The auditor is required to state an 
opinion about the financial statements taken as a whole, including a conclusion about 
whether the company followed U.S. generally accepted accounting principles or the 
International Financial Reporting Standards (IFRS) issued by the International 
Accounting Standards Board (IASB). 

One of the controversial parts of the auditor’s report is the meaning of the term 
present fairly. Does this mean that if generally accepted accounting principles are 
followed, the financial statements are presented fairly, or something more? Occa- 
sionally, the courts have concluded that auditors are responsible for looking beyond 
generally accepted accounting principles to determine whether users might be misled, 
even if those principles are followed. Most auditors believe that financial statements 
are “presented men when the statements are in accordance with generally accepted 
accou ha e to examine the substance of trans- 
actionis BAGS P DE Enka ance. 4 

6. Name of CPA firm. The name identifies the CPA firm or practitioner who 
performed the audit. Typically, the firm’s name is used because the entire CPA firm has 
the legal and professional responsibility to ensure that the quality of the audit meets 
professional standards. 

7. Audit report date. The appropriate date for the report is the one on which the 
auditor completed the auditing procedures in the field. This date is important to users 
because it indicates the last day of the auditor’s responsibility for the review of signifi- 
cant events that occurred after the date of the financial statements. In the audit report 
in Figure 3-1 (p. 47), the balance sheet is dated December 31, 2011, and the audit 
report is dated February 15, 2012. This indicates that the auditor has searched for 
material unrecorded transactions and events that occurred up to February 15, 2012. 


The standard unqualified audit report is issued when the following conditions have 
been met: 


1. All statements—balance sheet, income statement, statement of retained earnings, 
and statement of cash flows—are included in the financial statements. 

2. The three general standards have been followed in all respects on the engagement. 

3. Sufficient appropriate evidence has been accumulated, and the auditor has 
conducted the engagement in a manner that enables him or her to conclude 
that the three standards of field work have been met. 

4. The financial statements are presented in accordance with U.S. generally 
accepted accounting principles. This also means that adequate disclosures have 
been included in the footnotes and other parts of the financial statements. 

5. There are no circumstances requiring the addition of an explanatory paragraph 
or modification of the wording of the report. 


48 Part 1 / THE AUDITING PROFESSION 





r 
fire Four Categories of Audit Reports 

















Standard : . 
Unqualified The five conditions stated on page 48 have been met. 
Unqualified with A complete audit took place with satisfactory results and 
Explanatory Paragraph financial statements that are fairly presented, but the auditor 
or Modified Wording believes that it is important or is required to provide additional 
information. 











The auditor concludes that the overall financial statements are 
fairly presented, but the scope of the audit has been materially 


























Orel restricted or applicable accounting standards were not followed 
in preparing the financial statements. 
The auditor concludes that the financial statements are not fairly 
Adverse or presented (adverse), he or she is unable to form an opinion as 
Disclaimer to whether the financial statements are fairly presented 
(disclaimer), or he or she is not independent (disclaimer). 
S 4 





When these conditions are met, the standard unqualified audit report, as shown in 
Figure 3-1, is issued. The standard unqualified audit report is sometimes called a clean 
opinion because there are no circumstances requiring a qualification or modification 
of the auditor’s opinion. The standard unqualified report is the most common audit 
opinion. Sometimes circumstances beyond the client’s or auditor’s control prevent the 
issuance of a clean opinion. HowevARPAaGQasP DEpaknhance®priate 
changes to their accounting records to avoid a qualification or modification by the 
auditor. 

If any of the five requirements for the standard unqualified audit report are not met, 
the standard unqualified report cannot be issued. Figure 3-2 indicates the categories of 
audit reports that can be issued by the auditor. The departures from a standard 
unqualified report are considered increasingly severe as one moves down the figure. 
Financial statement users are normally much more concerned about a disclaimer or 
adverse opinion than an unqualified report with an explanatory paragraph. These 
other categories of audit reports are discussed in following sections. 


REPORT ON INTERNAL CONTROL OVER FINANCIAL REPORTING 


UNDER SECTION 404 OF THE SARBANES-OXLEY ACT 





As discussed in Chapter 1, Section 404(b) of the Sarbanes—Oxley Act requires the 
auditor of a public company to attest to management’s report on the effectiveness of 
internal control over financial reporting. Since 2004, larger public companies (known 
as accelerated filers) have been required by the SEC to annually obtain an auditor’s 
report on internal controls over financial reporting. As noted in Chapter 1, non- 
accelerated filers have been exempt from this requirement and the passage by Congress 
of the 2010 financial reform legislation made that exemption permanent for non- 
accelerated filers. 

PCAOB Auditing Standard 5 requires the audit of internal control to be integrated 
with the audit of the financial statements. However, the auditor may choose to issue 
separate reports, such as the separate report on internal control over financial 





Understand reporting on 
financial statements and 
internal control over financial 
reporting under Section 404 
of the Sarbanes-Oxley Act. 
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Separate Report on Internal Control over Financial Reporting 





Introductory 
Paragraph 


Scope 
Paragraph 


Definition 
Paragraph 


Inherent 
Limitations 
Paragraph 


Opinion 
Paragraph 
Cross 


Reference 
Paragraph 


REPORT OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM 
To the Board of Directors and Shareholders of Westbrook Company, Inc.: 


We have audited Westbrook Company, Inc.'s internal control over financial reporting as of 
December 31, 2011, based on criteria established in Internal Control—Integrated Framework 
issued by the Committee of Sponsoring Organizations of the Treadway Commission (the COSO 
criteria). Westbrook Company, Inc.'s management is responsible for maintaining effective internal 
control over financial reporting, and for its assessment of the effectiveness of internal control 
over financial reporting included in the accompanying Management Report on Internal Control 
Over Financial Reporting. Our responsibility is to express an opinion on the company’s internal 
control over financial reporting based on our audit. 


We conducted our audit in accordance with the standards of the Public Company Accounting 
Oversight Board (United States). Those standards require that we plan and perform the audit to 
obtain reasonable assurance about whether effective internal control over financial reporting was 
maintained in all material respects. Our audit included obtaining an understanding of internal 
control over financial reporting, assessing the risk that a material weakness exists, testing and 
evaluating the design and operating effectiveness of internal control based on the assessed risk, 
and performing such other procedures as we considered necessary in the circumstances. We 
believe that our audit provides a reasonable basis for our opinion. 


A company’s internal control over financial reporting is a process designed to provide reasonable 
assurance regarding the reliability of financial reporting and the preparation of financial 
statements for external purposes in accordance with generally accepted accounting principles. A 
company’s internal control over financial reporting includes those policies and procedures that (1) 
pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the 
transactions and dispositions of the assets of the company; (2) provide reasonable assurance that 
transactions are recorded as necessary to permit preparation of financial statements in 
accordance with generally accepted accounting principles, and that receipts and expenditures of 
the company are being made only in accordance with authorizations of management and 
directors of the company; and (3) provide reasonable assurance regarding prevention or timely 
detection of unauthorized acquisition, use, or disposition of the company’s assets that could have 
a material effect on the financial statements. 


Because of its inherent limitations, internal control over financial reporting may not prevent or 
detect misstatements. Also, projections of any evaluation of effectiveness to future periods are 
subject to the risk that controls may become inadequate because of changes in conditions, or that 
the degree of compliance with the policies or procedures may deteriorate. 


In our opinion, Westbrook Company, Inc. maintained, in all material respects, effective internal 
control over financial reporting as of December 31, 2011, based on the COSO criteria. 


We also have audited, in accordance with the standards of the Public Company Accounting 
Oversight Board (United States), the consolidated balance sheets of Westbrook Company, Inc. as 
of December 31, 2011 and 2010, and the related consolidated statements of income, 
shareholders’ equity and cash flows for each of the three years in the period ended December 31, 
2011 of Westbrook Company, Inc. and our report dated February 11, 2012 expressed an 
unqualified opinion thereon. 











reporting shown in Figure 3-3, or in a combined report. The combined report on 
financial statements and internal control over financial reporting addresses both the 
financial statements and management’s report on internal control over financial 
reporting. While the combined report is permitted, the separate report on internal 
control over financial reporting is more common and includes these elements: 


* The introductory, scope, and opinion paragraphs describe that the scope of the 
auditor’s work and opinion is on internal control over financial reporting, and 
the introductory paragraph highlights management’s responsibility for and its 
separate assessment of internal control over financial reporting. 

* The introductory and opinion paragraphs also refer to the framework used to 
evaluate internal control. 
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* The report includes a paragraph after the scope paragraph defining internal 
control over financial reporting. 

* The report also includes an additional paragraph before the opinion that 
addresses the inherent limitations of internal control. 

» Although the audit opinion on the financial statements addresses multiple 
reporting periods, the auditor’s opinion about the effectiveness of internal 
control is as of the end of the most recent fiscal year. 

* The last paragraph of the report includes a cross-reference to the auditor’s 
separate report on the financial statements. 


The separate report in Figure 3-3 is an unqualified opinion on the effectiveness of 
internal control over financial reporting prepared in accordance with PCAOB Auditing 
Standard 5. The auditor may issue a qualified opinion, adverse opinion, or disclaimer 
of opinion on the operating effectiveness of internal control over financial reporting. 
Conditions that require the auditor to issue a report other than an unqualified 
opinion on the operating effectiveness of internal control are discussed in Chapter 10, 
along with the effects of these conditions on the wording of the auditor’s report on 
internal control over financial reporting. 

Auditor reporting on internal controls for private companies is covered in 
Chapter 25. 


UNQUALIFIED AUDIT REPORT WITH 


EXPLANATORY PARAGRAPH OR MODIFIED WORDING 





The remainder of this chapter deals with reports, other than standard unqualified 
reports, on the audit of financial statements, In cer. Sjqan nder audit 
report on the financial statements Abad, OPP. enban Fandard 
unqualified report. The unqualified aie = with olieiies oe or 
modified wording meets the criteria of a complete audit with satisfactory results and 
financial statements that are fairly presented, but the auditor believes it is important or 
is required to provide additional information. In a qualified, adverse, or disclaimer 
report, the auditor either has not performed a satisfactory audit, is not satisfied that the 
financial statements are fairly presented, or is not independent. 

The following are the most important causes of the addition of an explanatory 
paragraph or a modification in the wording of the standard unqualified report: 


* Lack of consistent application of generally accepted accounting principles 
* Substantial doubt about going concern 

» Auditor agrees with a departure from promulgated accounting principles 
* Emphasis of a matter 

* Reports involving other auditors 


The first four reports all require an explanatory paragraph. In each case, the three 
standard report paragraphs are included without modification, and a separate explana- 
tory paragraph follows the opinion paragraph. 

Only reports involving the use of other auditors use a modified wording report. 
This report contains three paragraphs, and all three paragraphs are modified. 


The second reporting standard requires the auditor to call attention to circumstances in 
which accounting principles have not been consistently observed in the current period 
in relation to the preceding period. Generally accepted accounting principles require 
that changes in accounting principles or their method of application be to a preferable 
principle and that the nature and impact of the change be adequately disclosed. When a 
material change occurs, the auditor should modify the report by adding an explanatory 


OBJECTIVE 3-4 





Describe the five 


circumstances when an 
unqualified report with 
an explanatory paragraph 
or modified wording is 
appropriate. 





Lack of Consistent 
Application of GAAP 
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Explanatory Paragraph Because of Change in Accounting Principle 





Fourth Paragraph— 
Explanatory Paragraph 


INDEPENDENT AUDITOR’S REPORT 


(Same introductory, scope, and opinion paragraphs as the standard report) 


As discussed in Note 8 to the financial statements, the Company changed its method of computing 
depreciation in 2011. 











Substantial Doubt 
About Going Concern 


paragraph after the opinion paragraph that discusses the nature of the change and 
points the reader to the footnote that discusses the change. The materiality of a change 
is evaluated based on the current year effect of the change. An explanatory paragraph is 
required for both voluntary changes and required changes due to a new accounting 
pronouncement. Figure 3-4 presents such an explanatory paragraph. 

It is implicit in the explanatory paragraph in Figure 3-4 that the auditor concurs 
with the appropriateness of the change in accounting principles. If the auditor does not 
concur, the change is a violation of generally accepted accounting principles, and his or 
her opinion must be qualified. 


Consistency Versus Comparability The auditor must be able to distinguish 
between changes that affect consistency and those that may affect comparability but do 
not affect consistency. The following are examples of changes that affect consistency 
and therefore require an explanatory paragraph if they are material: 


1. Changes in accounting principles, such as a change from FIFO to LIFO inven- 
tory valuation 
2._ Changes in reporting entitigs, such as the inclusion of an additional company 
Apago.dRDE.i Enhancer 
3. Corrections of errors involving principles, by changing from an accounting 
principle that is not generally acceptable to one that is generally acceptable, 
including correction of the resulting error 


Changes that affect comparability but not consistency and therefore need not be 
included in the audit report include the following: 


1. Changes in an estimate, such as a decrease in the life of an asset for depreciation 
purposes 

2. Error corrections not involving principles, such as a previous year’s mathe- 

matical error 

Variations in format and presentation of financial information 

4. Changes because of substantially different transactions or events, such as new 
endeavors in research and development or the sale of a subsidiary 


— 


Items that materially affect the comparability of financial statements generally 
require disclosure in the footnotes. A qualified audit report for inadequate disclosure 
may be required if the client refuses to properly disclose the items. 


Even though the purpose of an audit is not to evaluate the financial health of the busi- 
ness, the auditor has a responsibility under auditing standards to evaluate whether the 
company is likely to continue as a going concern. For example, the existence of one or 
more of the following factors causes uncertainty about the ability of a company to 
continue as a going concern: 


1. Significant recurring operating losses or working capital deficiencies 

2. Inability of the company to pay its obligations as they come due 

3. Loss of major customers, the occurrence of uninsured catastrophes such as an 
earthquake or flood, or unusual labor difficulties 
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— Explanatory Paragraph Because of Substantial Doubt About Going Concern ) 





INDEPENDENT AUDITOR’S REPORT 


(Same introductory, scope, and opinion paragraphs as the standard report) 


The accompanying financial statements have been prepared assuming that Fairfax Company will 
continue as a going concern. As discussed in Note 11 to the financial statements, Fairfax 
Company has suffered recurring losses from operations and has a net capital deficiency that raise 
substantial doubt about the company’s ability to continue as a going concern. Management's 
plans in regard to these matters are also described in Note 11. The financial statements do not 








include any adjustments that might result from the outcome of this uncertainty. 


Fourth Paragraph— 
Explanatory Paragraph 








4. Legal proceedings, legislation, or similar matters that have occurred that might 
jeopardize the entity’s ability to operate 


The auditor’s concern in such situations is the possibility that the client may not be 
able to continue its operations or meet its obligations for a reasonable period. For this 
purpose, a reasonable period is considered not to exceed 1 year from the date of the 
financial statements being audited. 

When the auditor concludes that there is substantial doubt about the entity’s ability 
to continue as a going concern, an unqualified opinion with an explanatory paragraph 
is required, regardless of the disclosures in the financial statements. Figure 3-5 provides 
an example in which there is substantial doubt about going concern. 

Auditing standards permit but do not require a disclaimer of opinion when there is 
substantial doubt about going concern. The criteria for issuing a disclaimer of opinion 
instead of adding an explanatory paragraph are not stated in the standards, and this 
type of opinion is rarely issued in rApagoaPDF wihnhaniwerght be 
issued is when a regulatory agency, such as the Environmental Protection Agency, is 
considering a severe sanction against a company and, if the proceedings result in an 
unfavorable outcome, the company will be forced to liquidate. 


Rule 203 of the AICPA Code of Professional Conduct states that in unusual situations, a 
departure from a generally accepted accounting principle may not require a qualified or 
adverse opinion. However, to justify an unqualified opinion, the auditor must be satisfied 
and must state and explain, in a separate paragraph or paragraphs in the audit report, 
that adhering to the principle would produce a misleading result in that situation. 


Under certain circumstances, the CPA may want to emphasize specific matters regard- 
ing the financial statements, even though he or she intends to express an unqualified 
opinion. Normally, such explanatory information should be included in a separate 
paragraph in the report. Examples of explanatory information the auditor may report as 
an emphasis of a matter include the following: 


* The existence of significant related party transactions 

* Important events occurring subsequent to the balance sheet date 

* The description of accounting matters affecting the comparability of the 
financial statements with those of the preceding year 

* Material uncertainties disclosed in the footnotes 


When the CPA relies on a different CPA firm to perform part of the audit, which is 
common when the client has several widespread branches or subdivisions, the princi- 
pal CPA firm has three alternatives. Only the second is an unqualified report with 
modified wording. 


1. Make No Reference in the Audit Report When no reference is made to the 
other auditor, a standard unqualified opinion is given unless other circumstances 


Auditor Agrees with a 
Departure from a 
Promulgated Principle 


Emphasis of a Matter 


Reports Involving 
Other Auditors 
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remonl Unqualified Shared Report 1) 





require a departure. This approach is typically followed when the other auditor audited 
an immaterial portion of the statements, the other auditor is well known or closely 
supervised by the principal auditor, or the principal auditor has thoroughly reviewed 
the other auditor’s work. The other auditor is still responsible for his or her own report 
and work in the event of a lawsuit or SEC action. 


2. Make Reference in the Report (Modified Wording Report) This type of 
report is called a shared opinion or report. A shared unqualified report is appropriate 
when it is impractical to review the work of the other auditor or when the portion of 
the financial statements audited by the other CPA is material in relation to the whole. 
An example of an unqualified shared report is shown in Figure 3-6. Notice that the 
report does not include a separate paragraph that discusses the shared responsibility, 
but does so in the introductory paragraph and refers to the other auditor in the scope 
and opinion paragraphs. The portions of the financial statements audited by the other 
auditor can be stated as percentages or absolute amounts. 


3. Qualify the Opinion A qualified opinion or disclaimer, depending on materiality, 
is required if the principal auditor is not willing to assume any responsibility for the 
work of the other auditor. The principal auditor may also decide that a qualification is 
required in the overall report if the other auditor qualified his or her portion of the 
audit. Qualified opinions and disclaimers are discussed in a later section. 








Introductory Paragraph— 
Modified Wording 


Scope Paragraph— 
Modified Wording 


Opinion Paragraph— 
Modified Wording 


INDEPENDENT AUDITOR'S REPORT 


Stockholders and Board of Directors 
Washington Felp 
Midland, Texas 


We have audited the accompanying consolidated balance sheets of Washington Felp as of July 31, 
2011 and 2010, and the related consolidated statements of income, retained earnings, and cash 
flows for the years then ended. These financial statements are the responsibility of the Company’s 
management. Our responsibility is to express an opinion on these financial statements based on 
our audits. We did not audit the financial statements of Stewart Pane and Lighting, a consolidated 
subsidiary in which the Company had an equity interest of 84% as of July 31, 2011, which 
statements reflect total assets of $2,420,000 and $2,237,000 as of July 31, 2011 and 2010, 
respectively, and total revenues of $3,458,000 and $3,121,000 for the years then ended. Those 
statements were audited by other auditors whose report has been furnished to us, and our 
opinion, insofar as it relates to the amounts included for Stewart Pane and Lighting, is based solely 
on the report of the other auditors. 


We conducted our audits in accordance with auditing standards generally accepted in the United 
States of America. Those standards require that we plan and perform the audit to obtain reasonable 
assurance about whether the financial statements are free of material misstatement. An audit 
includes examining, on a test basis, evidence supporting the amounts and disclosures in the financial 
statements. An audit also includes assessing the accounting principles used and significant estimates 
made by management, as well as evaluating the overall financial statement presentation. We believe 
that our audits and the report of other auditors provide a reasonable basis for our opinion. 


In our opinion, based on our audits and the report of other auditors, the consolidated financial 
statements referred to above present fairly, in all material respects, the financial position of 
Washington Felp as of July 31, 2011 and 2010, and the results of its operations and its cash flows 
for the years then ended in conformity with accounting principles generally accepted in the United 
States of America. 


September 16, 2011 

Farn, Ross, & Co. 

Certified Public Accountants 
Dallas, Texas 
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DEPARTURES FROM AN UNQUALIFIED AUDIT REPORT 


It is essential that auditors and readers of audit reports understand the circumstances 
when an unqualified report is inappropriate and the type of audit report issued in each 





: : : Identify the types of audit 
circumstance. In the study of audit reports that depart from an unqualified report, sealer be iesued 
there are three closely related topics: the conditions requiring a departure from an when an unqualified opinion 
unqualified opinion, the types of opinions other than unqualified, and materiality. is not justified. 





First, the three conditions requiring a departure are briefly summarized. Each is 
discussed in greater depth later in the chapter. 


1. The Scope of the Audit Has Been Restricted (Scope Limitation) When the 
auditor has not accumulated sufficient appropriate evidence to conclude whether 
financial statements are stated in accordance with GAAP, a scope restriction exists. 
There are two major causes of scope restrictions: restrictions imposed by the client 
and those caused by circumstances beyond either the client’s or auditor’s control. An 
example of a client restriction is management’s refusal to permit the auditor to 
confirm material receivables or to physically examine inventory. An example of a 
restriction caused by circumstances is when the auditor is not appointed until after 
the client’s year-end. It may not be possible to physically observe inventories, confirm 
receivables, or perform other important procedures after the balance sheet date. 


2. The Financial Statements Have Not Been Prepared in Accordance with 
Generally Accepted Accounting Principles (GAAP Departure) For example, if 
the client insists on using replacement costs for fixed assets or values inventory at 
selling price rather than historical cost as required by generally accepted accounting 
principles, a departure from the unqualified report is required. When U.S. generally 
accepted accounting principles or international financial reporting standards are 


referred to in this context, consiA Bago PDE EnHAnee Er dis- 


i 
closures, including footnotes, is especially 1Mportant. 


3. The Auditor Is Not Independent Independence ordinarily is determined by 
Rule 101 of the rules of the Code of Professional Conduct. Auditor independence 
requirements and the Code of Professional Conduct are further discussed in Chapter 4. 


When any of the three conditions requiring a departure from an unqualified report 
exists and is material, a report other than an unqualified report must be issued. Three 
main types of audit reports are issued under these conditions: qualified opinion, 
adverse opinion, and disclaimer of opinion. 


A qualified opinion report can result from a limitation on the scope of the audit or Qualified Opinion 
failure to follow generally accepted accounting principles. A qualified opinion report 

can be used only when the auditor concludes that the overall financial statements are 

fairly stated. A disclaimer or an adverse report must be used if the auditor believes that 

the condition being reported on is highly material. Therefore, the qualified opinion is 

considered the least severe type of departure from an unqualified report. 

A qualified report can take the form of a qualification of both the scope and the 
opinion or of the opinion alone. A scope and opinion qualification can be issued only 
when the auditor has been unable to accumulate all of the evidence required by 
generally accepted auditing standards. Therefore, this type of qualification is used 
when the auditor’s scope has been restricted by the client or when circumstances exist 
that prevent the auditor from conducting a complete audit. The use of a qualification 
of the opinion alone is restricted to situations in which the financial statements are not 
stated in accordance with GAAP. 

When an auditor issues a qualified report, he or she must use the term except for in 
the opinion paragraph. The implication is that the auditor is satisfied that the overall 
financial statements are correctly stated “except for” a specific aspect of them. Examples 
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Adverse Opinion 


Disclaimer of Opinion 


of this qualification are given later in this chapter. It is unacceptable to use the phrase 
except for with any other type of audit opinion. 


An adverse opinion is used only when the auditor believes that the overall financial 
statements are so materially misstated or misleading that they do not present fairly the 
financial position or results of operations and cash flows in conformity with GAAP. 
The adverse opinion report can arise only when the auditor has knowledge, after an 
adequate investigation, of the absence of conformity. This is uncommon and thus the 
adverse opinion is rarely used. 


A disclaimer of opinion is issued when the auditor has been unable to satisfy himself or 
herself that the overall financial statements are fairly presented. The necessity for 
disclaiming an opinion may arise because of a severe limitation on the scope of the audit 
or a nonindependent relationship under the Code of Professional Conduct between the 
auditor and the client. Either of these situations prevents the auditor from expressing 
an opinion on the financial statements as a whole. The auditor also has the option to 
issue a disclaimer of opinion for a going concern problem. 

The disclaimer is distinguished from an adverse opinion in that it can arise only 
from a lack of knowledge by the auditor, whereas to express an adverse opinion, 
the auditor must have knowledge that the financial statements are not fairly stated. Both 
disclaimers and adverse opinions are used only when the condition is highly material. 


MATERIALITY 


OBJECTIVE 3-6 


Explain how materiality 


affects audit reporting 
decisions. 


Levels of Materiality 





Materiality is an essential consideration in determining the appropriate type of report for 
a given set of circumstances. For example, if a misstatement is immaterial relative to the 
financial statements of the entity for the current period, it is appropriate to issue an un- 
quik pag OcoPhDFins ANGE dite expensing of office supplies rather 
than carrying the unused portion in inventory because the amount is insignificant. 

The situation is totally different when the amounts are of such significance that the 
financial statements are materially affected as a whole. In these circumstances, it is 
necessary to issue a disclaimer of opinion or an adverse opinion, depending on whether 
a scope limitation or GAAP departure is involved. In situations of lesser materiality, a 
qualified opinion is appropriate. 


The common definition of materiality as it applies to accounting and therefore to audit 
reporting is as follows: 





A misstatement in the financial statements can be considered material if knowledge of the misstate- 
ment will affect a decision of a reasonable user of the statements. 





In applying this definition, three levels of materiality are used for determining the 
type of opinion to issue. 


Amounts Are Immaterial When a misstatement in the financial statements exists 
but is unlikely to affect the decisions of a reasonable user, it is considered to be im- 
material. An unqualified opinion is therefore appropriate. For example, assume that 
management recorded prepaid insurance as an asset in the previous year and decides 
to expense it in the current year to reduce record-keeping costs. Management has 
failed to follow GAAP, but if the amounts are small, the misstatement is immaterial 
and a standard unqualified audit report is appropriate. 


Amounts Are Material but Do Not Overshadow the Financial Statements as a 
Whole The second level of materiality exists when a misstatement in the financial 
statements would affect a user’s decision, but the overall statements are still fairly stated 
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and therefore useful. For example, knowledge of a large misstatement in fixed assets 
might affect a user’s willingness to loan money to a company if the assets were the 
collateral. A misstatement of inventory does not mean that cash, accounts receivable, and 
other elements of the financial statements, or the financial statements as a whole, are 
materially incorrect. 

To make materiality decisions when a condition requiring a departure from an 
unqualified report exists, the auditor must evaluate all effects on the financial statements. 
Assume that the auditor is unable to satisfy himself or herself whether inventory is fairly 
stated in deciding on the appropriate type of opinion. Because of the effect of a 
misstatement in inventory on other accounts and on totals in the statements, the auditor 
needs to consider the materiality of the combined effect on inventory, total current 
assets, total working capital, total assets, income taxes, income taxes payable, total current 
liabilities, cost of goods sold, net income before taxes, and net income after taxes. 

When the auditor concludes that a misstatement is material but does not over- 
shadow the financial statements as a whole, a qualified opinion (using “except for”) is 
appropriate. 


Amounts Are So Material or So Pervasive That Overall Fairness of the 
Statements Is in Question The highest level of materiality exists when users are 
likely to make incorrect decisions if they rely on the overall financial statements. To 
return to the previous example, if inventory is the largest balance on the financial 
statements, a large misstatement would probably be so material that the auditor’s 
report should indicate the financial statements taken as a whole cannot be considered 
fairly stated. When the highest level of materiality exists, the auditor must issue either 
a disclaimer of opinion or an adverse opinion, depending on which conditions exist. 

When determining whether an exception is highly material, the extent to which the 
exception affects different parts of the financial statements must be considered. This is 
called pervasiveness. A misclassification between cash and accounts receivable affects 
only those two accounts and is thee pRaAg @vRDEPn Enhaneenure to 
record a material sale is highly pervasive because it affects sales, accounts receivable, 
income tax expense, accrued income taxes, and retained earnings, which in turn affect 
current assets, total assets, current liabilities, total liabilities, owners’ equity, gross 
margin, and operating income. 

As misstatements become more pervasive, the likelihood of issuing an adverse 
opinion rather than a qualified opinion increases. For example, suppose the auditor 
decides a misclassification between cash and accounts receivable should result in a 
qualified opinion because it is material; the failure to record a sale of the same dollar 
amount may result in an adverse opinion because of pervasiveness. 

Regardless of the amount involved, a disclaimer of opinion must be issued if the 
auditor is determined to lack independence under the rules of the Code of Professional 
Conduct. This strict requirement reflects the importance of independence to auditors. 
Any deviation from the independence rule is therefore considered highly material. 
Table 3-1 (p. 58) summarizes the relationship between materiality and the type of 
opinion to be issued. 


In concept, the effect of materiality on the type of opinion to issue is straightforward. 
In application, deciding on actual materiality in a given situation is a difficult 
judgment. There are no simple, well-defined guidelines that enable auditors to decide 
when something is immaterial, material, or highly material. The evaluation of materiality 
also depends on whether the situation involves a failure to follow GAAP or a scope 
limitation. 


Materiality Decisions—Non-GAAP Condition When a client has failed to follow 
GAAP, the audit report will be unqualified, qualified opinion only, or adverse, 
depending on the materiality of the departure. Several aspects of materiality must be 
considered. 


Materiality Decisions 
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Relationship of Materiality to Type of Opinion 














Materiality Level Significance in Terms of Reasonable Users’ Decisions Type of Opinion 
Immaterial Users’ decisions are unlikely to be affected. Unqualified 
Material Users’ decisions are likely to be affected only if the information in question is important to Qualified 
the specific decisions being made. The overall financial statements are presented fairly. 
Highly material Most or all users’ decisions based on the financial statements are likely to be significantly Disclaimer or 
affected. Adverse 








Note: Lack of independence requires a disclaimer regardless of materiality. 


Dollar Amounts Compared with a Base The primary concern in measuring materiality 
when a client has failed to follow GAAP is usually the total dollar misstatement in the 
accounts involved, compared with some base. A $10,000 misstatement might be 
material for a small company but not for a larger one. Therefore, misstatements must 
be compared with some measurement base before a decision can be made about the 
materiality of the failure to follow GAAP. Common bases include net income, total 
assets, current assets, and working capital. 

For example, assume that the auditor believes there is a $100,000 overstatement of 
inventory because of the client’s failure to follow GAAP. Also assume recorded inventory 
of $1 million, current assets of $3 million, and net income before taxes of $2 million. In 
this case, the auditor must evaluate the materiality of a misstatement of inventory of 10 
percent, current assets of 3.3 percent, and net income before taxes of 5 percent. 

To evaluate overall materiality, the auditor must also combine all unadjusted 
misstatements and judge whether there may be individually immaterial misstatements 
that, when sao Pa fect the statements. In the inventory example just 
given; GR a b G&D an overstatement of $150,000 in 
accounts receivable. The total effect on current assets is now 8.3 percent ($250,000 
divided by $3,000,000) and 12.5 percent on net income before taxes ($250,000 divided 
by $2,000,000). 

When comparing potential misstatements with a base, the auditor must carefully 
consider all accounts affected by a misstatement (pervasiveness). For example, it is 
important not to overlook the effect of an understatement of inventory on cost of goods 
sold, income before taxes, income tax expense, and accrued income taxes payable. 


Measurability The dollar amount of some misstatements cannot be accurately measured. 
For example, a client’s unwillingness to disclose an existing lawsuit or the acquisition of 
a new company subsequent to the balance sheet date is difficult if not impossible to 
measure in terms of dollar amounts. The materiality question the auditor must evaluate 
in such situations is the effect on statement users of the failure to make the disclosure. 


Nature of the Item The decision of a user may also be affected by the kind of misstate- 
ment. The following may affect a user’s decision and therefore the auditor’s opinion in 
a different way than most misstatements: 


1. Transactions are illegal or fraudulent. 

2. Anitem may materially affect some future period, even though it is immaterial 
when only the current period is considered. 

3. An item has a “psychic” effect (for example, the item changes a small loss to a 
small profit, maintains a trend of increasing earnings, or allows earnings to 
exceed analysts’ expectations). 

4. An item may be important in terms of possible consequences arising from 
contractual obligations (for example, the effect of failure to comply with a debt 
restriction may result in a material loan being called). 
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Materiality Decisions—Scope Limitations Condition When there is a scope 
limitation in an audit, the audit report will be unqualified, qualified scope and opinion, 
or disclaimer, depending on the materiality of the scope limitation. The auditor will 
consider the same three factors included in the previous discussion about materiality 
decisions for failure to follow GAAP, but they will be considered differently. The size of 
potential misstatements, rather than known misstatements, is important in determining 
whether an unqualified report, a qualified report, or a disclaimer of opinion is appro- 
priate for a scope limitation. For example, if recorded accounts payable of $400,000 
was not audited, the auditor must evaluate the potential misstatement in accounts 
payable and decide how materially the financial statements could be affected. The 
pervasiveness of these potential misstatements must also be considered. 

It is typically more difficult to evaluate the materiality of potential misstatements 
resulting from a scope limitation than for failure to follow GAAP. Misstatements 
resulting from failure to follow GAAP are known. Those resulting from scope limitations 
must usually be subjectively measured in terms of potential or likely misstatements. 
For example, a recorded accounts payable of $400,000 might be understated by more 
than $1 million, which may affect several totals, including gross margin, net earnings, 
and total assets. 


DISCUSSION OF CONDITIONS REQUIRING A DEPARTURE 


You should now understand the relationships among the conditions requiring a 
departure from an unqualified report, the major types of reports other than unquali- 





Draft appropriately modified 





fied, and the three levels of materiality. This part of the chapter examines the conditions audit reports under a variety 
requiring a departure from an unqualified report in greater detail and shows examples of circumstances. 

ae a Apago PDF Enhancer 

Two major categories of scope restrictions exist: those caused by a client and those Auditor's Scope 
caused by conditions beyond the control of either the client or the auditor. The effect Has Been Restricted 


on the auditor’s report is the same for either, but the interpretation of materiality is 
likely to be different. When there is a scope restriction, the appropriate response is to 
issue an unqualified report, a qualification of scope and opinion, or a disclaimer of 
opinion, depending on materiality. 

For client-imposed restrictions, the auditor should be concerned about the 
possibility that management is trying to prevent discovery of misstated information. In 
such cases, auditing standards encourage a disclaimer of opinion when materiality is 
in question. When restrictions result from conditions beyond the client’s control, a 
qualification of scope and opinion is more likely. 

Two restrictions occasionally imposed by clients on the auditor’s scope relate to the 
observation of physical inventory and the confirmation of accounts receivable, but 
other restrictions may also occur. Reasons for client-imposed scope restrictions may be 
a desire to save audit fees and, in the case of confirming receivables, to prevent possible 
conflicts between the client and customer when amounts differ. 

The most common case in which conditions beyond the client’s and auditor’s 
control cause a scope restriction is when the auditor is appointed after the client’s 
balance sheet date. The confirmation of accounts receivable, physical examination of 
inventory, and other important procedures may be impossible under those circum- 
stances. When the auditor cannot perform procedures he or she considers desirable but 
can be satisfied with alternative procedures that the information being verified is fairly 
stated, an unqualified report is appropriate. If alternative procedures cannot be 
performed, a qualified scope and opinion or disclaimer of opinion is necessary, 
depending on materiality. 
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Qualified Scope and Opinion Report Due to Scope Restriction 





Scope Paragraph— 
Qualified 


Third Paragraph— 
Added 


Opinion Paragraph— 
Qualified 





INDEPENDENT AUDITOR’S REPORT 
(Same introductory paragraph as standard report) 


Except as discussed in the following paragraph, we conducted our audit . . . (remainder is the same 
as the scope paragraph in the standard report). 


We were unable to obtain audited financial statements supporting the Company's investment in a 
foreign affiliate stated at $475,000 or its equity in earnings of that affiliate of $365,000, which is 
included in net income, as described in Note X to the financial statements. Because of the nature of 
the Company's records, we were unable to satisfy ourselves as to the carrying value of the 
investment or the equity in its earnings by means of other auditing procedures. 


In our opinion, except for the effects of such adjustments, if any, as might have been determined to 
be necessary had we been able to examine evidence regarding the foreign affiliate investment and 
earnings, the financial statements referred to above present fairly, in all material respects, the 
financial position of Laughlin Corporation as of December 31, 2011, and the results of its operations 
and its cash flows for the year then ended in conformity with accounting principles generally 
accepted in the United States of America. 











A restriction on the scope of the auditor’s examination requires a qualifying 
paragraph preceding the opinion to describe the restriction. In the case of a disclaimer, 
the entire scope paragraph is excluded from the report. 

For example, the report in Figure 3-7 is appropriate for an audit in which the 
amounts were material but not pervasive and the auditor could not obtain audited 
financial statements supporting an investment in a foreign affiliate and could not 
satis Apago PDF '@ritanter 

When th€ amounts are so material that a disclaimer of opinion rather than 
a qualified opinion is required, the auditor uses only three paragraphs. The first 
(introductory) paragraph is modified slightly to say “We were engaged to audit....” 
The second paragraph is the same as the third paragraph in Figure 3-7. The scope 
paragraph is deleted, and the final (opinion) paragraph is changed to a disclaimer. The 
reason for deleting the scope paragraph is to avoid stating anything that might lead 
readers to believe that other parts of the financial statements were audited and 
therefore might be fairly stated. Figure 3-8 shows the audit report assuming the auditor 
had concluded that the facts in Figure 3-7 required a disclaimer rather than a qualified 
opinion. 





oad Disclaimer of Opinion Due to Scope Restriction | 





Introductory Paragraph— 
Modification of Standard Report 


Second Paragraph—Added 


Opinion Paragraph—Disclaimer 





INDEPENDENT AUDITOR'S REPORT 


We were engaged to audit . . . (remainder is the same as the introductory paragraph in the standard 
report) 


(Same wording as that used for the third paragraph in Figure 3-7) 


Because we were unable to obtain audited financial statements supporting the Company’s 
investment in a foreign affiliate and we were unable to satisfy ourselves as to the carrying value of 
the investment or the equity in its earnings by means of other auditing procedures, the scope of our 
work was not sufficient to enable us to express, and we do not express, an opinion on these 
financial statements. 
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When the auditor knows that the financial statements may be misleading because they Statements Are Not in 
were not prepared in conformity with GAAP, and the client is unable or unwilling to Conformity with GAAP 
correct the misstatement, he or she must issue a qualified or an adverse opinion, 

depending on the materiality of the item in question. The opinion must clearly state 

the nature of the departure from accepted principles and the amount of the 

misstatement, if it is known. Figure 3-9 shows an example of a qualified opinion when 

a client did not capitalize leases as required by GAAP. 


Ceneres Qualified Opinion Report Due to Non-GAAP ) 


INDEPENDENT AUDITOR’S REPORT 








(Same introductory and scope paragraphs as the standard report) 


The Company has excluded from property and debt in the accompanying balance sheet certain | Third Paragraph—Added 
lease obligations that, in our opinion, should be capitalized to conform with U.S. generally 
accepted accounting principles. If these lease obligations were capitalized, property would be 
increased by $4,600,000, long-term debt by $4,200,000, and retained earnings by $400,000 as of 
December 31, 2011, and net income and earnings per share would be increased by $400,000 and 
$1.75, respectively, for the year then ended. 


In our opinion, except for the effects of not capitalizing lease obligations, as discussed in the | Opinion Paragraph—Qualified 
preceding paragraph, the financial statements referred to above present fairly, in all material 
respects, the financial position of Ajax Company as of December 31, 2011, and the results of its 
operations and its cash flows for the year then ended in conformity with accounting principles 
generally accepted in the United States of America. 











When the amounts are so material or pervasive that an adverse opinion is required, 


the scope is still unqualified and the Apago. PDE“ Enhan @erput the 
nin Figtr 


opinion paragraph might be as show e 3-10. 


fopeel Adverse Opinion Due to Non-GAAP | 


INDEPENDENT AUDITOR’S REPORT 








(Same introductory and scope paragraphs as the standard report) 
(Same third paragraph as that used for the third paragraph in Figure 3-9) Third Paragraph—Added 


In our opinion, because of the effects of the matters discussed in the preceding paragraph, the Opinion Paragraph—Adverse 
financial statements referred to above do not present fairly, in conformity with accounting principles 
generally accepted in the United States of America, the financial position of Ajax Company as of 
December 31, 2011, or the results of its operations and its cash flows for the year then ended. 

—s 2 











When the client fails to include information that is necessary for the fair presen- 
tation of financial statements in the body of the statements or in the related footnotes, 
it is the auditor’s responsibility to present the information in the audit report and to 
issue a qualified or an adverse opinion. It is common to put this type of qualification in 
an added paragraph preceding the opinion (the scope paragraph will remain 
unqualified) and to refer to the added paragraph in the opinion paragraph. Figure 3-11 
(p. 62) shows an example of an audit report in which the auditor considered the 
financial statement disclosure inadequate. 


Rule 203 Reports Determining whether statements are in accordance with GAAP 
can be difficult. Rule 203 in the Code of Professional Conduct permits a departure from 
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based Qualified Opinion Due to Inadequate Disclosure i 





Third Paragraph—Added 


Opinion Paragraph— Qualified 





INDEPENDENT AUDITOR’S REPORT 
(Same introductory and scope paragraphs as the standard report) 


On January 15, 2011, the company issued debentures in the amount of $3,600,000 for the purpose 
of financing plant expansion. The debenture agreement restricts the payment of future cash 
dividends to earnings after December 31, 2011. In our opinion, disclosure of this information is 
required to conform with accounting principles generally accepted in the United States of America. 


In our opinion, except for the omission of the information discussed in the preceding paragraph, 
the financial statements referred to above present fairly . . . (remainder is the same as the opinion 
in the standard report). 











Auditor is Not 
Independent 


generally accepted accounting principles when the auditor believes that adherence to 
these would result in misleading financial statements. 

When the auditor decides that adherence to GAAP would result in misleading 
statements, there should be a complete explanation in a third paragraph. The paragraph 
should fully explain the departure and why GAAP would result in misleading state- 
ments. The opinion paragraph should then be unqualified except for the reference to 
the third paragraph. As discussed earlier in the chapter, this is called an unqualified 
audit report with an explanatory paragraph. 


Lack of Statement of Cash Flows The client’s unwillingness to include a statement 
of cash flows is specifically addressed in auditing standards. When the statement is 
omitted, there must be a third paragraph stating the omission and an “except for” 
opinion qualification. 


If the AR ADR PRE ERHaReer the Code of Professional Conduct, a 


disclaimer of opinion is required even though all the audit procedures considered 
necessary in the circumstances were performed. The wording in Figure 3-12 is recom- 
mended when the auditor is not independent. 

The lack of independence overrides any other scope limitations. Therefore, no 
other reason for disclaiming an opinion should be cited. There should be no mention 
in the report of the performance of any audit procedures. As a result, it is a one- 
paragraph audit report. 





Disclaimer Due to Lack of Independence | 








We are not independent with respect to Home Decors.com, Inc., and the accompanying balance sheet 
as of December 31, 2011, and the related statements of income, retained earnings, and cash flows for 
the year then ended were not audited by us. Accordingly, we do not express an opinion on them. 





Note: When the auditor lacks independence, no report title is included. 


AUDITOR'S DECISION PROCESS FOR AUDIT REPORTS 


OBJECTIVE 3-8 





Determine the appropriate 
audit report for a given 
audit situation. 





Auditors use a well-defined process for deciding the appropriate audit report in a 
given set of circumstances. The auditor must first assess whether any conditions exist 
requiring a departure from a standard unqualified report. If any conditions exist, the 
auditor must then assess the materiality of the condition and determine the appropriate 
type of report. 
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TABLE 3-2 Audit Report for Each Condition Requiring a Departure from a Standard Unqualified Report 
at Different Levels of Materiality 





Level of Materiality 





Condition Requiring 
an Unqualified Report with 

















Modified Wording or Explanatory Paragraph Immaterial Material 

Accounting principles not consistently applied* Unqualified Unqualified report, explanatory paragraph 
Substantial doubt about going concernt Unqualified Unqualified report, explanatory paragraph 
Justified departure from GAAP or other accounting principle Unqualified Unqualified report, explanatory paragraph 
Emphasis of a matter Unqualified Unqualified report, explanatory paragraph 
Use of another auditor Unqualified Unqualified report, modified wording 





Level of Materiality 

















Condition Requiring Material, But Does Not 
a Departure from Overshadow Financial So Material That Overall 
Unqualified Report Immaterial Statements as a Whole Fairness Is in Question 
Scope restricted by client Unqualified Qualified scope, additional paragraph, Disclaimer 

or other conditions and qualified opinion (except for) 
Financial statements not prepared Unqualified Additional paragraph and qualified Adverse 

in accordance with GAAP* opinion (except for) 
The auditor is not independent Disclaimer, regardless of materiality 





*If the auditor does not concur with the appropriateness of the change, the condition is considered a violation of GAAP. 
t The auditor has the option of issuing a disclaimer of opinion. 


+ If the auditor can demonstrate that GAAP would be misleading, an unqualified report with an explanatory paragraph is appropriate. 


Apago PDF Enhancer 
Determine Whether Any Condition Exists Requiring a Departure from a 


Standard Unqualified Report The most important of these conditions are 
identified in Table 3-2. Auditors identify these conditions as they perform the audit 
and include information about any condition in the audit files as discussion items for 
audit reporting. If none of these conditions exist, which is the case in most audits, the 
auditor issues a standard unqualified audit report. 


Decide the Materiality for Each Condition When a condition requiring a departure 
from a standard unqualified opinion exists, the auditor evaluates the potential effect on 
the financial statements. For departures from GAAP or scope restrictions, the auditor 
must decide among immaterial, material, and highly material. All other conditions, 
except for lack of auditor independence, require only a distinction between immaterial 
and material. The materiality decision is a difficult one, requiring considerable judgment. 
For example, assume that there is a scope limitation in auditing inventory. It is difficult 
to assess the potential misstatement of an account that the auditor does not audit. 


Decide the Appropriate Type of Report for the Condition, Given the 
Materiality Level After making the first two decisions, it is easy to decide the appro- 
priate type of opinion by using a decision aid. An example of such an aid is Table 3-2. 
For example, assume that the auditor concludes that there is a departure from GAAP 
and it is material, but not highly material. Table 3-2 shows that the appropriate audit 
report is a qualified opinion with an additional paragraph discussing the departure. The 
introductory and scope paragraphs will be included using standard wording. 


Write the Audit Report Most CPA firms have computer templates that include 
precise wording for different circumstances to help the auditor write the audit report. 
Also, one or more partners in most CPA firms have special expertise in writing audit 
reports. These partners typically write or review all audit reports before they are issued. 
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More Than 

One Condition 
Requiring a Departure 
or Modification 


Number of Paragraphs 
in the Report 


Auditors often encounter situations involving more than one of the conditions 
requiring a departure from an unqualified report or modification of the standard 
unqualified report. In these circumstances, the auditor should modify his or her opinion 
for each condition unless one has the effect of neutralizing the others. For example, if 
there is a scope limitation and a situation in which the auditor is not independent, the 
scope limitation should not be revealed. The following situations are examples when 
more than one modification should be included in the report: 


* The auditor is not independent and the auditor knows that the company has not 
followed generally accepted accounting principles. 

* There is a scope limitation and there is substantial doubt about the company’s 
ability to continue as a going concern. 

* There is a substantial doubt about the company’s ability to continue as a going 
concern and information about the causes of the uncertainties is not adequately 
disclosed in a footnote. 

* There is a deviation in the statements’ preparation in accordance with GAAP 
and another accounting principle was applied on a basis that was not consistent 
with that of the preceding year. 


Many readers interpret the number of paragraphs in the report as an important “signal” 
as to whether the financial statements are correct. A three-paragraph report ordinarily 
indicates that there are no exceptions in the audit. However, three-paragraph reports are 
also issued when a disclaimer of opinion is issued due to a scope limitation or for an 
unqualified shared report involving other auditors. More than three paragraphs 
indicates some type of qualification or required explanation. 

An additional paragraph is added before the opinion for a qualified opinion, an 
adverse opinion, and a disclaimer of opinion for a scope limitation. This results in a 
four-paragraph report, except for the disclaimer of opinion for a scope limitation. 
A dischyi to e lagna in a three-paragraph report because 
the VApa OE OE tod HHAnCe L to a lack of independence is a one- 
paragraph report. 

When an unqualified opinion with explanatory paragraph is issued, an explana- 
tory paragraph usually follows the opinion. No explanatory paragraph is required for 
an unqualified shared report involving other auditors, but the wording in all three 
paragraphs is modified. 

Table 3-3 summarizes the types of reports issued for the audit of financial state- 
ments, the number of paragraphs for each type, the standard wording paragraphs 
modified, and the location of the additional paragraph. The table excludes a disclaimer 
for a lack of independence, which is a special, one-paragraph report. 





























Number of Paragraphs, Standard Wording Paragraphs Modified, and Location of Additional 
Paragraph for Audit Reports 
Number of Standard Wording Location of 
Type of Report Paragraphs Paragraphs Modified Additional Paragraph 
Standard unqualified 3 None None 
Unqualified with explanatory paragraph 4 None After opinion 
Unqualified shared report with other auditors 3 All three paragraphs None 
Qualified—opinion only 4 Opinion only Before opinion 
Qualified—scope and opinion 4 Scope and opinion Before opinion 
Disclaimer—scope limitation 3 Introductory and opinion paragraphs Before opinion 
modified; scope paragraph eliminated 
L Adverse 4 Opinion only Before opinion 
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RESEARCH ___ The AICPA's Auditing Standards Board (ASB) and model is sound or a user may conclude that the 
the International Auditing and Assurance Standards opinion provides absolute assurance that the 
UNDERWAY ON Board (IAASB) have partnered to commission financial statements are accurate. This research is 
AUDIT REPORT academic research to study the effectiveness of being conducted with audit report users in the 


communications provided by auditors in the audit 
report. Anecdotal evidence suggests that financial 
statement users may not consistently understand 
the information contained in the auditor's report, 


United States and internationally. Research 
findings will be used by the ASB and IAASB as 
they evaluate the effectiveness of audit reporting 
guidance in auditing standards. 


including the nature of the financial statement 
audit process and the level of assurance provided. 
For example, users of the audit report sometimes 
believe that an auditor's unqualified opinion 
provides an indication that a company’s business 


Source: AICPA and IFAC, “Auditing Standards Board 
and International Auditing and Assurance Standards 
Board Request for Proposals for Research on 
Unqualified Auditor's Report Communications” 
(www. ifac.org). 








INTERNATIONAL ACCOUNTING AND AUDITING STANDARDS 


The increasing globalization of the world’s capital markets and the expanding presence OBJECTIVE 3-9 
of business operations in multiple countries are leading to calls for the establishment of 
a single set of accounting standards to be used around the world. IFRS is increasingly 
accepted worldwide as the basis of accounting used to prepare financial statements in 
other countries. 

Currently, U.S. public companies are required to prepare financial statements that 
are filed with the Securities and Exchange Commission (SEC) in accordance with 
generally accepted accounting principles in the United States. The SEC is developing a 
work plan to determine whether to incorporate IFRS into the U.S. financial reporting 
system. Approval of the work plan co e R j panies 
ae ApaYyS" POF Enhanker 

An auditor may be engaged to report on financial statements prepared in accordance 
with IFRS. When the auditor reports on financial statements prepared in conformity 
with IFRS, the auditor refers to those standards rather than U.S. generally accepted 
accounting principles as follows: 


Understand proposed use of 


international accounting and 
auditing standards by U.S. 
companies. 





In our opinion, the financial statements referred to above present fairly, in 
all material respects, the financial position of Carlos Incorporated as of 
December 31, 2011 and 2010, and the results of its operations, comprehensive 
income, changes in equity, and its cash flows for the years then ended in con- 
formity with International Financial Reporting Standards as issued by the 
International Accounting Standards Board. 


As discussed in Chapter 2, the International Auditing and Assurance Standards 
Board (IAASB) issues International Standards on Auditing (ISAs). Auditing standards 
in the United States now allow an auditor to perform an audit of financial statements 
of a U.S. entity in accordance with both generally accepted auditing standards in the 
U.S. and the ISAs. The auditor’s scope paragraph is modified to indicate that the audit 
was conducted in accordance with auditing standards generally accepted in the United 
States of America and in accordance with International Standards on Auditing. 


SUMMARY 


This chapter described the auditor’s standard unqualified audit report, as well as reports 
on internal control over financial reporting under Section 404 of the Sarbanes—Oxley Act. 
The four categories of audit reports and the auditor’s decision process in choosing the 
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appropriate audit report to issue were then discussed. In some circumstances, an explana- 
tory paragraph or modification of the unqualified report is required. When there is a 
material departure from GAAP or a material limitation on the scope of the audit, an 
unqualified report cannot be issued. The appropriate report to issue in these circumstances 
depends on whether the situation involves a GAAP departure or a scope limitation, as well 


as the level of materiality. 


Adverse opinion—a report issued when 
the auditor believes the financial state- 
ments are so materially misstated or 
misleading as a whole that they do not 
present fairly the entity’s financial posi- 
tion or the results of its operations and 
cash flows in conformity with GAAP 


Combined report on financial statements 
and internal control over financial 
reporting—audit report on the financial 
statements and the effectiveness of internal 
control over financial reporting required 
for larger public companies under Section 
404 of the Sarbanes—Oxley Act 


Disclaimer of opinion—a report issued 
when the auditor is not able to become 
satisfied that the overall financial state- 


nei R Pag Sake iEnhanc 


is not independent 


Material misstatement—a misstatement 
in the financial statements, knowledge of 
which would affect a decision of a reason- 
able user of the statements 


Qualified opinion—a report issued when 
the auditor believes that the overall financial 


ESSENTIAL TERMS 


statements are fairly stated but that either 
the scope of the audit was limited or the 
financial data indicated a failure to follow 
GAAP 


Separate report on internal control over 
financial reporting—audit report on the 
effectiveness of internal control over 
financial reporting required for public 
companies under Section 404 of the 
Sarbanes—Oxley Act that cross-references 
the separate audit report on the financial 
statements 


Standard unqualified audit report—the 
report a CPA issues when all auditing 
conditions have been met, no significant 
misstatements have been discovered and 
left uncorrected, and it is the auditor’s 


ene that the financial statements are 


airly stated in accordance with GAAP 


Unqualified audit report with explanatory 
paragraph or modified wording—an 
unqualified report in which the financial 
statements are fairly presented, but the 
auditor believes it is important, or is 
required, to provide additional infor- 
mation 


REVIEW QUESTIONS 


3-1 (Objective 3-1) Explain why auditors’ reports are important to users of financial 
statements and why it is desirable to have standard wording. 


3-2 (Objective 3-1) List the seven parts of a standard unqualified audit report and explain 
the meaning of each part. How do the parts compare with those found in a qualified report? 


3-3 (Objective 3-1) What are the purposes of the scope paragraph in the auditor’s report? 
Identify the most important information included in the scope paragraph. 


3-4 (Objective 3-1) What are the purposes of the opinion paragraph in the auditor’s 
report? Identify the most important information included in the opinion paragraph. 


3-5 (Objective 3-1) On February 17, 2012, a CPA completed all the evidence gathering 
procedures on the audit of the financial statements for the Buckheizer Technology 
Corporation for the year ended December 31, 2011. The audit is satisfactory in all respects 
except for the existence of a change in accounting principles from FIFO to LIFO inventory 
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valuation, which results in an explanatory paragraph on consistency. On February 26, the 
auditor completed the tax return and the draft of the financial statements. The final audit 
report was completed, attached to the financial statements, and delivered to the client on 
March 7. What is the appropriate date on the auditor’s report? 


3-6 (Objective 3-2) What five circumstances are required for a standard unqualified report 
to be issued? 


3-7 (Objective 3-3) Describe the information included in the introductory, scope, and 
opinion paragraphs in a separate audit report on the effectiveness of internal control over 
financial reporting. What is the nature of the additional paragraphs in the audit report? 


3-8 (Objectives 3-4, 3-7) What type of opinion should an auditor issue when the financial 
statements are not in accordance with GAAP because such adherence would result in 
misleading statements? 


3-9 (Objectives 3-4, 3-5) Distinguish between an unqualified report with an explanatory 
paragraph or modified wording and a qualified report. Give examples when an explanatory 
paragraph or modified wording should be used in an unqualified opinion. 


3-10 (Objective 3-4) Describe what is meant by reports involving the use of other auditors. 
What are the three options available to the principal auditor and when should each be used? 


3-11 (Objective 3-4) The client has restated the prior-year statements because of a change 
from LIFO to FIFO. How should this be reflected in the auditor’s report? 


3-12 (Objective 3-4) Distinguish between changes that affect consistency and those that 
may affect comparability but not consistency. Give an example of each. 


3-13 (Objective 3-5) List the three conditions that require a departure from an unqualified 
opinion and give one specific example of each of those conditions. 


3-14 (Objective 3-5) Distinguish betyeen a 10. PH ion, ihar opinion, and a 
disclaimer of opinion, and explain hARPAGQ-c 12 anGe Rie. 
3-15 (Objective 3-6) Define materiality as it is used in audit reporting. What conditions 
will affect the auditor’s determination of materiality? 


3-16 (Objective 3-6) Explain how materiality differs for failure to follow GAAP and for lack 
of independence. 


3-17 (Objective 3-7) How does the auditor’s opinion differ between scope limitations 
caused by client restrictions and limitations resulting from conditions beyond the client’s 
control? Under which of these two will the auditor be most likely to issue a disclaimer of 
opinion? Explain. 


3-18 (Objective 3-5) Distinguish between a report qualified as to opinion only and one 
with both a scope and opinion qualification. 


3-19 (Objectives 3-6, 3-7) Identify the three alternative opinions that may be appropriate 
when the client’s financial statements are not in accordance with GAAP. Under what 
circumstance is each appropriate? 


3-20 (Objective 3-8) When an auditor discovers more than one condition that requires 
departure from or modification of the standard unqualified report, what should the 
auditor’s report include? 


3-21 (Objective 3-9) The ISAs allow an auditor to include either of the following phrases 
in the auditor’s opinion paragraph: (1) “The financial statements present fairly in all 
material respects...” or (2) “The financial statements give a true and fair view of...” 
Discuss whether the ASB should adopt a similar option for U.S. audit standards. 


3-22 (Objective 3-9) Discuss why the adoption of international accounting and auditing 
standards might be beneficial to investors and auditors. 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


3-23 (Objectives 3-1, 3-2, 3-3, 3-4, 3-8) The following questions concern unqualified audit 
reports. Choose the best response. 


a. Which of the following statements about a combined report on the financial state- 

ments and internal control over financial reporting is correct? 

(1) The auditor’s opinion on internal control is for the same period of time as the 
opinion on the financial statements. 

(2) The report includes additional paragraphs for the definition and limitations of 
internal control. 

(3) The introductory, scope, and opinion paragraphs are unchanged from a report 
for an audit of the financial statements only. 

(4) GAAP is the framework used to evaluate internal control. 


b. The date of the CPA’s opinion on the financial statements of the client should be the 
date of the 
(1) closing of the client’s books. 
(2) finalization of the terms of the audit engagement. 
(3) completion of all important audit procedures. 
(4) submission of the report to the client. 


c. If a principal auditor decides to refer in his or her report to the audit of another 
auditor, he or she is required to disclose the 
(1) name of the other auditor. 
(2) nature of the inquiry into the other auditor’s professional standing and extent of 
the review of the other auditor’s work. 
(3) portion of the financial statements audited by the other auditor. 
(4) reasons for being unwilling to assume responsibility for the other auditor’s work. 


3-24 (Qbjectives 3-4, e fe i stions concern unqualified audit reports with 
an ARADO, PDF Me Hest velol haa the best response. 

a. An entity changed from the straight-line method to the declining-balance method of 
depreciation for all newly acquired assets. This change has no material effect on the 
current year’s financial statements but is reasonably certain to have a substantial effect 
in later years. If the change is disclosed in the notes to the financial statements, the 
auditor should issue a report with a(n) 

(1) qualified opinion. 

(2) unqualified opinion with explanatory paragraph. 

(3) unqualified opinion. 

(4) qualified opinion with explanatory paragraph regarding consistency. 

b. When the financial statements are fairly stated but the auditor concludes there is sub- 
stantial doubt whether the client can continue in existence, the auditor should issue 
a(an) 

(1) adverse opinion. 

(2) qualified opinion only. 

(3) unqualified opinion. 

(4) unqualified opinion with explanatory paragraph. 

c. The introductory paragraph of an auditor’s report contains the following: “We did not 
audit the financial statements of EZ Inc., a wholly owned subsidiary, which statements 
reflect total assets and revenues constituting 27 percent and 29 percent, respectively, of 
the consolidated totals. Those statements were audited by other auditors whose report 
has been furnished to us, and our opinion, insofar as it relates to the amounts included 
for EZ Inc., is based solely on the report of the other auditors.” These sentences 
(1) indicate a division of responsibility. 

(2) assume responsibility for the other auditor. 
(3) require a departure from an unqualified opinion. 
(4) are an improper form of reporting. 


Part 1 / THE AUDITING PROFESSION 


3-25 (Objectives 3-5, 3-7, 3-8) The following questions concern audit reports other than 
unqualified audit reports with standard wording. Choose the best response. 


a. The annual audit of Midwestern Manufacturing revealed that sales were accidentally 
being recorded as revenue when the goods were ordered, instead of when they were 
shipped. Assuming the amount in question is material and the client is unwilling to 
correct the error, the CPA should issue: 

(1) an unqualified opinion or adverse opinion. 

(2) a qualified “except for” opinion or disclaimer of opinion. 
(3) a qualified “except for” opinion or adverse opinion. 

(4) an unqualified opinion with an explanatory paragraph 


b. Under which of the following circumstances would a disclaimer of opinion not be 

appropriate? 

(1) The auditor is unable to determine the amounts associated with an employee 
fraud scheme. 

(2) Management does not provide reasonable justification for a change in accounting 
principles. 

(3) The client refuses the auditor permission to confirm certain accounts receivable 
or apply alternative procedures to verify their balances. 

(4) The chief executive officer is unwilling to sign the management representation 
letter. 


c. The opinion paragraph of a CPA’s report states: “In our opinion, except for the effects 
of not capitalizing certain lease obligations, as discussed in the preceding paragraph, 
the financial statements present fairly,” in all material respects,... This paragraph 
expresses a(an) 

(1) Unqualified opinion. 

(2) Unqualified opinion with explanatory paragraph. 
(3) Qualified opinion. 
) 


(4) Adverse opinion. Apago PDF Enhancer 


DISCUSSION QUESTIONS AND PROBLEMS 


3-26 (Objective 3-1) A careful reading of an unqualified report indicates several important 
phrases. Explain why each of the following phrases or clauses is used rather than the 
alternative provided: 


a. “The financial statements referred to above present fairly in all material respects the 
financial position” rather than “The financial statements mentioned above are 
correctly stated.” 

b. “In conformity with accounting principles generally accepted in the United States of 
America” rather than “are properly stated to represent the true economic conditions.” 

c. “In our opinion, the financial statements present fairly” rather than “The financial 
statements present fairly.” 

d. “Brown & Phillips, CPAs (firm name),” rather than “James E. Brown, CPA (individual 
partner’s name).” 

e. “We conducted our audit in accordance with auditing standards generally accepted 


in the United States of America” rather than “Our audit was performed to detect 
material misstatements in the financial statements.” 


3-27 (Objectives 3-1, 3-2, 3-4, 3-6, 3-7) Patel, CPA, has completed the audit of the financial 
statements of Bellamy Corporation as of and for the year ended December 31, 2011. Patel 
also audited and reported on the Bellamy financial statements for the prior year. Patel 
drafted the following report for 2011. 


We have audited the balance sheet and statements of income and retained earnings 
of Bellamy Corporation as of December 31, 2011. We conducted our audit in accor- 
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dance with generally accepted accounting standards. Those standards require that we 
plan and perform the audit to obtain reasonable assurance about whether the finan- 
cial statements are free of misstatement. 

We believe that our audits provide a reasonable basis for our opinion. 

In our opinion, the financial statements referred to above present fairly the finan- 
cial position of Bellamy Corporation as of December 31, 2011, and the results of its 
operations for the year then ended in conformity with generally accepted auditing 
standards, applied on a basis consistent with those of the preceding year. 

Patel, CPA 
(Signed) 


Other Information 

* Bellamy is presenting comparative financial statements. 

* Bellamy does not wish to present a statement of cash flows for either year. 

* During 2011, Bellamy changed its method of accounting for long-term construction 
contracts and properly reflected the effect of the change in the current year’s financial 
statements and restated the prior year’s statements. Patel is satisfied with Bellamy’s 
justification for making the change. The change is discussed in footnote 12. 

* Patel was unable to perform normal accounts receivable confirmation procedures, but 
alternative procedures were used to satisfy Patel as to the existence of the receivables. 

* Bellamy Corporation is the defendant in a litigation, the outcome of which is highly 
uncertain. If the case is settled in favor of the plaintiff, Bellamy will be required to pay 
a substantial amount of cash, which might require the sale of certain fixed assets. The 
litigation and the possible effects have been properly disclosed in footnote 11. 

* Bellamy issued debentures on January 31, 2010, in the amount of $10 million. The 
funds obtained from the issuance were used to finance the expansion of plant facilities. 
The debenture agreement restricts the payment of future cash dividends to earnings 
after December 31, 2015. Bellamy declined to disclose this essential data in the foot- 
notes to the financial statements. 


Required a. ARAGR RPE ten RarnGceke: Information” that need not be part 


of the auditor’s report. 
b. Explain the deficiencies in Patel’s report as drafted.* 


3-28 (Objectives 3-4, 3-5, 3-6, 3-7, 3-8) For the following independent situations, assume 
that you are the audit partner on the engagement: 

1. During your audit of Raceway.com, Inc., you conclude that there is a possibility that 
inventory is materially overstated. The client refuses to allow you to expand the 
scope of your audit sufficiently to verify whether the balance is actually misstated. 

2. You complete the audit of Munich Department Store, and in your opinion, the 
financial statements are fairly presented. On the last day of the audit, you discover that 
one of your supervisors assigned to the audit has a material investment in Munich. 

3. Auto Delivery Company has a fleet of several delivery trucks. In the past, Auto 
Delivery had followed the policy of purchasing all equipment. In the current year, 
they decided to lease the trucks. The method of accounting for the trucks is therefore 
changed to lease capitalization. This change in policy is fully disclosed in footnotes. 

4. You are auditing Deep Clean Services for the first time. Deep Clean has been in 
business for several years but over the last two years has struggled to stay afloat given 
the economic conditions. Based on your audit work, you have substantial doubt that 
Deep Clean will be in business by the end of its next fiscal year. 

5. One of your audit clients has a material investment in a privately-held biosciences 
company. Your audit firm engaged a business valuation specialist to assist in 
evaluating the client’s estimation of the investment’s fair value. You conclude that the 
valuation specialist’s work provides sufficient appropriate audit evidence. 

6. Four weeks after the year-end date, a major customer of Prince Construction Co. 
declared bankruptcy. Because the customer had confirmed the balance due to Prince 


*AICPA adapted. 


Part 1 / THE AUDITING PROFESSION 


at the balance sheet date, management refuses to charge off the account or otherwise 
disclose the information. The receivable represents approximately 10% of accounts 
receivable and 20% of net earnings before taxes. 


For each situation, do the following: 


a. Identify which of the conditions requiring a modification of or a deviation from an 


b. 


unqualified standard report is applicable. 


State the level of materiality as immaterial, material, or highly material. If you cannot 
decide the level of materiality, state the additional information needed to make a 
decision. 


. Given your answers in parts a and b, state the type of audit report that should be 


issued. If you have not decided on one level of materiality in part b, state the 
appropriate report for each alternative materiality level. 


3-29 (Objectives 3-4, 3-5, 3-6, 3-7, 3-8) For the following independent situations, assume 
that you are the audit partner on the engagement: 


1. 


In the last 3 months of the current year, Oil Refining Company decided to change 
direction and go significantly into the oil drilling business. Management recognizes 
that this business is exceptionally risky and could jeopardize the success of its exist- 
ing refining business, but there are significant potential rewards. During the short 
period of operation in drilling, the company has had three dry wells and no suc- 
cesses. The facts are adequately disclosed in footnotes. 

. Your client, Harrison Automotive, has changed from straight-line to sum-of-the- 
years’ digits depreciation. The effect on this year’s income is immaterial, but the effect 
in future years is likely to be material. The facts are adequately disclosed in footnotes. 

. Toronto Technology Corporation has prepared financial statements but has decided to 
exclude the statement of cash flows. Management explains to you that the users of their 
financial statements find this statement confusing and prefer not to have it included. 

. Marseilles Fragrance, Inc. is Asp. : YPDF' hRrhancegghout 
Europe. Because users of the audited financial statement are international, your audit 
firm was engaged to conduct the audit in accordance with U.S. auditing standards 
and International Standards on Auditing (ISAs). 

. The controller of Brentwood Industries, Inc. will not allow you to confirm the 
receivable balance from two of its major customers. The amounts of the receivables 
are material in relation to Brentwood Industries’ financial statements. You are unable 
to satisfy yourself as to the receivable balances by alternative procedures. 

. Approximately 20% of the audit of Lumberton Farms, Inc. was performed by a 

different CPA firm, selected by you. You have reviewed their audit files and believe 

they did an excellent job on their portion of the audit. Nevertheless, you are 
unwilling to take complete responsibility for their work. 


For each situation, do the following: 


a. Identify which of the conditions requiring a modification of or a deviation from an 


b. 


unqualified standard report is applicable. 


State the level of materiality as immaterial, material, or highly material. If you cannot 
decide the level of materiality, state the additional information needed to make a 
decision. 


. Given your answers in parts a and b, state the appropriate audit report from the 


following alternatives (if you have not decided on one level of materiality in part b, 
state the appropriate report for each alternative materiality level): 

(1) Unqualified—standard wording (5) Qualified scope and opinion 

(2) Unqualified—explanatory paragraph (6) Disclaimer 

(3) Unqualified—modified wording (7) Adverse* 

(4) Qualified opinion only 


*AICPA adapted. 
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d. 


3-30 


Based on your answer to part c, indicate which paragraphs, if any, should be modified 
in the standard audit report. Also indicate whether an additional paragraph is 
necessary and its location in the report. 


(Objectives 3-4, 3-5, 3-7, 3-8) Several types of opinions are described in a. through i. 


below. For each opinion, select the appropriate description of that opinion from the list 
numbered | through 9 below that corresponds with the type of opinion. 


Types of Opinion 


a 
b 
Cc 


d 
e 


. Unqualified opinion with an explanatory paragraph for change in consistency 

. Disclaimer of opinion due to scope limitation 

. Qualified opinion due to inadequate disclosure; report includes a going concern 
explanatory paragraph 

. Shared report with other auditors 

. Standard unqualified (“clean”) opinion 


f. Qualified opinion due to a scope limitation 


8 
h 


i 


. Adverse opinion for departure from accounting standards 

. Disclaimer of opinion due to lack of independence 

. Unqualified opinion with an explanatory paragraph for a change in consistency and 
an explanatory paragraph for an emphasis of a matter 


Description of Opinions (each item in list can be used only once) 


1 


OB & db 


ve 
8. 
9. 
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. One paragraph report containing the words “we do not express an opinion” 

. Three paragraph report with no changes in wording 

. Three paragraph report; the wording in all three paragraphs has been modified 

. Three paragraph report in which the opinion includes “we do not express an opinion” 

. Four paragraph report in which the explanatory fourth paragraph precedes the 
opinion; opinion includes “except for the effects of such adjustments, if any, as might 
have been determined had we been able to examine” 


. Four paragrap t ingwhich the explanatory fourth paragraph precedes the 
Abage. PHF Enhand Tits do not present fairly” 
Four paragraph report in which the explanatory fourth paragraph follows the opinion 


Five paragraph report with explanatory paragraphs preceding and following the opinion 
Five paragraph report with two explanatory paragraphs following the opinion 


(Objective 3-4) Various types of “accounting changes” can affect the second reporting 


standard of the generally accepted auditing standards. This standard reads, “The auditor 


must 
been 


identify in the auditor’s report those circumstances in which such principles have not 
consistently observed in the current period in relation to the preceding period.” 


Assume that the following list describes changes that have a material effect on a client’s 
financial statements for the current year: 


1. 
2. 


1S) 


wn 


N 


co 
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Correction of a mathematical error in inventory pricing made in a prior period. 

A change from deferring and amortizing preproduction costs to recording such costs 

as an expense when incurred because future benefits of the costs have become doubtful. 

The new accounting method was adopted in recognition of the change in estimated 

future benefits. 

. A change from the completed-contract method to the percentage-of-completion 
method of accounting for long-term construction contracts. 

. A change in the estimated useful life of previously recorded fixed assets based on 
newly acquired information 

. A change to including the employer share of Social Security (FICA) taxes as 
“retirement benefits” on the income statement from including it with “other taxes.” 

. A change from prime costing to full absorption costing for inventory valuation. 

. A change from presentation of statements of individual companies to presentation 
of consolidated statements. 

. A change from the FIFO method of inventory pricing to the LIFO method of 

inventory pricing. 


PROFESSION 


Identify the type of change described in each item above, and state whether any modi- Required 
fication is required in the auditor’s report as it relates to the second standard of reporting. 
Organize your answer sheet as shown. For example, a change from the LIFO method of 
inventory pricing to the FIFO method of inventory pricing would appear as shown. 
Assume that each item is material.* 





Should Auditor's 
Item No. Type of Change Report Be Modified? 
Example An accounting change from one generally accepted Yes 


accounting principle to another generally accepted 
accounting principle 





3-32 (Objectives 3-1, 3-2, 3-4) The following tentative auditor’s report was drafted by a 
staff accountant and submitted to a partner in the accounting firm of Better & Best, CPAs: 


AUDIT REPORT 
To the Audit Committee of American Broadband, Inc. 


We have examined the consolidated balance sheets of American Broadband, Inc. 
and subsidiaries as of December 31, 2011 and 2010, and the related consolidated state- 
ments of income, retained earnings, and cash flows for the years then ended. These 
financial statements are the responsibility of the Company’s management. Our respon- 
sibility is to express an opinion on these financial statements based on our audits. 

Our audits were made in accordance with auditing standards generally accepted in 
the United States of America as we considered necessary in the circumstances. Other 
auditors audited the financial statements of certain subsidiaries and have furnished us 
with reports thereon containing no exceptions. Our opinion expressed herein, insofar 
as it relates to the amounts included for those subsidiaries, is based solely upon the 
reports of the other auditors. 

As fully discussed in Note 7 to the financial statements, in 2011, the company 
extended the use of the last-in, ARpagoo PDF Enhancexruc all 
inventories. In examining inventories, we engaged Dr. Irwin Same (Nobel Prize win- 
ner 2009) to test check the technical requirements and specifications of certain items 
of equipment manufactured by the company. 

In our opinion, the financial statements referred to above present fairly the finan- 
cial position of American Broadband, Inc. as of December 31, 2011, and the results of 
operations for the years then ended, in conformity with accounting principles gener- 
ally accepted in the United States of America. 

To be signed by 
Better & Best, CPAs 
March 1, 2012 


Identify deficiencies in the staff accountant’s tentative report that constitute departures Required 
from the generally accepted standards of reporting.* 


3-33 (Objectives 3-1, 3-9) The following is an auditor’s report prepared in accordance with 
International Standards on Auditing (ISAs) issued by the International Auditing and 
Assurance Standards Board (IAASB): 


INDEPENDENT AUDITOR’S REPORT 
To the Shareholders of Les Meridian, Inc. 


We have audited the accompanying financial statements of Les Meridian, Inc., 
which comprise the statement of financial position as of December 31, 2011, and the 
statement of comprehensive income, statement of changes in equity and statement of 
cash flows for the year then ended, and a summary of significant accounting policies 
and other explanatory notes. 


*AICPA adapted. 
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Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these 
financial statements in accordance with International Financial Reporting Standards, 
and for such internal control as management determines is necessary to enable the 
preparation of financial statements that are free from material misstatement, whether 
due to fraud or error. 


Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on 
our audit. We conducted our audit in accordance with International Standards on 
Auditing. Those standards require that we comply with ethical requirements and plan 
and perform the audit to obtain reasonable assurance about whether the financial 
statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the 
amounts and disclosures in the financial statements. The procedures selected depend 
on the auditor’s judgment, including the assessment of the risks of material misstate- 
ment of the financial statements, whether due to fraud or error. In making those risk 
assessments, the auditor considers internal control relevant to the entity’s preparation 
and fair presentation of the financial statements in order to design audit procedures 
that are appropriate in the circumstances, but not for the purpose of expressing an 
opinion on the effectiveness of the entity’s internal control. An audit also includes 
evaluating the appropriateness of accounting policies used and the reasonableness of 
accounting estimates made by management, as well as evaluating the overall presenta- 
tion of the financial statements. 

We believe that the audit evidence we have obtained is sufficient and appropriate 
to provide a basis for our audit opinion. 


Opinion 
In our opinion, the financial statements give a true and fair view of the financial 
PHS S I, 31, 2011, and of its financial perfor- 
‘Apago: 'PDF) En hancer | in accordance with International 
Financial Reporting Standards. 
Bergen and Bergen, CPAs 
February 20, 2012 


19 Rue de Bordeaux 
Marseille, France 


Required a. For each of the seven distinct parts of the standard unqualified report prepared in 
accordance with generally accepted auditing standards in the United States, describe 
whether key elements of each of those seven parts are present in the audit report based 
on International Standards on Auditing for Les Meridian’s financial statements. 


b. Describe elements in the audit report based on International Standards on Auditing 
that are more extensive than an audit report based on U.S. auditing standards. 


INTERNET PROBLEM 3-1: RESEARCH ANNUAL REPORTS 


The U.S. Securities and Exchange Commission (SEC) is an independent, nonpartisan, 
quasi-judicial regulatory agency with responsibility for administering the federal securities 
laws. Publicly traded companies must electronically file a variety of forms or reports with 
the SEC (for example, annual financial statements). The SEC makes most of these 
electronic documents available on the Internet via EDGAR. EDGAR stands for Electronic 
Data Gathering, Analysis, and Retrieval system. The primary purpose for EDGAR is to 
increase the efficiency and fairness of the securities market for the benefit of investors, 
corporations, and the economy by accelerating the receipt, acceptance, dissemination, and 
analysis of time-sensitive corporate information filed with the agency. 
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a. Visit the SEC’s website (www.sec.gov) and review the information under the link to Required 
“Descriptions of Forms” to find the definitions for these forms: 8-K, 10-K, 10-Q, and 
DEF-14a. 


b. Visit the link to “Search for Company Filings” and locate the Form 10-K filing for 
Google Inc. for the year ended December 31, 2009 to answer the following questions: 
1. Who was Google’s auditor? 
2. Did the audit firm issue a combined or separate report(s) on the financial state- 
ments and on internal controls over financial reporting? 
3. What type of audit opinion did the auditor provide for the financial statements? 
4. What was the auditor’s opinion about internal controls over financial reporting? 


c. Search for the Form 10-K filing for Yahoo Inc. for the year ended December 31, 2009 
to answer the following questions: 
1. What type of audit opinion did Yahoo’s auditor provide for the financial state- 
ments and for internal controls over financial reporting? 
2. How does the Yahoo auditor’s report on the financial statements differ from the 
audit report related to Google’s financial statements? 
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PROFESSIONAL ETHICS 


The Value Of The Audit Depends 
On Auditor Independence 


Bruce Smith works on the audit of the U.S. subsidiary of Ultimate Networks, 
an audit client in his firm’s Hong Kong office. Bruce has watched the stock 
of Ultimate Networks soar for the past 6 months. Ultimate Networks is 
gaining market share, and he knows that their sales will continue to soar 
with the new technology they have in the pipeline. Finally, he can’t resist 
any longer. He calls his stockbroker, John Rizzo, and places an order for 
200 shares of Ultimate Networks’ stock. “Are you sure this is okay?” asked 
Rizzo. “| thought Ultimate Networks was your client.” Rizzo knows about 
professional responsibilities because he worked with Bruce at the CPA firm 
before becoming a stockbroker, and they remained friends. “Why don’t you 
check it out and get back to me?” Rizzo added. 


The next morning, Bruce is glad that he has John Rizzo for a stockbroker. 
The SEC just announced that they had uncovered numerous independence 
violations at another CPA firm. The firm had to recall several audit reports, 
and a few partners and audit staff were terminated for making stock 
investments similar to the investment that Bruce contemplated the day 
before. As he thinks about the requ et 
audit client, he concludes, “There ABag ee 
there.” 


LEARNING OBJECTIVES 


After studying this chapter, 
you should be able to 


4-1 


4-4 


Wi J 4-6 
own sh er 


4-7 





Distinguish ethical from 
unethical behavior in personal 
and professional contexts. 


Resolve ethical dilemmas using 
an ethical framework. 


Explain the importance of 
ethical conduct for the 
accounting profession. 


Describe the purpose and 
content of the AICPA Code of 
Professional Conduct. 


Understand Sarbanes-Oxley Act 
and other SEC and PCAOB 
independence requirements 
and additional factors that 
influence auditor independence. 


Apply the AICPA Code rules and 
interpretations on independence 
and explain their importance. 


Understand the requirements 
of other rules under the AICPA 
Code. 


Describe the enforcement 
mechanisms for the rules of 
conduct. 








L preceding chapters, audit reports and the demand for audit and other assurance services were discussed. The 
value of the audit report and the demand for audit services depend on public confidence in the independence and 
integrity of CPAs. This chapter discusses ethics and the independence and other ethical requirements for CPAs, 
including the AICPA Code of Professional Conduct. We begin the chapter with a discussion of general ethical 
principles and their application to the CPA profession. 


WHAT ARE ETHICS? 


OBJECTIVE 4-1 





Distinguish ethical from 
unethical behavior in 
personal and professional 
contexts. 





Need for Ethics 


Why People 
Act Unethically 


Ethics can be defined broadly as a set of moral principles or values. Each of us has such a 
set of values, although we may or may not have considered them explicitly. Philosophers, 
religious organizations, and other groups have defined in various ways ideal sets of 
moral principles or values. Examples of prescribed sets of moral principles or values 
include laws and regulations, church doctrine, codes of business ethics for professional 
groups such as CPAs, and codes of conduct within organizations. 

An example of a prescribed set of principles is included in Figure 4-1. These 
principles were developed by the Josephson Institute of Ethics, a nonprofit member- 
ship organization for the improvement of the ethical quality of society. 

It is common for people to differ in their moral principles and values and the relative 
importance they attach to these principles. These differences reflect life experiences, 
successes and failures, as well as the influences of parents, teachers, and friends. 


Ethical behavior is necessary for a society to function in an orderly manner. It can be 
argued that ethics is the glue that holds a society together. Imagine, for example, what 
would happen if we couldn’t depend on the people we deal with to be honest. If 
parents, teachers, employers, siblings, coworkers, and friends all consistently lied, it 
would be almost impossible to have effective communication. 

‘Apago! PDE Enhance ye portant that many commonly held 
ethical values dre incorporated into laws. However, many of the ethical values found in 
Figure 4-1, such as caring, cannot be incorporated into laws because they cannot be 
defined well enough to be enforced. That does not imply, however, that the principles 
are less important for an orderly society. 


Most people define unethical behavior as conduct that differs from what they believe is 
appropriate given the circumstances. Each of us decides for ourselves what we consider 


feral Illustrative Prescribed Ethical Principles ) 


The following are the six core ethical values that the Josephson Institute associates with ethical 
behavior: 








Trustworthiness includes honesty, integrity, reli: | also means pursuing excellence, self-restraint, 
ability, and loyalty. Honesty requires a good faith and leading by example, including perseverance 





intent to convey the truth. Integrity means that 
the person acts according to conscience, regard- 
less of the situation. Reliability means making all 
reasonable efforts to fulfill commitments. Loyalty 
is a responsibility to promote and protect the 
interests of certain people and organizations. 
Respect includes notions such as civility, courtesy, 
decency, dignity, autonomy, tolerance, and accep- 
tance. A respectful person treats others with 
consideration and accepts individual differences 
and beliefs without prejudice. 

Responsibility means being accountable for ones 
actions and exercising restraint. Responsibility 


and engaging in continuous improvement. 
Fairness and justice include issues of equality, 
impartiality, proportionality, openness, and due 
process. Fair treatment means that similar situ- 
ations are handled consistently. 

Caring means being genuinely concerned for 
the welfare of others and includes acting altruis- 
tically and showing benevolence. 

Citizenship includes obeying laws and per- 
forming one’s fair share to make society work, 
including such activities as voting, serving on juries, 
conserving resources, and giving more than one 
takes. 
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unethical behavior, both for ourselves and others. It is important to understand what 
causes people to act in a manner that we decide is unethical. 

There are two primary reasons why people act unethically: The person’s ethical 
standards are different from those of society as a whole, or the person chooses to act 
selfishly. Frequently, both reasons exist. 


Person’s Ethical Standards Differ from General Society Extreme examples of 
people whose behavior violates almost everyone’s ethical standards are drug dealers, bank 
robbers, and larcenists. Most people who commit such acts feel no remorse when they are 
apprehended because their ethical standards differ from those of society as a whole. 
There are also many far less extreme examples when others violate our ethical values. 
When people cheat on their tax returns, treat other people with hostility, lie on resumes and 
employment applications, or perform below their competence level as employees, most 
of us regard that as unethical behavior. If the other person has decided that this behavior 
is ethical and acceptable, there is a conflict of ethical values that is unlikely to be resolved. 


The Person Chooses to Act Selfishly The following example illustrates the 
difference between ethical standards that differ from general society’s and acting 
selfishly. Person A finds a briefcase in an airport containing important papers and 
$1,000. He tosses the briefcase and keeps the money. He brags to his family and friends 
about his good fortune. Person A’s values probably differ from most of society’s. Person 
B faces the same situation but responds differently. He keeps the money but leaves the 
briefcase in a conspicuous place. He tells nobody and spends the money on a new 
wardrobe. It is likely that Person B has violated his own ethical standards, but he 
decided that the money was too important to pass up. He has chosen to act selfishly. 

A considerable portion of unethical behavior results from selfish behavior. Political 
scandals result from the desire for political power; cheating on tax returns and expense 
reports is motivated by financial greed; performing below one’s competence and 


cheating on tests typically arise ABAGS “PDE Enhariver* the 
behavior is inappropriate but chooses to dott anyway because of the personal sacrifice 


needed to act ethically. 


ETHICAL DILEMMAS 


An ethical dilemma is a situation a person faces in which a decision must be made 
about the appropriate behavior. A simple example of an ethical dilemma is finding a 
diamond ring, which necessitates deciding whether to attempt to find the owner or to 
keep it. A far more difficult ethical dilemma to resolve is the following one, taken from 
Easier Said Than Done, a publication dealing with ethical issues. It is the type of case 
that might be used in an ethics course. 


* In Europe, a woman was near death from a special kind of cancer. There was one 
drug that the doctors thought might save her. It was a form of radium that a 
druggist in the same town had recently discovered. The drug was expensive to 
make, but the druggist was charging ten times what the drug cost him to make. 
He paid $200 for the radium and charged $2,000 for a small dose of the drug. 
The sick woman’s husband, Heinz, went to everyone he knew to borrow the 
money, but he could only get together about $1,000, which is half of what it cost. 
He told the druggist that his wife was dying and asked him to sell it cheaper or 
let him pay later. But the druggist said: “No, I discovered the drug and I’m going 
to make money from it.” So Heinz got desperate and broke into the man’s store 
to steal the drug for his wife. Should the husband have done that?! 


'Norman Sprinthall and Richard C. Sprinthall, “Value and Moral Development,” Easier Said Than Done (Vol. 1, 
No. 1, Winter 1988); p. 17. 


OBJECTIVE 4-2 


Resolve ethical dilemmas 
using an ethical framework. 
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Rationalizing 
Unethical Behavior 


Resolving Ethical 
Dilemmas 


Ethical Dilemma 


Auditors, accountants, and other businesspeople face many ethical dilemmas in 
their business careers. Dealing with a client who threatens to seek a new auditor unless 
an unqualified opinion is issued presents an ethical dilemma if an unqualified opinion 
is inappropriate. Deciding whether to confront a supervisor who has materially 
overstated departmental revenues as a means of receiving a larger bonus is an ethical 
dilemma. Continuing to be a part of the management of a company that harasses and 
mistreats employees or treats customers dishonestly is an ethical dilemma, especially if 
the person has a family to support and the job market is tight. 


There are alternative ways to resolve ethical dilemmas, but care must be taken to avoid 
methods that are rationalizations of unethical behavior. The following are rationaliza- 
tion methods commonly employed that can easily result in unethical conduct: 


Everybody Does It The argument that it is acceptable behavior to falsify tax returns, 
cheat on exams, or sell defective products is commonly based on the rationalization 
that everyone else is doing it and therefore it is acceptable. 


If It’s Legal, It’s Ethical Using the argument that all legal behavior is ethical relies 
heavily on the perfection of laws. Under this philosophy, one would have no obligation 
to return a lost object unless the other person could prove that it was his or hers. 


Likelihood of Discovery and Consequences This philosophy relies on evaluating 
the likelihood that someone else will discover the behavior. Typically, the person also 
assesses the severity of the penalty (consequences) if there is a discovery. An example is 
deciding whether to correct an unintentional overbilling to a customer when the 
customer has already paid the full amount. If the seller believes that the customer will 
detect the error and respond by not buying in the future, the seller will inform the 
customer now; otherwise, the seller will wait to see if the customer complains. 


Form iB e Bs P er E Neel eople resolve ethical dilemmas. The 
purpose AGE a BP ‘WwOr fever p Tfy the ethical issues and decide an 
appropriate course of action using the person’s own values. The six-step approach that 
follows is intended to be a relatively simple approach to resolving ethical dilemmas: 


1. Obtain the relevant facts. 
Identify the ethical issues from the facts. 
3. Determine who is affected by the outcome of the dilemma and how each 
person or group is affected. 
4, Identify the alternatives available to the person who must resolve the dilemma. 
5. Identify the likely consequence of each alternative. 
6. Decide the appropriate action. 


An illustration is used to demonstrate how a person might use this six-step 
approach to resolve an ethical dilemma. 


Bryan Longview has been working 6 months as a staff assistant for Barton & Barton 
CPAs. Currently he is assigned to the audit of Reyon Manufacturing Company under 
the supervision of Charles Dickerson, an experienced audit senior. There are three 
auditors assigned to the audit, including Bryan, Charles, and a more experienced 
assistant, Martha Mills. During lunch on the first day, Charles says, “It will be 
necessary for us to work a few extra hours on our own time to make sure we come in 
on budget. This audit isn’t very profitable anyway, and we don’t want to hurt our firm 
by going over budget. We can accomplish this easily by coming in a half hour early, 
taking a short lunch break, and working an hour or so after normal quitting time. We 
just won't enter that time on our time report.” Bryan recalls reading the firm’s policy 
that working hours and not charging for them on the time report is a violation of 
Barton & Barton’s employment policy. He also knows that seniors are paid bonuses, 
instead of overtime, whereas staff are paid for overtime but get no bonuses. Later, 
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when discussing the issue with Martha, she says, “Charles does this on all of his jobs. 
He is likely to be our firm’s next audit manager. The partners think he’s great because 
his jobs always come in under budget. He rewards us by giving us good engagement 
evaluations, especially under the cooperative attitude category. Several of the other 
audit seniors follow the same practice.” 


Relevant Facts There are three key facts in this situation that deal with the ethical 
issue and how the issue will likely be resolved: 

1. The staff person has been informed that he will work hours without recording 

them as hours worked. 

2. Firm policy prohibits this practice. 

3. Another staff person has stated that this is common practice in the firm. 
Ethical Issue The ethical issue in this situation is not difficult to identify. 

* Is it ethical for Bryan to work hours and not record them as hours worked in 

this situation? 

Who Is Affected and How Is Each Affected? There are typically more people 
affected in situations in which ethical dilemmas occur than might be expected. The 
following are the key persons involved in this situation: 


Who How Affected 

Bryan Being asked to violate firm policy. 
Hours of work will be affected. 
Pay will be affected. 


Performance evaluations may be affected. 
Attitude about firm may be affected. 
Martha Same as Bryan. 
Charles Success on engagement and in firm may be affected. 
A ago" PDF 'RAhancer 
Barton & Barton Stat@d firM policy is being violated. 
May result in underbilling clients in the current and 
future engagements. 
May affect firm’s ability to realistically budget 
engagements and bill clients. 
May affect the firm’s ability to motivate and retain 


employees. 
Staff assigned to May result in unrealistic time budgets. 
Reyon Manufacturing May result in unfavorable time performance 
in the future evaluations. 


May result in pressures to continue practice of not 
charging for hours worked. 

Other staff in firm Following the practice on this engagement may 
motivate others to follow the same practice on 
other engagements. 

Bryan’s Available Alternatives 

* Refuse to work the additional hours. 

» Perform in the manner requested. 

* Inform Charles that he will not work the additional hours or will charge the 

additional hours to the engagement. 

* Talk to a manager or partner about Charles’s request. 

* Refuse to work on the engagement. 

* Quit working for the firm. 


Each of these options includes a potential consequence, the worst likely one being 
termination by the firm. 


Resolving the Ethical 
Dilemma Using the 
Six-Step Approach 
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SOME ETHICAL 
VIOLATIONS 
ARE MORE SEVERE 


THAN OTHERS 


Bryan Longview’s ethical dilemma involves a 
situation in which he is asked to work without 
recording the time, which is sometimes called 
kitchen-tabling or eating time. One of the concerns 
with kitchen-tabling is that it can lead to a more 
severe problem known as premature signoff, in 
which a staff person signs off as having completed 
work without performing the necessary procedures. 
Tom Holton has far too busy a social life to 
work overtime. To make certain that work does 


not interfere with his social life, he tests only part 
of the assigned sample. For example, if he is 
asked to test 25 cash disbursement transactions, 
he tests the first 15 but indicates that he has 
tested all 25. A supervisor, curious about Tom's 
amazing ability to beat the time budget, decides 
to carefully review Tom’s work. When the firm 
discovers that Tom is signing off procedures 
without completing them, he is dismissed that 
day—no counseling out, no 2 weeks’ notice. 





Consequences of Each Alternative In deciding the consequences of each alterna- 
tive, it is essential to evaluate both the short- and long-term effects. There is a natural 
tendency to emphasize the short term because those consequences will occur quickly, 
even when the long-term consequences may be more important. For example, consider 
the potential consequences if Bryan decides to work the additional hours and not 
report them. In the short term, he will likely get good evaluations for cooperation and 
perhaps a salary increase. In the longer term, what will be the effect of not reporting the 
hours this time when other ethical conflicts arise? Consider the following similar ethical 
dilemmas Bryan might face in his career as he advances: 
* A supervisor asks Bryan to work 3 unreported hours daily and 15 unreported 
hours each weekend. 
* A supervisor asks Bryan to initial certain audit procedures as having been 
performed when they were not. 
* Bryan concludes that he cannot be promoted to manager unless he persuades 
assistants to work hours that they do not record. 
. Net ment Pi B , 3 is Low a partner, that either the company gets 
AA ed 49) 38 eth Reem or the company will change auditors. 
* Management informs Bryan that the audit fee will be increased $25,000 if Bryan 
can find a plausible way to increase earnings by $1 million. 


Appropriate Action Only Bryan can decide the appropriate option to select in the 
circumstances after considering his ethical values and the likely consequences of each 
option. At one extreme, Bryan can decide that the only relevant consequence is the 
potential impact on his career. Most of us believe that Bryan is an unethical person if 
he follows that course. At the other extreme, Bryan can decide to refuse to work for a 
firm that permits even one supervisor to violate firm policies. Many people consider 
such an extreme reaction naive. 


SPECIAL NEED FOR ETHICAL CONDUCT IN PROFESSIONS 


OBJECTIVE 4-3 





Explain the importance of 
ethical conduct for the 
accounting profession. 





Our society has attached a special meaning to the term professional. Professionals are 
expected to conduct themselves at a higher level than most other members of society. 
For example, when the press reports that a physician, clergyperson, U.S. senator, or 
CPA has been indicted for a crime, most people feel more disappointment than when 
the same thing happens to people who are not labeled as professionals. 

The term professional means a responsibility for conduct that extends beyond 
satisfying individual responsibilities and beyond the requirements of our society’s laws 
and regulations. A CPA, as a professional, recognizes a responsibility to the public, to 
the client, and to fellow practitioners, including honorable behavior, even if that means 
personal sacrifice. 

The reason for an expectation of a high level of professional conduct by any 
profession is the need for public confidence in the quality of service by the profession, 
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regardless of the individual providing it. For the CPA, it is essential that the client 
and external financial statement users have confidence in the quality of audits and other 
services. If users of services do not have confidence in physicians, judges, or CPAs, the 
ability of those professionals to serve clients and the public effectively is diminished. 

It is not practical for most customers to evaluate the quality of the performance of 
professional services because of their complexity. A patient cannot be expected to 
evaluate whether an operation was properly performed. A financial statement user 
cannot be expected to evaluate audit performance. Most users have neither the 
competence nor the time for such an evaluation. Public confidence in the quality of 
professional services is enhanced when the profession encourages high standards of 
performance and conduct on the part of all practitioners. 


CPA firms have a different relationship with users of financial statements than most 
other professionals have with their customers. Attorneys, for example, are typically 
engaged and paid by a client and have primary responsibility to be an advocate for 
that client. CPA firms are usually engaged by management for private companies and 
the audit committee for public companies, and are paid by the company issuing the 
financial statements, but the primary beneficiaries of the audit are financial statement 
users. Often, the auditor does not know or have contact with the financial statement 
users but has frequent meetings and ongoing relationships with client personnel. 

It is essential that users regard CPA firms as competent and unbiased. If users 
believe that CPA firms do not perform a valuable service (reduce information risk), 
the value of CPA firms’ audit and other attestation reports is reduced and the demand 
for these services will thereby also be reduced. Therefore, there is considerable 
incentive for CPA firms to conduct themselves at a high professional level. 


Figure 4-2 summarizes the most important ways in which CPAs can conduct them- 
selves appropriately and perform high-quality audits and related services. We discussed 
in Chapter 2 GAAS and their inte GOnPBPa Bria mee watrel, 
peer review requirements, PCAOB and SEC, AICPA audit practice and quality centers, 
and continuing education. The legal liability of CPA firms also exerts considerable 
influence on the way in which practitioners conduct themselves and audits, and this 
topic is examined in Chapter 5. 

In the United States, the two most influential factors—shown shaded in Figure 
4-2—are the AICPA Code of Professional Conduct and the PCAOB and SEC. The Code 
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of Professional Conduct is meant to provide a standard of conduct for all members of 
the AICPA. The PCAOB is authorized to establish ethics and independence standards 
for auditors of public companies, and the SEC also plays a significant role in estab- 
lishing independence standards for auditors of public companies. At the international 
level, the International Ethics Standards Board for Accountants (IESBA), an inde- 
pendent standards setting body within the International Federation of Accountants 
(IFAC), establishes ethical standards and guidance and fosters international debate on 
ethical issues faced by accountants through its Code of Ethics for Professional Accountants. 
While CPAs in the United States must follow the AICPA Code, the AICPA’s Pro- 
fessional Ethics Executive Committee closely monitors IESBA activities to converge 
the U.S. guidance, where appropriate, to guidance in the IESBA’s Code. As a member 
body of IFAC, the AICPA agrees to have ethics standards that are at least as stringent 
as the IESBA’s ethics standards. The remainder of this chapter addresses the AICPA 
Code and related PCAOB and SEC requirements. 


CODE OF PROFESSIONAL CONDUCT 


OBJECTIVE 4-4 





Describe the purpose and 
content of the AICPA Code 
of Professional Conduct. 





The AICPA Code of Professional Conduct provides both general standards of ideal 
conduct and specific enforceable rules of conduct. There are four parts to the code: 
principles, rules of conduct, interpretations of the rules of conduct, and ethical rulings. 
The parts are listed in order of increasing specificity; the principles provide ideal 
standards of conduct, whereas ethical rulings are highly specific. The four parts are 
summarized in Figure 4-3 and discussed in the following sections. 

A few definitions, taken from the AICPA Code of Professional Conduct, must be 
understood to help interpret the rules. 


lient. Any p ther eer the member’s employer, that engages a 
Apa oo PDE. “Baban GFF fessional services. 


* Firm. A form of organization alin by law or regulation whose characteristics 
conform to resolutions of the Council of the American Institute of Certified 
Public Accountants that is engaged in the practice of public accounting. Except 
for the purposes of applying Rule 101, Independence, the firm includes the 
individual partners thereof. 


beet Code of Professional Conduct 


Ideal standards of ethical conduct stated in philosophical terms. 

















Erineiples They are not enforceable. 








Minimum standards of ethical conduct stated as specific rules. 





Rules of conduct 








They are enforceable. 











Interpretations of the rules of conduct by the AICPA Division of 


Interpretations of Professional Ethics. 


the rules of conduct 














They are not enforceable, but a practitioner must justify departure. 

















Published explanations and answers to questions about the rules 
Ethical rulings of conduct submitted to the AICPA by practitioners and others 
interested in ethical requirements. 

















They are not enforceable, but a practitioner must justify departure. 
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* Institute. The American Institute of Certified Public Accountants. 

° Member. A member, associate member, or international associate of the American 
Institute of Certified Public Accountants. 

* Practice of public accounting. The practice of public accounting consists of the 
performance for a client, by a member or a member’s firm, while holding out as 
CPA(s), of the professional services of accounting, tax, personal financial plan- 
ning, litigation support services, and those professional services for which 
standards are promulgated by bodies designated by Council. 


SS] 
Ethical Principles 


1. Responsibilities In carrying out their responsibilities as professionals, members should exercise 
sensitive professional and moral judgments in all their activities. 

2. The Public Interest Members should accept the obligation to act in a way that will serve the 
public interest, honor the public trust, and demonstrate commitment to professionalism. 

3. Integrity To maintain and broaden public confidence, members should perform all professional 
responsibilities with the highest sense of integrity. 

4. Objectivity and Independence A member should maintain objectivity and be free of conflicts of 
interest in discharging professional responsibilities. A member in public practice should be 
independent in fact and appearance when providing auditing and other attestation services. 

5. Due Care A member should observe the profession’s technical and ethical standards, strive 
continually to improve competence and quality of services, and discharge professional 
responsibility to the best of the member's ability. 

6. Scope and Nature of Services A member in public practice should observe the principles of the 


Code of Professional Conduct in determining the scope and nature of services to be provided. 
b _f 











The section of the AICPA Code dealing with principles of professional conduct Principles of 
includes a general discussion of characteristics required of a CPA. The principles Professional Conduct 
section consists of two main parse six ago Pp oF AS snde of those 
principles. The ethical principles ak oR ov CE Righout 
this chapter include ideas taken from the paniek section. 
The first five of these principles are equally applicable to all members of the 
AICPA, regardless of whether they practice in a CPA firm, work as accountants in 
business or government, are involved in some other aspect of business, or are in 
education. One exception is the last sentence of objectivity and independence. It 
applies only to members in public practice, and then only when they are providing 
attestation services such as audits. The sixth principle, scope and nature of services, 
applies only to members in public practice. That principle addresses whether a 
practitioner should provide a certain service, such as providing personnel consulting 
when an audit client is hiring a chief information officer (CIO) for the client’s IT 
function. Providing such a service can create a loss of independence if the CPA firm 
recommends a CIO who is hired and performs incompetently. 





GUIDANCE. _ Specific threats to a CPA's ability to meet the Board's (IESBA’s) Code of Ethics for Professional 
objectives of the six principles may arise when Conduct, the guide contains a risk-based 
FOR MEETING siaadive Fel ee to tiene and framework a outlines categories of potential 
OBJECTIVES OF — employers. Because it is impossible to address in threats to compliance with the principles and 
the Code every potential threat, the AICPA’s Profes- includes suggested safeguards to prevent 
PRINCIPLES sional Ethics Executive Committee (PEEC) issued noncompliance. Although use of the guide is not 
a non-authoritative Guide for Complying with required, it can assist members in complying with 
Rules 102-505 to assist all members, including the rules. Therefore, members should refer to the 
those in business and government, with meeting framework when making decisions on ethical 
the objectives of the six ethical principles when matters not explicitly addressed in the Code. 
facing circumstances not explicitly addressed by the Source: “Guide for Complying with Rules 102-505,” 
Code. Similar to the International Ethics Standards (www.aicpa.org). 
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Rules of Conduct 


Interpretations of 
Rules of Conduct 


Ethical Rulings 





foal Standards of Conduct ) 














Ideal conduct Principles 
by practitioners 
Minimum level Rules of 
Seduac eee Substandard ees 
se conduct 
x y 





This part of the Code includes the explicit rules that must be followed by every CPA in 
the practice of public accounting.” Those individuals holding the CPA certificate but 
not practicing public accounting must follow most, but not all requirements. Because 
the section on rules of conduct is the only enforceable part of the code, it is stated in 
more precise language than the section on principles. Because of their enforceability, 
many practitioners refer to the rules as the AICPA Code of Professional Conduct. 

The difference between the standards of conduct set by the principles and those set 
by the rules of conduct is shown in Figure 4-4. When practitioners conduct themselves 
at the minimum level in Figure 4-4, this does not imply unsatisfactory conduct. The 
profession has presumably set the standards sufficiently high to make the minimum 
conduct satisfactory. 

At what level do practitioners conduct themselves in practice? As in any profession, 
the PApago: gqooP DFitifnnan cetoners conduct themselves at a high 
level. Unfortunately, a few conduct themselves below the minimum level set by the 
profession. The activities designed to encourage CPAs to conduct themselves at a high 
level described in Figure 4-2 (p. 83) help minimize any substandard practice. 


The need for published interpretations of the rules of conduct arises when there are 
frequent questions from practitioners about a specific rule. The Professional Ethics 
Executive Committee of the AICPA prepares each interpretation based on a consensus 
of a committee made up principally of public accounting practitioners. Before 
interpretations are finalized, they are issued as exposure drafts to the profession and 
others for comment. Interpretations are not officially enforceable, but a departure from 
the interpretations is difficult if not impossible for a practitioner to justify in a disci- 
plinary hearing. The most important interpretations are discussed as a part of each 
section of the rules. 


Rulings are explanations by the executive committee of the professional ethics division 
of specific factual circumstances. A large number of ethical rulings are published in the 
expanded version of the AICPA Code of Professional Conduct. The following is an 
example (Rule 101—Independence; Ruling No. 16): 


* Question—A member serves on the board of directors of a nonprofit social club. 
Is the independence of the member considered to be impaired with respect to the 
club? 

* Answer—Independence of the member is considered to be impaired because the 
board of directors has the ultimate responsibility for the affairs of the club. 


?The AICPA Code of Professional Conduct is applicable to every CPA who is a member of the AICPA. Each state 
also has rules of conduct that are required for licensing by the state. Many states follow the AICPA rules, but 
some have somewhat different requirements. 
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IESBA CODE OF The International Ethics Standard Board for necessary, to eliminate the threat or reduce the 
Accountants (IESBA) Code of Ethics for threat to an acceptable level. Parts B and C of the 
ETHICS FOR Professional Conduct is also a principles-based IESBA Code describe how the conceptual 
PROFESSIONAL __ framework consisting of three parts. Part A framework applies in certain situations, including 
establishes the five fundamental principles examples of safeguards and descriptions of 
CONDUCT elated to integrity, objectivity, professional situations where safeguards are not available to 
competence and due care, confidentiality, and address threats. Part B applies to professional 
professional behavior. Part A also provides a accountants in public practice while Part C 
conceptual framework that accountants can apply applies to professional accountants in business. 
to identify threats to compliance with the Source: International Ethics Standards Board for 
fundamental principles, evaluate the significance Accountants, Code of Ethics for Professional 
of identified threats, and apply safeguards, when Accountants, (www. ifac.org). 





The rules of conduct in the AICPA Code of Professional Conduct apply to all AICPA 
members for all services provided, whether or not the member is in the practice of 
public accounting, unless the code specifically states otherwise. Table 4-1 (p. 102) 
indicates whether the rule applies to all members or only to members in public practice. 

Each rule applies to attestation services, and unless stated otherwise, it also applies 
to all services provided by CPA firms such as taxes and management services and to 
CPAs who are employees who prepare financial statements for their employer organi- 
zations. The most notable exception is Rule 101—Independence that requires inde- 
pendence only when the AICPA has established independence requirements through 
its rule-setting bodies, such as the Auditing Standards Board. The AICPA requires 
independence only for attestation engagements. For example, a CPA firm can perform 
management services for a company in which the partner owns stock. Of course, if the 
CPA firm also performs an audit, that violates the independent requirements for 
attestation services. 

It is a violation of the rules if soMPAGOsokRDEs obnaAaNGeKer that 
is a violation if the member does it. An example is a banker who puts in a newsletter 
that Johnson and Able CPA firm has the best tax department in the state and con- 
sistently gets large refunds for its tax clients. That is likely to create false or unjustified 
expectations and is a violation of Rule 502 on advertising. A member is also responsible 
for compliance with the rules by employees, partners, and shareholders. 


Applicability of the 
Rules of Conduct 


INDEPENDENCE 


OBJECTIVE 4-5 


Independence, because of its importance, is the first rule of conduct. Before we discuss 
the specific independence requirements, we first discuss external factors that may 
influence auditor independence. 

The value of auditing depends heavily on the public’s perception of the independ- 
ence of auditors. The reason that many diverse users are willing to rely on CPA’s reports 
is their expectation of an unbiased viewpoint. The AICPA Code of Professional Conduct 
and the IESBA Code of Ethics for Professional Conduct both define independence as 
consisting of two components: independence of mind and independence in appearance. 
Independence of mind reflects the auditor’s state of mind that permits the audit to be 
performed with an unbiased attitude. Independence of mind reflects a long-standing 
requirement that members be independent in fact. Independence in appearance is the 
result of others’ interpretations of this independence. If auditors are independent in fact 
but users believe them to be advocates for the client, most of the value of the audit 
function is lost. 

The following sections discuss SEC and related PCAOB independence rules, 
including those required by the Sarbanes—Oxley Act. Organizations and standards 





Understand Sarbanes-Oxley 
Act and other SEC and 
PCAOB independence 
requirements and additional 
factors that influence auditor 
independence. 
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Sarbanes-Oxley Act 
and SEC Provisions 

Addressing Auditor 

Independence 


other than the AICPA Code of Professional Conduct that influence auditor independ- 
ence are also described. 


The SEC adopted rules strengthening auditor independence consistent with the 
requirements of the Sarbanes—Oxley Act. The SEC rules further restrict the provision 
of nonaudit services to audit clients, and they also include restrictions on employment 
of former audit firm employees by the client and provide for audit partner rotation to 
enhance independence. The PCAOB has also issued additional independence rules 
related to the provision of certain tax services. 


Nonaudit Services The Sarbanes-Oxley Act and the revised SEC rules further 
restrict, but do not completely eliminate, the types of nonaudit services that can be 
provided to publicly held audit clients. Many of these services were prohibited under 
existing SEC rules on independence. The revised rules clarify many of the existing 
prohibitions and expand the circumstances in which the services are prohibited. The 
following nine services are prohibited: 

Bookkeeping and other accounting services 

Financial information systems design and implementation 

Appraisal or valuation services 

Actuarial services 

Internal audit outsourcing 

Management or human resource functions 

Broker or dealer or investment adviser or investment banker services 

Legal and expert services unrelated to the audit 

Any other service that the PCAOB determines by regulation is impermissible 
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CPA firms are not prohibited from performing these services for private companies 
and for public companies that are not audit clients. In addition, CPA firms may still 
provide other services that are not prohibited for public company audit clients. For 
eamAPagGo PPEDE ru BRnihanee rovide tax services for audit clients, 
except for tax services for company executives who oversee financial reporting, and tax 
avoidance planning services. Nonaudit services that are not prohibited by the Sarbanes— 
Oxley Act and the SEC rules must be preapproved by the company’s audit committee. In 
addition, a CPA firm is not independent if an audit partner receives compensation for 
selling services to the client other than audit, review, and attest services. 

Companies are required to disclose in their proxy statement or annual filings with 
the SEC the total amount of audit and nonaudit fees paid to the CPA firm for the two 
most recent years. Four categories of fees must be reported: (1) audit fees, (2) audit- 
related fees, (3) tax fees, and (4) all other fees. Audit-related fees are for services such as 
comfort letters and reviews of SEC filings that can only be provided by CPA firms. 
Companies are also required to provide further breakdown of the “other fees” category 
and to provide qualitative information on the nature of the services provided. 


Audit Committees An audit committee is a selected number of members of a 
company’s board of directors whose responsibilities include helping auditors remain 
independent of management. Most audit committees are made up of three to five or 
sometimes as many as seven directors who are not a part of company management. In 
response to the Sarbanes—Oxley Act requirement that all members of the audit committee 
be independent, the national stock exchanges amended their listing rules to reflect the 
provision. Now, with very limited exceptions, public company audit committees should 
be comprised solely of independent members, and companies must disclose whether or 
not the audit committee includes at least one member who is a financial expert. 

The Sarbanes—Oxley Act further requires the audit committee of a public company 
to be responsible for the appointment, compensation, and oversight of the work of the 
auditor. The audit committee must preapprove all audit and nonaudit services, and is 
responsible for oversight of the work of the auditor, including resolution of disagree- 
ments involving financial reporting between management and the auditor. Auditors 
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are responsible for communicating all significant matters identified during the audit to 
the audit committee. 

For public companies, PCAOB rules require a CPA firm, before its selection as the 
company’s auditor, to describe in writing and document its discussions with the audit 
committee about all relationships between the firm and the company, including 
executives in financial reporting positions, to determine whether there is any impairment 
of the CPA firm’s independence. If selected as the auditor, these communications are to 
be made at least annually. 

These provisions increase the independence and role of the audit committee. The 
requirements enhance auditor independence by effectively making the audit com- 
mittee the client for public companies, rather than management. 


Conflicts Arising from Employment Relationships The employment of former 
audit team members with an audit client raises independence concerns. Consistent 
with the requirements of the Sarbanes—Oxley Act, the SEC added a one-year “cooling 
off” period before a member of the audit engagement team can work for the client in 
certain key management positions. This has important implications for an auditor 
working for a CPA firm who receives an employment offer from a publicly held client 
for a position as a chief executive officer, controller, chief financial officer, chief 
accounting officer, or equivalent position. The CPA firm cannot continue to audit that 
client if the auditor accepts the position and has participated in any capacity in the 
audit for one year preceding the start of the audit. This has no effect on the CPA firm’s 
ability to continue the audit if the former auditor accepts a position such as assistant 
controller or accountant without primary accounting responsibilities. 

Under SEC rules existing before the Sarbanes—Oxley Act and continuing, a CPA 
firm is not independent with respect to an audit client if a former partner, principal, 
shareholder, or professional employee of the firm accepts employment with a client if 
he or she has a continuing financial interest in the CPA firm or is in a position to 


influence the CPA firm’s operations APAGopRDE Enhancer 


Partner Rotation As required by the Sarbanes-Oxley Act, the SEC independence 
rules require the lead and concurring audit partner to rotate off the audit engagement 
after five years. (The concurring partner is not involved with the actual performance of 
the audit and reviews the work at the completion of the audit.) Although not addressed 
in the Sarbanes—Oxley Act, the SEC requires a five-year “time-out” for the lead and 
concurring partners after rotation before they can return to that audit client. Addi- 
tional audit partners with significant involvement on the audit must rotate after seven 
years and are subject to a two-year time-out period. 


Ownership Interests SEC rules on financial relationships take an engagement 
perspective and prohibit ownership in audit clients by those persons who can influence 
the audit. The rules prohibit any ownership by covered persons and their immediate 
family, including (a) members of the audit engagement team, (b) those in a position to 
influence the audit engagement in the firm chain of command, (c) partners and 
managers who provide more than 10 hours of nonaudit services to the client, and (d) 
partners in the office of the partner primarily responsible for the audit engagement. 
These rules are designed to provide workable rules that still safeguard independence. 


Both management and representatives of management, such as investment bankers, 
often consult with other accountants on the application of accounting principles. 
Although consultation with other accountants is appropriate, it can lead to a loss of 
independence in certain circumstances. For example, suppose one CPA firm replaces 
the existing auditors on the strength of accounting advice offered but later find facts 
and circumstances that require the CPA firm to change its stance. It may be difficult 
for the new CPA firm to remain independent in such a situation. Auditing standards 
set forth requirements that must be followed when a CPA firm is requested to 
provide a written or oral opinion on the application of accounting principles or the 


Shopping for 
Accounting Principles 
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Engagement and 
Payment of Audit Fees 
by Management 


type of audit opinion that would be issued for a specific or hypothetical transaction 
of an audit client of another CPA firm. The purpose of the requirement is to mini- 
mize the likelihood of management following the practice commonly called opinion 
shopping and the potential threat to independence of the kind described. Primary 
among the requirements is that the consulted CPA firm should communicate with 
the entity’s existing auditors to ascertain all the available facts relevant to forming a 
professional judgment on the matters on which the firm has been requested to report. 


Can an auditor be truly independent in fact and appearance if the payment of the audit 
fees is dependent on the entity’s management? There is probably no satisfactory answer 
to this question, but it does demonstrate the difficulty of assuring that auditors are 
independent. The alternative to engagement of the CPA firm by the audit committee 
and payment of audit fees by management is probably the use of either government or 
quasi-government auditors. All things considered, it is questionable whether the audit 
function would be performed better or more cheaply by the public sector. 


INDEPENDENCE RULE OF CONDUCT AND INTERPRETATIONS 


OBJECTIVE 4-6 





Apply the AICPA Code rules 
and interpretations on 
independence and explain 
their importance. 





Financial Interests 


The previous section discussed the importance of auditor independence. It is not 
surprising that independence is the first subject addressed in the rules of conduct. 





Rule 101—Independence A member in public practice shall be independent in the performance of 
professional services as required by standards promulgated by bodies designated by Council. 





CPA firms are required to be independent for certain services that they provide, 
but np agpo. TR DFph Enhancer required by standards promulgated 
by bodies designated by Council” is a convenient way for the AICPA to include or 
exclude independence requirements for different types of services. For example, the 
Auditing Standards Board requires that auditors of historical financial statements be 
independent. Rule 101 therefore applies to audits. Independence is also required for 
other types of attestations, such as review services and audits of prospective financial 
statements. However, a CPA firm can do tax returns and provide management services 
without being independent. Rule 101 does not apply to those types of services. 

There are more interpretations for independence than for any of the other rules of 
conduct. Some of the more significant issues and interpretations involving independ- 
ence are discussed in the following sections. 


Interpretations of Rule 101 prohibit covered members from owning any stock or other 
direct investment in audit clients because it is potentially damaging to actual audit 
independence (independence of mind), and it certainly is likely to affect users’ percep- 
tions of the auditors’ independence (independence in appearance). Indirect investments, 
such as ownership of stock in a client’s company by an auditor’s grandparent, are also 
prohibited, but only if the amount is material to the auditor. The ownership of stock 
rule is more complex than it appears at first glance. A more detailed examination of 
that requirement is included to aid in understanding and to show the complexity of 
one of the rules. There are three important distinctions in the rules as they relate to 
independence and stock ownership. 


Covered Members Rule 101 applies to covered members in a position to influence 
an attest engagement. Covered members include the following: 
1. Individuals on the attest engagement team 
2. An individual in a position to influence the attest engagement, such as individuals 
who supervise or evaluate the engagement partner 
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A partner or manager who provides nonattest services to the client 

A partner in the office of the partner responsible for the attest engagement 
The firm and its employee benefit plans 

An entity that can be controlled by any of the covered members listed above or 
by two or more of the covered individuals or entities operating together 


Dt Ye 


For example, a staff member in a national CPA firm could own stock in a client cor- 
poration and not violate Rule 101 if the staff member is not involved in the engagement. 
However, if the staff member is assigned to the engagement or becomes a partner in 
the office of the partner responsible for the attest engagement, he or she would have 
to dispose of the stock or the CPA firm would no longer be independent of that 
client. 

These independence rules also generally apply to the covered member’s immediate 
family. The interpretations of Rule 101 define immediate family as a spouse, spousal 
equivalent, or dependent. 

Some CPA firms do not permit any ownership by staff of a client’s stock regardless 
of which office serves the client. These firms have decided to have higher requirements 
than the minimums set by the rules of conduct. 


Direct Versus Indirect Financial Interest The ownership of stock or other equity 
shares and debt securities by members or their immediate family is called a direct 
financial interest. For example, if either a partner in the office in which an audit is 
conducted or the partner’s spouse has a financial interest in a company, the CPA firm is 
prohibited by Rule 101 from expressing an opinion on the financial statements of that 
company. 

An indirect financial interest exists when there is a close, but not a direct, owner- 
ship relationship between the auditor and the client. An example of an indirect ownership 
interest is the covered member’s ownership of a mutual fund that has an investment in 


a client. Apago PDF Enhancer 


Material or Immaterial Materiality affects whether ownership is a violation of Rule 
101 only for indirect ownership. Materiality must be considered in relation to the 
member person’s wealth and income. For example, if a covered member has a significant 
amount of his or her personal wealth invested in a mutual fund and that fund has a large 
ownership position in a client company, a violation of the Code is likely to exist. 


Several interpretations of Rule 101 deal with specific aspects of financial relationships 
between CPA firm personnel and clients. These are summarized in this section. 


Former Practitioners In most situations, the interpretations permit former partners 
or shareholders who left the firm due to such things as retirement or the sale of their 
ownership interest to have relationships with clients of the firm of the type that are 
normally a violation of Rule 101, without affecting a firm’s independence. A violation 
by the firm would occur if the former partner was held out as an associate of the firm 
or took part in activities that are likely to cause other parties to believe the person is still 
active in the firm. 


Normal Lending Procedures Generally, loans between a CPA firm or covered 
members and an audit client are prohibited because it is a financial relationship. There 
are several exceptions to the rule, however, including automobile loans, loans fully 
collateralized by cash deposits at the same financial institution, and unpaid credit card 
balances not exceeding $10,000 in total. It is also permissible to accept a financial 
institution as a client, even if covered members of the CPA firm have existing home 
mortgages, other fully collateralized secured loans, and immaterial loans with the 
institution. No new loans are permitted, however. Both the restrictions and exceptions 
are reasonable ones, considering the trade-off between independence and the need to 
permit CPAs to function as businesspeople and individuals. 


Related Financial 
Interest Issues 
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Financial Interests and Employment of Immediate and Close Family Members 
The financial interests of immediate family members, defined as a spouse, spousal 
equivalent, or dependent, are ordinarily treated as if they were the financial interest of the 
covered member. For example, if the spouse of a professional on the audit engagement 
team owns any stock in the client, Rule 101 is violated. Independence is also impaired if 
an immediate family member holds a key position such as financial officer or chief 
executive officer with the client that allows them to influence accounting functions, 
preparation of financial statements, or the contents of the financial statements. 

Ownership interests of close family members, defined as a parent, sibling, or 
nondependent child, do not normally impair independence unless the ownership 
interest is material to the close relative. Imagine the potential difficulty in maintaining 
independence and objectivity if the firm is asked to audit a client where the parent of 
the audit partner is chief executive officer and has a significant ownership interest in 
the client. For individuals on the engagement team, independence is impaired if a 
close relative has a key position with the client or has a financial interest that is 
material to the close relative or enables the relative to exercise significant influence 
over the client. Immaterial ownership interests of close family members, defined as a 
parent, sibling, or nondependent child, do not normally impair independence. 
Independence is also not impaired if the covered member is not aware of the close 
relative’s ownership interest. 

Similar rules apply to other individuals in a position to influence the audit 
engagement or partners in the audit-engagement office. However, in these cases, the 
ownership interest does not impair independence unless the ownership interest is 
material to the close relative and allows the close relative to exercise significant 
influence over the audit client. 


Joint Investor or Investee Relationship with Client Assume, for example, that a 
CPA owns stock in angnaudit client, Jackson Company. Frank Company, which is an 
audit Apagow DE in nhaneer thi may be a violation of Rule 101. 
Interpretation 101-8 addresses situations where the client is either an investor or 
investee for a nonclient in which the CPA has an ownership interest. 


1. Client investor. If the client’s investment in the nonclient is material, any direct 
or material indirect investment by the CPA in the nonclient investee impairs 
independence. If the client’s investment is not material, independence is 
impaired only if the CPA’s investment is material. 

2. Client investee. If investment in a client is material to a nonclient investor, any 
direct or material indirect investment by the CPA in the nonclient impairs 
independence. If the nonclient’s investment in the client is not material, 
independence is not impaired unless the CPA’s investment in the nonclient 
allows the CPA to exercise significant influence over the nonclient. 


Director, Officer, Management, or Employee of a Company If a CPA is a member 
of the board of directors or an officer of a client company, his or her ability to make 
independent evaluations of the fair presentation of financial statements is affected. 
Even if holding one of these positions did not actually affect the auditor’s inde- 
pendence, the frequent involvement with management and the decisions it makes is 
likely to affect how statement users perceive the CPA’s independence. To eliminate this 
possibility, interpretations prohibit covered members, partners, and professional staff 
in the office of the partner responsible for the attest engagement from being a director 
or officer of an audit client company. Similarly, the auditor cannot be an underwriter, 
voting trustee, promoter, or trustee of a client’s pension fund, or act in any other capacity 
of management, or be an employee of the company. 

Independence can also be impaired when a former partner or member of the audit 
firm leaves the firm and is employed by the client in a key position, unless certain 
conditions are met. For example, the audit engagement team may need to modify audit 
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procedures to reduce the risk that the former employee has knowledge of the audit plan, 
and the firm will need to evaluate whether members of the engagement team can 
maintain an effective level of professional skepticism when evaluating audit information 
and other representations provided by the former firm member. Independence can also 
be impaired when a member of the audit team discusses potential employment or 
receives an offer of employment from the audit client. In those situations, independence 
can be preserved if the individual promptly reports the offer to appropriate firm 
personnel and is removed from the engagement until the offer is accepted or rejected. 

Interpretations permit CPAs to do audits and be honorary directors or trustees for 
not-for-profit organizations, such as charitable and religious organizations, as long as 
the position is purely honorary. To illustrate, it is common for a partner of the CPA 
firm doing the audit of a city’s United Fund drive to also be an honorary director, along 
with many other civic leaders. The CPA cannot vote or participate in any management 
functions. 


When there is a lawsuit or intent to start a lawsuit between a CPA firm and its client, the 
ability of the CPA firm and client to remain objective is questionable. The interpretations 
regard such litigation as a violation of Rule 101 for the current audit. For example, if 
management sues a CPA firm claiming a deficiency in the previous audit, the CPA firm is 
not considered independent for the current year’s audit. Similarly, if the CPA firm sues 
management for fraudulent financial reporting or deceit, independence is lost. The CPA 
firm and client company or management may be defendants in a suit brought by a third 
party, such as in a securities class action. This litigation in itself does not affect inde- 
pendence. However, independence may be affected if cross-claims between the auditor 
and client are filed that have a significant risk of a material loss to the CPA firm or client. 

Litigation by the client related to tax or other nonaudit services, or litigation 
against both the client and the CPA firm by another party, does not usually impair 


independence. The key consideratiog in all such aa) Ta): hha on the ability of 
client, management, and CPA firm AQQ re bjeeed aLGet freely. 


If a CPA records transactions in the journals for the client, posts monthly totals to the 
general ledger, makes adjusting entries, and subsequently does an audit, there is some 
question as to whether the CPA can be independent in the audit role. The inter- 
pretations permit a CPA firm to do both bookkeeping and auditing for a private company 
audit client. The AICPA’s conclusion is presumably based on a comparison of the effect 
on independence of having both bookkeeping and auditing services performed by the 
same CPA firm with the additional cost of having a different CPA firm do the audit. 
There are three important requirements that the auditor must satisfy before it is 
acceptable to do bookkeeping and auditing for the client: 


1. The client must accept full responsibility for the financial statements. The 
client must be sufficiently knowledgeable about the enterprise’s activities and 
financial condition and the applicable accounting principles so that the client 
can reasonably accept such responsibility, including the fairness of valuation 
and presentation and the adequacy of disclosure. When necessary, the CPA 
must discuss accounting matters with the client to be sure that the client has 
the required degree of understanding. 

2. The CPA must not assume the role of employee or of management conducting 
the operations of an enterprise. For example, the CPA cannot consummate 
transactions, have custody of assets, or exercise authority on behalf of the 
client. The client must prepare the source documents on all transactions in 
sufficient detail to identify clearly the nature and amount of such transactions 
and maintain accounting control over data processed by the CPA, such as 
control totals and document counts. 

3. The CPA, in making an audit of financial statements prepared from books and 
records that the CPA has maintained completely or in part, must conform to 
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Conceptual Framework 


auditing standards. The fact that the CPA has processed or maintained certain 
records does not eliminate the need to make sufficient audit tests. 


The first two requirements are often difficult to satisfy for a smaller company with 
an owner who may have little knowledge of or interest in accounting or processing 
transactions. 

The AICPA independence rules require members to adhere to more restrictive 
independence rules of other regulatory bodies, such as the SEC. As a result, it is not 
permissible for an audit firm to provide bookkeeping services to a public company 
audit client under both SEC rules and the AICPA rules on independence. 


Consulting and Other Nonaudit Services CPA firms offer many other services to 
attest clients that may potentially impair independence. Such activities are permissible 
as long as the member does not perform management functions or make management 
decisions. For example, a CPA firm may assist in the installation of a client’s information 
system as long as the client makes necessary management decisions about the design of 
the system. Subject to some restrictions, CPA firms may also provide internal auditing 
and other extended auditing services to their clients as long as management maintains 
responsibility for the direction and oversight of the internal audit function. 

The CPA firm must assess the client’s willingness and ability to perform all 
management functions related to the engagement and must document the under- 
standing with the client. The understanding should include a description of the 
services, the engagement objectives, any limitations on the engagement, the member’s 
responsibilities, and the client’s agreement to accept its responsibilities. 

As indicated in the discussion of bookkeeping services, the more restrictive SEC 
independence rules concerning provision of nonaudit services apply to AICPA 
members when providing services to public company audit clients. As a result, 
providing nonaudit services that are ennai by the SEC to a public company audit 
AR ould be a Main) “Enh: Incas as well as PCAOB and SEC rules. These 
prohilst APAagaii Ee, CEEs. 


Under Rule 101 and its rulings and interpretations, independence is considered 
impaired if billed or unbilled fees remain unpaid for professional services provided 
more than 1 year before the date of the report. Such unpaid fees are considered a loan 
from the auditor to the client and are therefore a violation of Rule 101. Unpaid fees 
from a client in bankruptcy do not violate Rule 101. 


Audit firms frequently join larger groups or associations of other firms to enhance their 
capabilities to provide professional services. When they share certain characteristics, 
such as a common brand name, common control, common business strategy, common 
quality control procedures, or they share in profits, costs, or professional resources, the 
network firm is required to be independent of audit and review clients of other 
network firms. 


While the guidance contained in Rule 101 and related interpretations address many 
specific circumstances that may impair independence, CPAs are likely to face other 
circumstances that may threaten independence. To assist CPAs in evaluating indepen- 
dence issues, the Professional Ethics Executive Committee developed an independence 
conceptual framework consistent with a similar framework in the IESBA Code that 
provides a risk-based approach to analyzing independence matters. This risk- 
based approach involves a three-step process for assessing whether independence is 
impaired: 

1. Identify and evaluate circumstances that might threaten independence. For 
example, a CPA firm’s reliance on revenue from a single audit client may be sig- 
nificant, posing a potential threat to the firm’s independence from that client. 

2. Determine whether safeguards are already in place or can be implemented that elimi- 
nate or sufficiently mitigate the threat. For example, to address the threat associated 
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with the excessive reliance on revenues from a single audit client, the CPA firm 
has established policies to closely monitor the firm’s reliance on a single client’s 
revenue and those policies include specific actions that prevent excessive reliance. 

3. Conclude that independence is impaired if no safeguards are available to 
eliminate an unacceptable threat or reduce it to an acceptable level. In making 
this judgment, the CPA considers whether the circumstance would lead a 
reasonable person aware of all the relevant facts to conclude that there is an 
unacceptable threat to the CPA’s independence. 


The independence framework outlines seven broad categories of threats to 
independence, explores common issues associated with these kinds of threats, and 
describes examples of the types of safeguards that can be used to mitigate or eliminate 
threats to independence. 


OTHER RULES OF CONDUCT 


Although independence is critical to public confidence in CPAs, it is also important 
that auditors adhere to the other rules of conduct listed in Table 4-1 (p. 102). We begin 
by discussing the rules for integrity and objectivity. 


Integrity means impartiality in performing all services. Rule 102 on integrity and Integrity and 
objectivity is presented below: Objectivity 








OBJECTIVE 4-7 





Rule 102—Integrity and Objectivity In the performance of any professional service, a member shall 
maintain objectivity and integrity, shall be free of conflicts of interest, and shall not knowingly 
misrepresent facts or subordinate his or her judgment to others. 


Apago PVE 
To illustrate the meaning of integrity and objectivity, assume the auditor believes 
that accounts receivable may not be collectible but accepts management’s opinion 
without an independent evaluation of collectibility. The auditor has subordinated his 
or her judgment and thereby lacks objectivity. Now assume a CPA is preparing the tax 
return for a client and, as a client advocate, encourages the client to take a deduction on 
the returns that the CPA believes is valid, but for which there is some but not complete 
support. This is not a violation of either objectivity or integrity, because it is acceptable 
for the CPA to be a client advocate in tax and management services. If the CPA 
encourages the client to take a deduction for which there is no support but has little 
chance of discovery by the IRS, a violation has occurred. That is a misrepresentation of 
the facts; therefore, the CPA’s integrity has been impaired. 

Audit staff members should not subordinate their judgment to supervisors on the 
audit. Staff auditors are responsible for their own judgments documented in the audit 
files and should not change those conclusions at the request of supervisors on the 
engagement unless the staff auditor agrees with the supervisor’s conclusion. Firm 
procedures should allow assistants to document situations where they disagree with a 
conclusion involving a significant matter. 

Freedom from conflicts of interest means the absence of relationships that might 
interfere with objectivity or integrity. For example, it is inappropriate for an auditor 
who is also an attorney to represent a client in legal matters. The attorney is an advo- 
cate for the client, whereas the auditor must be impartial. 

An interpretation of Rule 102 states that apparent conflicts of interest may not be a 
violation of the rules of conduct if the information is disclosed to the member’s client 
or employer. For example, if a partner of a CPA firm recommends that a client have the 
security of its Internet Web site evaluated by a technology consulting firm that is 
owned by the partner’s spouse, a conflict of interest may appear to exist. No violation 


Understand the requirements 
of other rules under the 
AICPA Code. 
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Technical Standards 


Confidentiality 


of Rule 102 occurs if the partner informs the client’s management of the relationship 
and management proceeded with the evaluation with that knowledge. The interpreta- 
tion makes it clear that the independence requirements under Rule 101 cannot be 
eliminated by these disclosures. Rule 102 also applies to CPAs who are not in public 
practice. For example, a CPA who, as an employee of an entity, makes false or 
misleading entries or representations in financial statements is in violation of Rule 102. 


The next three standards of the Code relate to the auditor’s adherence with the require- 
ments of technical standards. The following are the requirements of the technical 
standards: 


Rule 201—General Standards A member shall comply with the following standards and with any 
interpretations thereof by bodies designated by Council. 


A. Professional competence. Undertake only those professional services that the member or the 
member's firm can reasonably expect to be completed with professional competence. 

B. Due professional care. Exercise due professional care in the performance of professional services. 

C. Planning and supervision. Adequately plan and supervise the performance of professional services. 

D. Sufficient relevant data. Obtain sufficient, relevant data to afford a reasonable basis for conclusions 
or recommendations in relation to any professional services performed. 
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Rule 202—Compliance with Standards A member who performs auditing, review, compilation, 


management consulting, tax, or other professional services shall comply with standards promulgated 
by bodies designated by Council. 
ss 
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Rule 203—Accounting Principles A member shall not (1) express an opinion or state affirmatively 
that the financial statements or other financial data of any entity are presented in conformity with 
generally accepted accounting principles or (2) state that he or she is not aware of any material 
modifications that should be made to such statements or data in order for them to be in conformity 
with generally accepted accounting principles, if such statements or data contain any departure from 
an accounting principle promulgated by bodies designated by Council to establish such principles 
that has a material effect on the statements or data taken as a whole. If, however, the statements or 
data contain such a departure and the member can demonstrate that due to unusual circumstances 
the financial statements or data would otherwise have been misleading, the member can comply 
with the rule by describing the departure, its approximate effects, if practicable, and the reasons why 


compliance with the principle would result in a misleading statement. 
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The primary purpose of the requirements of Rules 201 to 203 is to provide support 
for the ASB, PCAOB, FASB, IASB, and other technical standard-setting bodies. In May 
2008 the AICPA designated the IASB as the body to establish professional standards 
with respect to international financial accounting and reporting principles under Rule 
202 of the Code. 

Notice that requirements A and B of Rule 201 are the same in substance as general 
auditing standards 1 and 3, and C and D of Rule 201 have the same intent as field work 
standards 1 and 3. The only difference is that Rule 201 is stated in terms that apply to all 
types of services, whereas auditing standards apply only to audits. Rule 202 makes it 
clear that when a practitioner violates an auditing standard, the rules of conduct are 
also automatically violated. 


It is essential that practitioners not disclose confidential information obtained in any 
type of engagement without the consent of the client. The specific requirements of 
Rule 301 related to confidential client information are shown in the box on the 
following page. 
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Need for Confidentiality During audits and most other types of engagements, 
practitioners obtain considerable confidential information, including officers’ salaries, 
product pricing and advertising plans, and product cost data. If auditors divulge this 
information to outsiders or to client employees who have been denied access to the 
information, their relationship with management can be seriously strained, and in 
extreme cases, the client can be harmed. The confidentiality requirement applies to all 
services provided by CPA firms, including tax and management services. 

Ordinarily, the CPA’s audit files can be made available to someone else only with 
the express permission of the client. This is the case even if a CPA sells the practice to 
another CPA firm or is willing to permit a successor auditor to examine the audit docu- 
mentation prepared for a former client. 


Rule 301—Confidential Client Information A member in public practice shall not disclose any 
confidential client information without the specific consent of the client. 

This rule shall not be construed (1) to relieve a member of his or her professional obligations under 
Rules 202 and 203, (2) to affect in any way the member's obligation to comply with a validly issued 
and enforceable subpoena or summons, or to prohibit a member's compliance with applicable laws 
and government regulations, (3) to prohibit review of a member's professional practice under AICPA 
or state CPA society or Board of Accountancy authorization, or (4) to preclude a member from 
initiating a complaint with, or responding to any inquiry made by, the professional ethics division or 
trial board of the Institute or a duly constituted investigative or disciplinary body of a state CPA society 
or Board of Accountancy. 

Members of any of the bodies identified in (4) above and members involved with professional 
practice reviews identified in (3) above shall not use to their own advantage or disclose any 
member's confidential client information that comes to their attention in carrying out those activities. 
This prohibition shall not restrict members’ exchange of information in connection with the 
investigative or disciplinary proceedings described in (4) above or the professional practice reviews 
described in (3) above. 


Exceptions to Confidentiality ARADO. EDF pamAhangsa , there 


are four exceptions to the confidentiality requirements. All four exceptions concern 
responsibilities that are more important than maintaining confidential relations with 
the client. 











1. Obligations related to technical standards. Suppose that 3 months after an 
unqualified audit report was issued, the auditor discovers that the financial 
statements were materially misstated. When the chief executive officer is 
confronted, he responds that even though he agrees that the financial state- 
ments are misstated, confidentiality prevents the CPA from informing anyone. 
Rule 301 makes it clear that the auditor’s responsibility to discharge professional 
standards is greater than that for confidentiality. In such a case, a revised, 
correct audit report must be issued. Note, however, that the conflict seldom 
occurs. 

2. Subpoena or summons and compliance with laws and regulations. Legally, 
information is called privileged information if legal proceedings cannot require 
a person to provide the information, even if there is a subpoena. Information 
communicated by a client to an attorney or by a patient to a physician is 
privileged. Information obtained by a CPA from a client generally is not privileged. 
Exception (2) of Rule 301 is therefore needed to put CPA firms in compliance 
with the law. 

3. Peer review. When a CPA or CPA firm conducts a peer review of the quality 
controls of another CPA firm, it is normal practice to examine several sets of 
audit files. If the peer review is authorized by the AICPA, state CPA society, or 
state Board of Accountancy, client permission to examine the audit docu- 
mentation is not needed. Requiring permission from each client may restrict 
access of the peer reviewers and would be a time burden on all concerned. 
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Contingent Fees 


Naturally, the peer reviewers must keep the information obtained confidential 
and cannot use the information for other purposes. 

Access to files for PCAOB inspections is also allowed to comply with the 
requirements of the Sarbanes—Oxley Act. As noted earlier, access to audit files 
is allowed to comply with laws and regulations. 

4. Response to ethics division. If a practitioner is charged with inadequate technical 
performance by the AICPA Ethics Division trial board under any of Rules 201 
to 203, board members are likely to want to examine audit documentation. 
Exception (4) in Rule 301 prevents a CPA firm from denying the inquirers 
access to audit documentation by saying that it is confidential information. 
Similarly, a CPA firm that observes substandard audit documentation of 
another CPA firm cannot use confidentiality as the reason for not initiating a 
complaint of substandard performance against the firm. 


To help CPAs maintain objectivity in conducting audits or other attestation services, 
basing fees on the outcome of engagements is prohibited. The requirements of Rule 
302 related to contingent fees are shown below. 


_ eel 
Rule 302—Contingent Fees A member in public practice shall not 


(1) Perform for a contingent fee any professional services for, or receive such a fee from, a client for 
whom the member or member's firm performs: 
(a) an audit or review of a financial statement; or 
(b) a compilation of a financial statement when the member expects, or reasonably might 
expect, that a third party will use the financial statement and the member's compilation 
report does not disclose a lack of independence; or 
(c) an examination of prospective financial information; 


or 


(2) Prepare an original or amended tax return or claim for a tax refund for a contingent fee for any 
client. 


The prohibition in (1) above applies during the period in which the member or the member's firm 
is engaged to perform any of the services listed above and the period covered by any historical 
financial statements involved in any such listed services. 

Except as stated in the next sentence, a contingent fee is a fee established for the performance of 
any service pursuant to an arrangement in which no fee will be charged unless a specified finding or 
result is attained, or in which the amount of the fee is otherwise dependent upon the finding or 
result of such service. Solely for purposes of this rule, fees are not regarded as being contingent if 
fixed by courts or other public authorities, or, in tax matters, if determined based on the results of 
judicial proceedings or the findings of governmental agencies. 


A member's fees may vary depending, for example, on the complexity of services rendered. 
& y 











To illustrate the need for a rule on contingent fees, suppose a CPA firm was per- 
mitted to charge a fee of $50,000 if an unqualified opinion was provided but only 
$25,000 if the opinion was qualified. Such an agreement may tempt a practitioner to 
issue the wrong opinion and is a violation of Rule 302. It is also a violation of Rule 302 
for members to prepare an original or amended tax return or a claim for tax refunds 
for a contingent fee. 

CPA firms are permitted to charge contingent fees for nonattestation services, unless 
the CPA firm is also performing attestation services for the same client. For example, it is 
not a violation for a CPA to charge fees as an expert witness determined by the amount 
awarded to the plaintiff or to base consulting fees on a percentage of a bond issue if the 
CPA firm does not also do an audit or other attestation for the same client. 

Prohibiting contingent fees for attestation services and tax return preparation is 
important because of the importance of independence and objectivity. Because CPAs 
compete when providing other services with other professions who do not have 
contingent fee restrictions, it would be unfair to prohibit CPAs from providing these 
services on the same basis. When these nonattestation services are provided for a 
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client receiving attestation services, the need for independence and objectivity prevails 
and the auditor is not allowed to provide the services on a contingent fee basis. 


Because of the special need for CPAs to conduct themselves in a professional manner, 
the Code has a specific rule prohibiting acts discreditable to the profession. Although 
a discreditable act is not well defined in the rules or interpretations, some of the 
requirements are discussed below. 


Rule 501—Acts Discreditable A member shall not commit an act discreditable to the profession. 


Do excessive drinking, rowdy behavior, or other acts that many people consider 
unprofessional constitute a discreditable act? Probably not. Determining what con- 
stitutes professional behavior continues to be the responsibility of each professional. 

For guidance as to what constitutes a discreditable act, the AICPA bylaws provide 
clearer guidelines than the AICPA Code of Professional Conduct. The bylaws state that 
membership in the AICPA can be terminated without a hearing for judgment of convic- 
tion for any of the following four crimes: (1) a crime punishable by imprisonment for 
more than 1 year; (2) the willful failure to file any income tax return that the CPA, as an 
individual taxpayer, is required by law to file; (3) the filing of a false or fraudulent income 
tax return on the CPA’s or client’s behalf; or (4) the willful aiding in the preparation and 
presentation of a false and fraudulent income tax return of a client. Observe that three 
of these deal with income tax matters of the member or a client. 

Interpretations of Rule 501 identify several acts that are considered to be discredit- 
able. For example, it is discreditable to retain a client’s records after a demand is made 
for them or whenever a member is found to have violated any federal, state, or local 
antidiscrimination laws. The solicitation or disclosure of the Uniform CPA examination 


questions and answers without perBpa go iS ‘Rrhaieer 

Rule 501 applies to all CPAs, even those not in public practice. kor example, a 
member is considered to have committed an act discreditable if by his or her negligence 
others are made or permitted or directed to make materially false and misleading entries 
in the financial statements and records of an entity, the member fails to correct financial 
statements that are materially false and misleading, or the member signs or permits or 
directs another to sign a document containing materially false and misleading information. 
Also, if a member prepares financial statements or related information for reporting to 
governmental bodies, commissions, or regulatory agencies, the member should follow the 
requirements of such organizations in addition to requirements of accounting standards. 

Other interpretations of Rule 501 describe additional acts considered to be 
discreditable: 





1. Compliance with standards on government audits and requirements of government 
bodies and agencies. Audits of government units and federal grant recipients 
must be done in compliance with government auditing standards, in addition 
to GAAS. When a member accepts an engagement that involves reporting to a 
regulatory agency such as the SEC, the member must follow the additional 
requirements of the regulatory agency, in addition to auditing standards. If the 
additional requirements are not followed, the reasons should be noted in the 
report. 

2. Inclusion of indemnification clauses in engagement letters. Certain governmental 
bodies, such as federal banking regulators, state insurance commissions, and 
the SEC prohibit entities they regulate from including certain types of indem- 
nification and limitation of liability provisions in agreements related to the 
performance of audit or other attest services. Members violate Rule 501 if they 
include such provision in their engagement letters related to the performance 
of audit or attest services for these entities. 


Discreditable Acts 
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Advertising and 
Solicitation 


Commissions and 
Referral Fees 


To encourage CPAs to conduct themselves professionally, the rules also prohibit 
advertising or solicitation that is false, misleading, or deceptive. 





Rule 502—Advertising and Other Forms of Solicitation A member in public practice shall not seek 
to obtain clients by advertising or other forms of solicitation in a manner that is false, misleading, or 
deceptive. Solicitation by the use of coercion, overreaching, or harassing conduct is prohibited. 





Solicitation consists of the various means that CPA firms use to engage new clients 
other than accepting new clients who approach the firm. Examples include taking 
prospective clients to lunch to explain the CPA’s services, offering seminars on current 
tax law changes to potential clients, and advertising in the Yellow Pages of a phone 
book. The last example is advertising, which is only one form of solicitation. 

Many CPA firms have developed sophisticated advertising for national journals read 
by businesspeople and for local newspapers. It is common for CPA firms to identify 
potential clients being serviced by other CPA firms and make formal and informal pre- 
sentations to convince management to change CPA firms. Price bidding for audits and 
other services is now common and often highly competitive. As a result of these changes, 
some companies now change auditors more often than previously to reduce audit cost. 

Has the quality of audits become endangered by these changes? Although there have 
been several recent high-profile cases involving apparent audit failures, the existing 
legal exposure of CPAs, peer review requirements, and the potential for interference by 
the SEC and government has kept audit quality high. 


Commissions are compensation paid for recommending or referring a third party’s 
product or service to a client or recommending or referring a client’s product or service 
to a third party. Restrictions on commissions are similar to the rules on contingent 
fees. CPAs are prohibited from receiving commissions for a client who is receiving 
attestaRg BGS: IPH CMyAipaayemesyons are permissible for other clients, 
but they’MustBDe disclosed. Referral fees for recommending or referring the services of 
another CPA are not considered commissions and are not restricted. However, any 
referral fees for CPA services must also be disclosed. 





Rule 503—Commissions and Referral Fees 


A. Prohibited commissions. A member in public practice shall not for a commission recommend or 
refer to a client any product or service, or for a commission recommend or refer any product or 
service to be supplied by a client, or receive a commission, when the member or the member's firm 
also performs for that client: 

(a) an audit or review of a financial statement; or 

(b) a compilation of a financial statement when the member expects, or reasonably might expect, 
that a third party will use the financial statement and the member's compilation report does 
not disclose a lack of independence; or 

(c) an examination of prospective financial information. 


This prohibition applies during the period in which the member is engaged to perform any of the 
services listed above and the period covered by any historical financial statements involved in such 
listed services. 


B. Disclosure of permitted commissions. A member in public practice who is not prohibited by this 
rule from performing services for or receiving a commission and who is paid or expects to be paid 
a commission shall disclose that fact to any person or entity to whom the member recommends or 
refers a product or service to which the commission relates. 

C. Referral fees. Any member who accepts a referral fee for recommending or referring any service of 
a CPA to any person or entity or who pays a referral fee to obtain a client shall disclose such 


acceptance or payment to the client. 
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The rule for commissions and referral fees means that a CPA firm does not violate 
AICPA rules of conduct if it sells such things as real estate, securities, and entire firms 
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on a commission basis if the transaction does not involve a client who is receiving 
attestation services from the same CPA firm. This rule enables CPA firms to profit by pro- 
viding many services to nonattestation services clients that were previously prohibited. 

The reason for the AICPA continuing to prohibit commissions for any attestation 
service client is the need to ensure that the CPA firm is independent. This requirement 
and the reasons for it are the same as those discussed under contingent fees. 

The Board of Accountancy in the state in which the firm is licensed may have more 
restrictive rules than the AICPA’s. The CPA firm must follow the more restrictive 
requirements if different rules exist. 


The organizational structure of CPA firms was first discussed in Chapter 2. The rules of 
conduct restrict the permissible forms of organization and prohibit a member from 
practicing under a firm name that is misleading. 

Rule 505 permits practitioners to organize in any of six forms, as long as they are 
permitted by state law: proprietorship, general partnership, general corporation, profes- 
sional corporation (PC), limited liability company (LLC), or limited liability partnership 
(LLP). Each of these forms of organization was discussed in Chapter 2 (pp. 28-29). 


Rule 505—Form of Organization and Name A member may practice public accounting only in a 
form of organization permitted by state law or regulation whose characteristics conform to 
resolutions of Council. 

A member shall not practice public accounting under a firm name that is misleading. Names of one 
or more past owners may be included in the firm name of a successor organization. 

A firm may not designate itself as “Members of the American Institute of Certified Public 


Accountants” unless all of its CPA owners are members of the Institute. 
S 4 











Ownership of CPA firms by non-CPAs is allowed under the following conditions: 


* CPAs must own a majority ApagoRDFtcHnhances. 


» ACPA must have ultimate responsibility for all financial statement attest, 
compilation, and other services provided by the firm that are governed by 
Statements on Auditing Standards or Statements on Standards for Accounting 
and Review Services. 

* Owners must at all times own their equity in their own right. 

* The following rules apply to all non-CPA owners: 


1. They must actively provide services to the firm’s clients as their principal 
occupation. 

2. They cannot hold themselves out as CPAs but may use any title permitted by 
state law such as principal, owner, officer, member, or shareholder. 

3. They cannot assume ultimate responsibility for any financial statement attest 
or compilation engagement. 

4. They are not eligible for AICPA membership but must abide by the AICPA 
Code of Professional Conduct. 


A recent development has been the acquisition of CPA firms by corporate entities. In 
such instances, the CPA firm may form a subsidiary to provide attest services to clients. 
These alternative practice structures are permissible, but an AICPA Council resolution 
makes it clear that to protect the public interest, CPAs have the same responsibility for 
the conduct of their attest work as they have in traditional practice structures. 

A CPA firm may use any name as long as it is not misleading. Most firms use the 
name of one or more of the owners. It is not unusual for a firm name to include the 
names of five or more owners. A CPA firm can use a trade name, although this is unusual 
in practice. Names such as Marshall Audit Co. or Chicago Tax Specialists are permissible 
if they are not misleading. 

A summary of the rules of conduct is included in Table 4-1. 


Form of Organization 
and Name 
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TABLE 4-1 Summary of Rules of Conduct 








Rules of Conduct Applicability 


Summary of Rules 





Members in 
Number Topic All Members Public Practice 





101 Independence x 


A member in public practice shall be independent in the 
performance of professional services as required by standards 
promulgated by bodies designated by Council. 





102 Integrity and x 
objectivity 


In performing any professional service, a member shall maintain 
objectivity and integrity, shall be free of conflicts of interest, 
and shall not knowingly misrepresent facts or subordinate 
his or her judgment to others. 





201 General standards X 


For all services, a member shall comply with the following 
professional standards and interpretations thereof by bodies 
designated by Council: (1) undertake only those professional 
services that the member can reasonably expect to complete 
with professional competence, (2) exercise due professional 
care, (3) adequately plan and supervise all engagements, and 
(4) obtain sufficient relevant data to afford a reasonable basis 
for all conclusions or recommendations. 





202 Compliance with x 
standards 


A member who performs auditing, review, compilation, 
management consulting, tax, or other professional services 
shall comply with standards promulgated by bodies 
designated by Council. 





203 Accounting x 
principles 


A member shall follow the professional audit reporting standards 
promulgated by bodies designated by Council in issuing 
reports about entities’ compliance with generally accepted 
accounting principles. 





301 Confidential client X 
information 


A member in public practice shall not disclose any confidential 
client information without the specific consent of the client, 
except for the four specific situations included in Rule 301. 





302 Contingent fees i 


A member in public practice shall not perform for a contingent 
fee any professional service if the member also performs for 
the client an audit, review, or certain compilations of 
financial statements, or an examination of prospective 
financial statements. A member in public practice should 
also not prepare an original or amended tax return or claim 
for a tax refund for a contingent fee for any client. 





501 Acts discreditable x 


A member shall not commit an act discreditable to the 
profession. 





502 Advertising and xX 
other forms of 
solicitation 


A member in public practice shall not seek to obtain clients 
by advertising or other forms of solicitation in a manner 
that is false, misleading, or deceptive. Solicitation by the 
use of coercion, overreaching, or harassing conduct is 
prohibited. 





503 Commissions and X 
referral fees 


A member in public practice shall not receive or pay a commission 
or referral fee for any client if the member also performs 
for the client an audit, review, or certain compilations of 
financial statements, or an examination of prospective 
financial statements. For nonprohibited commissions or 
referral fees, a member must disclose the existence of such 
fees to the client. 





505 Form of organization x 
and name 





A member may practice public accounting only in a form of 
organization permitted by state law or regulation whose 
characteristics conform to resolutions of Council and shall 
not practice public accounting under a firm name that is 
misleading. 
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ENFORCEMENT 


OBJECTIVE 4-8 


Failure to follow the rules of conduct can result in expulsion from the AICPA. This by 
itself does not prevent a CPA from practicing public accounting, but it is an 
important social sanction. In addition to the rules of conduct, the AICPA bylaws 
provide for automatic suspension or expulsion from the AICPA for conviction of a 
crime punishable by imprisonment for more than 1 year and for various tax-related 
crimes. 


The AICPA Professional Ethics Division is responsible for investigating violations of 
the Code and deciding disciplinary action. The division’s investigations result from 
information obtained primarily from complaints of practitioners or other individuals, 
state societies of CPAs, or governmental agencies. A member can be automatically 
sanctioned without an investigation if the member has been disciplined by govern- 
mental agencies or other organizations that have been granted the authority to regulate 
accountants, such as the SEC and PCAOB. 

There are two primary levels of disciplinary action. For less serious, and probably 
unintentional violations, the division limits the discipline to a requirement of remedial 
or corrective action. An example is the unintentional failure to make sure that a small 
audit client included all disclosures in its financial statements, which violates Rule 203 
of the rules of conduct. The division is likely to require the member to attend a 
specified number of hours of continuing education courses to improve technical 
competence. The second level of disciplinary action is action before the Joint Trial 
Board. This board has authority to suspend or expel members from the AICPA for 
various violations of professional ethics. Typically, action by the board is reported in 
the Disciplinary Actions sections of the AICPA’s Web site, including the name and 


location of the person suspended orgxpelled and r. fo tion 
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Even more important than expulsion from the AICPA are the rules of conduct, similar 
to the AICPA’s, that have been enacted by the Board of Accountancy of each of the 50 
states. Because each state grants the individual practitioner a license to practice as a 
CPA, a significant breach of a state Board of Accountancy’s code of conduct can result in 
the loss of the CPA certificate and the license to practice. Although it rarely happens, the 
loss removes the practitioner from public accounting. Most states adopt the AICPA 
rules of conduct, but several have more restrictive codes. For example, some states have 
retained restrictions on advertising and other forms of solicitation. In recent years, an 
increasing number of states have adopted codes of conduct more restrictive than the 
AICPA’. 





Describe the enforcement 
mechanisms for the rules of 
conduct. 





Action by 
AICPA Professional 
Ethics Division 


Action by a State 
Board of Accountancy 


SUMMARY 


The demand for audit and other assurance services provided by CPA firms depends on 
public confidence in the profession. This chapter discussed the role of ethics in society and 
the unique ethical responsibilities of CPAs. 

The professional activities of CPAs are governed by the AICPA Code of Professional 
Conduct, and auditors of public companies are also subject to oversight by the PCAOB 
and SEC. Foremost of all ethical responsibilities of CPAs is the need for independence. 
The rules of conduct and interpretations provide guidance on permissible financial and 
other interests to help CPAs maintain independence. Other rules of conduct are also 
designed to maintain public confidence in the profession. The ethical responsibilities of 
CPAs are enforced by the AICPA for members and by state boards of accountancy for 
licensed CPAs. 
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Audit committee—selected members of a 
client’s board of directors whose respon- 
sibilities include helping auditors to 
remain independent of management 


Confidential client information—client 
information that may not be disclosed 
without the specific consent of the client 
except under authoritative professional or 
legal investigation 


Direct financial interest—the owner- 
ship of stock or other equity shares by 
members or their immediate family 


Ethical dilemma—a situation in which a 
decision must be made about the appro- 
priate behavior 


Ethics—a set of moral principles or 
values 


ESSENTIAL TERMS 


Independence in appearance—the 
auditor’s ability to maintain an unbiased 
viewpoint in the eyes of others 


Independence of mind—the auditor’s 
state of mind that enables an unbiased 
viewpoint in the performance of pro- 
fessional services; also described as 
“independence in fact” 


Indirect financial interest—a close, 
but not direct, ownership relationship 
between the auditor and the client; an 
example is the ownership of stock by a 
member’s grandparent 


Privileged information—client infor- 
mation that the professional cannot be 
legally required to provide; information 
that an accountant obtains from a client 
is confidential but not privileged 


REVIEW QUESTIONS 


4-1 (Objective 4-1) What are the six core ethical values described by the Josephson 
Institute? What are some other sources of ethical values? 


4-2 (Apago) IPDE: aknham@enxiow does a person resolve an ethical 


dilemma? 


4-3 (Objective 4-3) Why is there a special need for ethical behavior by professionals? Why 
do the ethical requirements of the CPA profession differ from those of other professions? 


4-4 (Objective 4-4) List the four parts of the Code of Professional Conduct, and state the 
purpose of each. 


4-5 (Objective 4-4) What organization is responsible for developing ethics standards at the 
international level? What are the fundamental principles of the international ethics 
standards? 


4-6 (Objective 4-5) Distinguish between independence of mind and independence in 
appearance. State three activities that may not affect independence of mind but are likely to 
affect independence in appearance. 


4-7 (Objective 4-5) Why is an auditor’s independence so essential? 


4-8 (Objective 4-5) What consulting or nonaudit services are prohibited for auditors of 
public companies? What other restrictions and requirements apply to auditors when 
providing nonaudit services to public companies? 


4-9 (Objective 4-6) Explain how the rules concerning stock ownership apply to partners 
and professional staff. Give an example of when stock ownership would be prohibited for 
each. 


4-10 (Objective 4-5) Many people believe that a CPA cannot be truly independent when 
payment of fees is dependent on the management of the client. Explain two approaches 
that could reduce this appearance of lack of independence. 


4-11 (Objective 4-7) After accepting an engagement, a CPA discovers that the client’s 
industry is more technical than he realized and that he is not competent in certain areas of 
the operation. What are the CPA’s options? 
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4-12 (Objective 4-7) Assume that an auditor makes an agreement with a client that the audit 
fee will be contingent upon the number of days required to complete the engagement. Is this 
a violation of the Code of Professional Conduct? What is the essence of the rule of 
professional ethics dealing with contingent fees, and what are the reasons for the rule? 

4-13 (Objective 4-7) The auditor’s audit files usually can be provided to someone else only 
with the permission of the client. Give three exceptions to this general rule. 

4-14 (Objective 4-7) Identify and explain factors that should keep the quality of audits high 
even though advertising and competitive bidding are allowed. 

4-15 (Objective 4-7) Summarize the restrictions on advertising by CPA firms in the rules of 
conduct and interpretations. 

4-16 (Objective 4-7) What is the purpose of the AICPA’s Code of Professional Conduct 
restriction on commissions as stated in Rule 503? 


4-17 (Objective 4-7) State the allowable forms of organization a CPA firm may assume. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 





4-18 (Objective 4-6) The following questions concern independence and the Code of 
Professional Conduct or GAAS. Choose the best response. 


a. What is the meaning of the generally accepted auditing standard that requires the 
auditor be independent? 
(1) The auditor must be without bias with respect to the client under audit. 
(2) The auditor must adopt a critical attitude during the audit. 
(3) The auditor’s sole obligation is to third parties. 
(4) The auditor may have a direct ownership interest in the client’s business if it is not 
material. 


b. The independent audit is importa Ghies PDEKiaiknharecerit 

(1) determines the future stewardship of the management of the company whose 
financial statements are audited. 

(2) measures and communicates financial and business data included in financial 
statements. 

(3) involves the objective examination of and reporting on management-prepared 
statements. 

(4) reports on the accuracy of all information in the financial statements. 


c. An auditor strives to achieve independence in appearance to 
(1) maintain public confidence in the profession. 
(2) become independent in fact. 
(3) comply with the generally accepted auditing standards of field work. 
(4) maintain an unbiased mental attitude. 


4-19 (Objective 4-7) The following questions concern possible violations of the AICPA 
Code of Professional Conduct. Choose the best response. 


a. In which one of the following situations would a CPA be in violation of the AICPA 

Code of Professional Conduct in determining the audit fee? 

(1) A fee based on whether the CPA’s report on the client’s financial statements results 
in the approval of a bank loan. 

(2) A fee based on the outcome of a bankruptcy proceeding. 

(3) A fee based on the nature of the service rendered and the CPA’s expertise instead 
of the actual time spent on the engagement. 

(4) A fee based on the fee charged by the prior auditor. 


b. The AICPA Code of Professional Conduct states that a CPA shall not disclose any 
confidential information obtained in the course of a professional engagement except 
with the consent of the client. In which one of the following situations would 
disclosure by a CPA be in violation of the code? 


Chapter 4 / PROFESSIONAL ETHICS 


105 


106 


Cc. 


(1) Disclosing confidential information in order to properly discharge the CPA’s 
responsibilities in accordance with the profession’s standards. 

(2) Disclosing confidential information in compliance with a subpoena issued by a 
court. 

(3) Disclosing confidential information to another accountant interested in pur- 
chasing the CPA’s practice. 

(4) Disclosing confidential information during an AICPA authorized peer review. 


A CPA’s retention of client records as a means of enforcing payment of an overdue 
audit fee is an action that is 

(1) not addressed by the AICPA Code of Professional Conduct. 

(2) acceptable if sanctioned by the state laws. 

(3) prohibited under the AICPA rules of conduct. 

(4) a violation of generally accepted auditing standards. 


DISCUSSION QUESTIONS AND PROBLEMS 


4-20 (Objectives 4-5, 4-6) The following situations involve the provision of nonaudit 
services. Indicate whether providing the service is a violation of AICPA rules or SEC rules 
including Sarbanes—Oxley requirements on independence. Explain your answer as necessary. 


a. 


f. 


Providing bookkeeping services to a public company. The services were preapproved 
by the audit committee of the company. 


. Providing internal audit services to a public company that is not an audit client. 


. Implementing a financial information system designed by management for a private 


company. 


. Recommending a tax shelter to a client that is publicly held. The services were pre- 


approved by the audit committee. 


: PARAGQnPDE scrh@A RANGE pany audit client with the preapproval 


of the audit committee. 
Providing bookkeeping services to an audit client that is a private company. 


4-21 (Objectives 4-6, 4-7) Each of the following situations involves a possible violation of 
the AICPA’s Code of Professional Conduct. For each situation, state the applicable section of 
the rules of conduct and whether it is a violation. 


a 


. Emrich, CPA, provides tax services, management advisory services, and bookkeeping 


services and conducts audits for the same nonpublic client. Because the firm is small, 
the same person often provides all the services. 


. Franz Marteens is a CPA, but not a partner, with 3 years of professional experience 


with Roberts and Batchelor, CPAs. He owns 25 shares of stock in an audit client of the 
firm, but he does not take part in the audit of the client, and the amount of stock is not 
material in relation to his total wealth. 


. A nonaudit client requests assistance of M. Wilkenson, CPA, in the installation of a 


local area network. Wilkenson had no experience in this type of work and no 
knowledge of the client’s computer system, so he obtained assistance from a computer 
consultant. The consultant is not in the practice of public accounting, but Wilkenson 
is confident of his professional skills. Because of the highly technical nature of the 
work, Wilkenson is not able to review the consultant’s work. 


. In preparing the personal tax returns for a client, Sarah Milsaps, CPA, observed that 


the deductions for contributions and interest were unusually large. When she asked 
the client for backup information to support the deductions, she was told, “Ask me no 
questions, and I will tell you no lies.” Milsaps completed the return on the basis of the 
information acquired from the client. 


. Roberta Hernandez, CPA, serves as controller of a U.S. based company that has a 


significant portion of its operations in several South American countries. Certain 
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government provisions in selected countries require the company to file financial 
statements based on international standards. Roberta oversees the issuance of the 
company’s financial statements and asserts that the statements are based on inter- 
national financial accounting standards; however the standards she uses are not those 
issued by the International Accounting Standards Board. 


f. Steve Custer, CPA, set up a casualty and fire insurance agency to complement his 
auditing and tax services. He does not use his own name on anything pertaining to the 
insurance agency and has a highly competent manager, Jack Long, who runs it. Custer 
often requests Long to review the adequacy of a client’s insurance with management if 
it seems underinsured. He believes that he provides a valuable service to clients by 
informing them when they are underinsured. 


g. Seven small Seattle CPA firms have become involved in an information project by 
taking part in an interfirm working paper review program. Under the program, each 
firm designates two partners to review the audit files, including the tax returns and the 
financial statements of another CPA firm taking part in the program. At the end of 
each review, the auditors who prepared the working papers and the reviewers have a 
conference to discuss the strengths and weaknesses of the audit. They do not obtain 
authorization from the audit client before the review takes place. 


h. Archer Ressner, CPA, stayed longer than he should have at the annual Christmas party 
of Ressner and Associates, CPAs. On his way home he drove through a red light and was 
stopped by a police officer, who observed that he was intoxicated. In a jury trial, Ressner 
was found guilty of driving under the influence of alcohol. Because this was not his first 
offense, he was sentenced to 30 days in jail and his driver’s license was revoked for 1 year. 


4-22 (Objectives 4-6, 4-7) Each of the following situations involves possible violations of 
the AICPA’s Code of Professional Conduct. For each situation, state whether it is a violation 
of the Code. In those cases in which it is a violation, explain the nature of the violation and 
the rationale for the existing rule. 


a. The audit firm of Miller and Yang: qo PDEs Einh ancer firms 


across the country to enhance the types OT professional services the firm can provide. 
Miller and Yancy share resources with other firms in the association, including audit 
methodologies and audit manuals, and common IT systems for billing and time 
reporting. One of the partners in Miller and Yancy has a direct financial interest in the 
audit client of another firm in the association. 


b. Bruce Sullivan, CPA, is the audit partner on the engagement of Xylium Corporation, 
which is a public company. In structuring the agreement with the audit committee for 
the audit of Xylium’s financial statements, Sullivan included a clause that limits the 
liability of Sullivan’s firm so that shareholders of Xylium are prohibited from suing 
Sullivan and the firm for performance issues related to the audit. 


c. Jennifer Crowe’s audit client has a material investment in Polex, Inc. Jennifer’s non- 
dependent parents also own shares in Polex and Polex is not an attest client of Jennifer’s 
firm. The amount of her parent’s ownership in Polex is not significant to Jennifer’s net 
worth. 


d. Joe Stokely is a former partner in Bass and Sims, CPAs. Recently, Joe left the firm to 
become the chief operating officer of Lacy Foods, Inc., which is an audit client of Bass 
and Sims. In his new role, Joe has no responsibilities for financial reporting. Bass and 
Sims made significant changes to the audit plan for the upcoming audit. 


e. Odonnel Incorporated has struggled financially and has been unable to pay the audit 
fee to its auditor, Seale and Seale, CPAs, for the 2009 and 2010 audits. Seale and Seale 
is currently planning the 2011 audit. 

f. Connor Bradley is the partner in charge of the audit of Southern Pinnacle Bank. 
Bradley is in the process of purchasing a beach condo and has obtained mortgage 
financing from Southern Pinnacle. 

g. Jessica Alma has been serving as the senior auditor on the audit of Carolina BioHealth, 
Inc. Because of her outstanding work, the head of internal audit at Carolina BioHealth 
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extended her an offer of employment to join the internal audit department as an audit 
manager. When the discussions with Carolina BioHealth began, Jessica informed her 
office’s managing partner and was removed from the audit engagement. 


. Lorraine Wilcox is a CPA and professor of accounting at a major state university. One 


of her former students recently sat for the Audit section of the CPA exam. One day, the 
student dropped by Lorraine’s office and told her about many of the questions and 
simulation content on the exam. Lorraine was grateful for the information, which will 
be helpful as she prepares the course syllabus for the next semester. 


. Audrey Glover is a financial analyst in the financial reporting department of 


Technologies International, a privately held corporation. Audrey was asked to prepare 
several journal entries for Technologies International related to transactions that have 
not yet occurred. The entries are reflected in financial statements that the company 
recently provided to the bank in connection with a loan outstanding due to the bank. 


Austin and Houston, CPAs, is performing consulting services to help management of 
McAlister Global Services streamline its production operations. Austin and Houston 
structured the fee for this engagement to be a fixed percentage of costs savings that 
result once the new processes are implemented. Austin and Houston perform no other 
services for McAlister Global. 


4-23 (Objective 4-5) The national stock exchanges require listed companies to have an 
independent audit committee. 


Required a 
b. 
Cc. 
d. 


Describe an audit committee. 
What are the typical functions performed by an audit committee? 
Explain how an audit committee can help an auditor be more independent. 


Describe the nature of the audit firm’s communications with the audit committee 
regarding independence issues. 


. Some critics of audit committees believe that they bias companies in favor of larger 


‘Apago PDP" Enhan geritics contend that a primary concern 
Co) it Tommittee members 1s to reduce their exposure to legal liability. The 


committees will therefore recommend larger, more prestigious CPA firms, even if the 
cost is somewhat higher, to minimize the potential criticism of selecting an unquali- 
fied firm. Evaluate these comments. 


4-24 (Objectives 4-5, 4-6) The following relate to auditors’ independence: 


Required a. 
b. 


C 
d. 


Why is independence so essential for auditors? 


Compare the importance of independence of CPAs with that of other professionals, 
such as attorneys. 


Explain the difference between independence in appearance and of mind. 


Assume that a partner of a CPA firm owns two shares of stock of a large audit client on 

which he serves as the engagement partner. The ownership is an insignificant part of 

his total wealth. 

(1) Has he violated the Code of Professional Conduct? 

(2) Explain whether the ownership is likely to affect the partner’s independence of 
mind. 

(3) Explain the reason for the strict requirements about stock ownership in the rules 
of conduct. 


. Discuss how each of the following could affect independence of mind and inde- 


pendence in appearance, and evaluate the social consequence of prohibiting auditors 

from doing each one: 

(1) Owning stock in a client company 

(2) Having bookkeeping services for an audit client performed by the same person 
who does the audit 

(3) Having the annual audit performed by the same audit team, except for assistants, 
for 5 years in a row 

(4) Having the annual audit performed by the same CPA firm for 10 years in a row 
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(5) Having management select the CPA firm 

(6) Recommending adjusting entries to the client’s financial statements and 
preparing financial statements, including footnotes, for the client 

(7) Having management services for an audit client performed by individuals in a 
department that is separate from the audit department 


f. Which of (1) through (7) are prohibited by the AICPA Code of Professional Conduct? 
Which are prohibited by the Sarbanes—Oxley Act or the SEC? 


4-25 (Objective 4-6) Marie Janes encounters the following situations in doing the audit of 
a large auto dealership. Janes is not a partner. 


1. The sales manager tells her that there is a sale (at a substantial discount) on new cars 
that is limited to long-established customers of the dealership. Because her firm has 
been doing the audit for several years, the sales manager has decided that Janes 
should also be eligible for the discount. 

2. The auto dealership has an executive lunchroom that is available free to employees 
above a certain level. The controller informs Janes that she can also eat there any time. 

3. Janes is invited to and attends the company’s annual Christmas party. When presents 
are handed out, she is surprised to find her name included. The present has a value 
of approximately $200. 


Use the three-step process in the AICPA’s independence conceptual framework to assess Required 
whether Janes’ independence has been impaired. 


a. Describe how each of the situations might threaten Janes’ independence from the auto 
dealership. 


b. Identify a safeguard that Janes’ firm could impose that would eliminate or mitigate the 
threat of each situation to Janes’ independence. 


c. Assuming no safeguards are in place and Janes accepts the offer or gift in each 
situation, discuss whether she has violated the rules of conduct. 


d. Discuss what Janes should do nApago” PDF Enhance r 


4-26 (Objective 4-6) Ann Archer serves on the audit committee of JKB Communications, 
Inc., a telecommunications start-up company. The company is currently a private company. 
One of the audit committee’s responsibilities is to evaluate the external auditor’s inde- 
pendence in performing the audit of the company’s financial statements. In conducting this 
year’s evaluation, Ann learned that JKB Communications’ external auditor also performed 
the following IT and e-commerce services for the company: 


1. Installed JKB Communications’ information system hardware and software selected 
by JKB management. 

2. Supervised JKB Communications’ personnel in the daily operation of the newly 
installed information system. 

3. Customized a prepackaged payroll software application, based on options and speci- 
fications selected by management. 

4. Trained JKB Communications’ employees on the use of the newly installed informa- 
tion system. 

5. Determined which JKB Communications’ products would be offered for sale on the 
company’s Internet Web site. 

6. Operated JKB Communications’ local area network for several months while the 
company searched for a replacement after the previous network manager left the 
company. 

Consider each of the preceding services separately. Evaluate whether the performance of Required 
each service violates the AICPA’s Code of Professional Conduct. 


4-27 (Objectives 4-6, 4-7) The following are situations that may violate the Code of 
Professional Conduct. Assume, in each case, that the CPA is a partner. 
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. Contel, CPA, advertises in the local paper that his firm does the audit of 14 of the 36 
largest community banks in the state. The advertisement also states that the average 
audit fee, as a percentage of total assets for the banks he audits, is lower than any 
other CPA firm’s in the state. 

2. Davis, CPA, sets up a small loan company specializing in loans to business executives 

and small companies. Davis does not spend much time in the business because he 

spends full time with his CPA practice. No employees of Davis’s CPA firm are 
involved in the small loan company. 

Elbert, CPA, owns a material amount of stock in a mutual fund investment company, 

which in turn owns stock in Elbert’s largest audit client. Reading the investment 

company’s most recent financial report, Elbert is surprised to learn that the 
company’s ownership in his client has increased dramatically. 

4, Able, CPA, owns a substantial limited partnership interest in an apartment building. 

Frederick Marshall is a 100% owner in Marshall Marine Co. Marshall also owns a 

substantial interest in the same limited partnership as Able. Able does the audit of 

Marshall Marine Co. 

Baker, CPA, approaches a new audit client and tells the president that he has an idea 

that could result in a substantial tax refund in the prior year’s tax return by appli- 

cation of a technical provision in the tax law that the client had overlooked. Baker 
adds that the fee will be 50% of the tax refund after it has been resolved by the 

Internal Revenue Service. The client agrees to the proposal. 

6. Finigan, CPA, does the audit, tax return, bookkeeping, and management services work 

for Gilligan Construction Company. Mildred Gilligan follows the practice of calling 

Finigan before she makes any major business decision to determine the effect on her 

company’s taxes and the financial statements. Finigan attends continuing education 

courses in the construction industry to make sure that she is technically competent 
and knowledgeable about the industry. Finigan normally attends board of directors 
meetings and accompanies Gilligan when she is seeking loans. Mildred Gilligan often 


Bi j age Por “EH t mee , I have my three business partners— 

mypbanker, the government, and my > buf Finny’s the only one that is on my side.” 
Discuss whether the facts in any of the situations indicate violations of the Code of 
Professional Conduct. If so, identify the nature of the violation(s). 


a 


L 


4-28 (Objectives 4-2, 4-7) Barbara Whitley had great expectations about her future as she 
sat in her graduation ceremony in May 2010. She was about to receive her Master of 
Accountancy degree, and next week she would begin her career on the audit staff of Green, 
Thresher & Co., CPAs. 

Things looked a little different to Barbara in February 2011. She was working on the audit 
of Delancey Fabrics, a textile manufacturer with a calendar year-end. The pressure was 
enormous. Everyone on the audit team was putting in 70-hour weeks, and it still looked as if 
the audit wouldn’t be done on time. Barbara was doing work in the property area, vouching 
additions for the year. The audit program indicated that a sample of all items over $20,000 
should be selected, plus a judgmental sample of smaller items. When Barbara went to take 
the sample, Jack Bean, the senior, had left the client’s office and couldn’t answer her 
questions about the appropriate size of the judgmental sample. Barbara forged ahead with 
her own judgment and selected 50 smaller items. Her basis for doing this was that there were 
about 250 such items, so 50 was a reasonably good proportion of such additions. 

Barbara audited the additions with the following results: The items over $20,000 contained 
no misstatements; however, the 50 small items contained a large number of misstatements. In 
fact, when Barbara projected them to all such additions, the amount seemed quite significant. 

A couple of days later, Jack Bean returned to the client’s office. Barbara brought her work 
to Jack in order to apprise him of the problems she found and got the following response: 


“Gosh, Barbara, why did you do this? You were only supposed to look at the items over 
$20,000 plus 5 or 10 little ones. You’ve wasted a whole day on that work, and we can’t 
afford to spend any more time on it. I want you to throw away the schedules where you 
tested the last 40 small items and forget you ever did them.” 
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When Barbara asked about the possible audit adjustment regarding the small items, 
none of which arose from the first 10 items, Jack responded, “Don’t worry, it’s not material 
anyway. You just forget it; it’s my concern, not yours.” 


a. In what way is this an ethical dilemma for Barbara? 
b. Use the six-step approach discussed in the book to resolve the ethical dilemma. 


4-29 (Objectives 4-1, 4-2, 4-3) In 2006, Arnold Diaz was a bright, upcoming audit manager 
in the South Florida office of a national public accounting firm. He was an excellent 
technician and a good “people person.” Arnold also was able to bring new business into the 
firm as the result of his contacts in the rapidly growing Hispanic business community. 

Arnold was assigned a new client in 2007, XYZ Securities, Inc., a privately held 
broker-dealer in the secondary market for U.S. government securities. Neither Arnold nor 
anyone else in the South Florida office had broker-dealer audit experience. However, the 
AICPA and Arnold’s firm had audit aids for the industry, which Arnold used to get started. 

Arnold was promoted to partner in 2007. Although this was a great step forward for him 
(he was a new staff assistant in 1998), Arnold was also under a great deal of pressure. Upon 
making partner, he was required to contribute capital to the firm. He also thought he must 
maintain a special image with his firm, with his clients, and within the Hispanic community. 
To accomplish this, Arnold maintained an impressive wardrobe, bought a BMW and a 
small speedboat, and traded up to a nicer house. He also entertained freely. Arnold financed 
much of this higher living with credit cards. He had six American Express and banking 
cards and ran up a balance of about $40,000. 

After the audit was completed and before the 2008 audit was to begin, Arnold contacted 
Jack Oakes, the CFO of XYZ Securities, with a question. Arnold had noticed an anomaly in 
the financial statements that he couldn’t understand and asked Oakes for an explanation. 
Oakes’s reply was as follows: 


“Arnold, the 2007 financial statements were materially misstated and you guys just 
blew it. I thought you might realize this and call me, so here’s my advice to you. Keep 
your mouth shut. We'll make up Pp eve Piastireey Ai obody 
will ever know the difference. If yo 7A gS whistle on us, your ar wil know you 
screwed up, and your career as the star in the office will be down the tubes.” 


Arnold said he’d think about this and get back to Oakes the next day. When Arnold 
called Oakes, he had decided to go along with him. After all, it would only be a “shift” of a 
loss between two adjacent years. XYZ is a private company and no one would be hurt or 
know the difference. In reality, only he was the person exposed to any harm in this 
situation, and he had to protect himself, didn’t he? 

When Arnold went to XYZ to plan for the 2008 audit, he asked Oakes how things were 
going, and Oakes assured him they were fine. He then said to Oakes, 


“Jack, you guys are in the money business, maybe you can give me some advice. I’ve 
run up some debts and I need to refinance them. How should I go about it?” 


After some discussions, Oakes volunteered a “plan.” Oakes would give Arnold a check for 
$15,000. XYZ would request its bank to put $60,000 in an account in Arnold’s name and 
guarantee the loan security on it. Arnold would pay back the $15,000 and have $45,000 of 
refinancing. Arnold thought the plan was great and obtained Oakes’s check for $15,000. 

During 2008 through 2010, three things happened. First, Arnold incurred more debts and 
went back to the well at XYZ. By the end of 2010, he had “borrowed” a total of $125,000. Second, 
the company continued to lose money in various “off-the-books” investment schemes. These 
losses were covered up by falsifying the results of normal operations. Third, the audit team, 
under Arnold’s leadership, “failed to find” the fraud and issued unqualified opinions. 

In 2009, Oakes had a tax audit of his personal 2008 return. He asked Arnold’s firm to 
handle it, and the job was assigned to Bob Smith, a tax manager. In reviewing Oakes’s 
records, Smith found a $15,000 check payable from Oakes to Diaz. Smith asked to see Diaz 
and inquired about the check. Arnold somewhat broke down and confided in Smith about 
his problems. Smith responded by saying, 


“Don't worry Arnold, I understand. And believe me, I'll never tell a soul.” 
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In 2010, XYZ’s continuing losses caused it to be unable to deliver nonexistent securities 
when requested by a customer. This led to an investigation and bankruptcy by XYZ. Losses 
totaled in the millions. Arnold’s firm was held liable, and Arnold was found guilty of 
conspiracy to defraud. He is still in prison today. 


a. Try to put yourself in Arnold’s shoes. What would you have done (be honest with 
yourself now) when told of the material misstatement in mid-2008? 


b. What do you think of Bob Smith’s actions to help Arnold? 
c. Where does one draw the line between ethical and unethical behavior? 


4-30 (Objective 4-2) Frank Dorrance, a senior audit manager for Bright and Lorren, CPAs, has 
recently been informed that the firm plans to promote him to partner within the next year 
or two if he continues to perform at the same high-quality level as in the past. Frank excels 
at dealing effectively with all people, including client personnel, professional staff, partners, 
and potential clients. He has recently built a bigger home for entertaining and has joined 
the city’s most prestigious golf and tennis club. He is excited about his future with the firm. 

Frank has recently been assigned to the audit of Machine International, a large wholesale 
company that ships goods throughout the world. It is one of Bright and Lorren’s most 
prestigious clients. During the audit, Frank determines that Machine International uses a 
method of revenue recognition called “bill and hold” that has been questioned by the SEC. 
After considerable research, Frank concludes that the method of revenue recognition is not 
appropriate for Machine International. He discusses the matter with the engagement 
partner, who concludes that the accounting method has been used for more than 10 years 
by the client and is appropriate, especially considering that the client does not file with the 
SEC. The partner is certain the firm would lose the client if the revenue recognition 
method is found inappropriate. Frank argues that the revenue recognition method was 
appropriate in prior years, but the SEC ruling makes it inappropriate in the current year. 
Frank recognizes the partner’s responsibility to make the final decision, but he feels 
strongly enough to state that he plans to follow the requirements of auditing standards (AU 
3ll)a pago'PDF in Riga htiath ches Fe disagrees with the partner’s decision. 
The partffer informs Frank that she is unwilling to permit such a statement because of the 
potential legal implications. However, she is willing to write a letter to Frank stating that 
she takes full responsibility for making the final decision if a legal dispute ever arises. She 
concludes by saying, “Frank, partners must act like partners, not like loose cannons trying 
to make life difficult for their partners. You have some growing up to do before I would feel 
comfortable with you as a partner.” 


Use the six-step approach discussed in the book to resolve the ethical dilemma. 


INTERNET PROBLEM 4-1: IESBA CODE OF ETHICS 


Required 


The International Ethics Standards Board for Accountants (IESBA) Handbook of the Code 
of Ethics for Professional Accountants is available for free download from the IFAC website 
(www.ifac.org). Similarly, the AICPA’s Code of Professional Conduct is searchable at the 
AICPA’s website (www.aicpa.org). 

a. Locate both the IESBA Code and the AICPA Code on the respective websites. 

b. Compare the six Principles in the AICPA Code with the five Fundamental Principles in 
the IESBA Code. Evaluate where there are similarities and differences in concepts 
across the principles. 

c. One of the Principles in the AICPA Code is “public interest.” Describe how the IESBA 
Code addresses the concept of “public interest.” 

d. Compare the organizational structure of the AICPA Code with the IESBA Code. 


e. Identify where in the IESBA Code issues related to independence are addressed. 
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LEGAL LIABILITY 


It Takes The Net Profit From Many Audits 
To Offset The Cost Of One Lawsuit 


Orange & Rankle, a CPA firm in San Jose, audited a small high-tech client 
that developed software. A significant portion of the client's capital was 
provided by a syndicate of 40 limited partners. The owners of these interests, 
including several lawyers, were knowledgeable business and professional 
people. 


Orange & Rankle audited the company for 4 consecutive years, from its 
inception, for an average annual fee of approximately $66,000. The audits 
were well done by competent auditors. It was clear to the firm and to 
others who subsequently reviewed the audits that they complied with 
auditing standards in every way. 


In the middle of the fifth year of the company’s existence, it became 
apparent that the marketing plan it had developed was overly optimistic 
and the company was going to require additional capital or a significant 
strategy change. The limited partners were polled and refused to provide 
the capital. The company folded its tent and filed bankruptcy. The limited 


partners lost their investment in the company. Th spc ohar a 
lawsuit against all parties involved iAPAGRscED in ancer 


Over the next several years, the auditors proceeded through the process 
of preparing to defend themselves in the lawsuit. They went through 
complete discovery, hired an expert witness on auditing-related issues, 
filed motions, and so forth. They attempted a settlement at various times, 
but the plaintiffs would not agree to a reasonable amount. Finally, during 
the second day of trial, the plaintiffs settled for a nominal amount. 


It was clear that the plaintiffs knew the auditors bore no fault but kept 


LEARNING OBJECTIVES 


After studying this chapter, 
you should be able to 





rc 


5-1 


5-6 


Understand the litigious 
environment in which CPAs 
practice. 


Explain why the failure of 
financial statement users to 
differentiate among business 
failure, audit failure, and audit 
risk has resulted in lawsuits. 


Use the primary legal concepts 
and terms concerning 
accountants’ liability as a basis for 
studying legal liability of auditors. 


Describe accountants’ liability to 
clients and related defenses. 


Describe accountants’ liability to 
third parties under common law 
and related defenses. 


Describe accountants’ civil liability 
under the federal securities laws 
and related defenses. 


Specify what constitutes criminal 
liability for accountants. 


Describe how the profession and 
individual CPAs can reduce the 
threat of litigation. 








them in the suit anyway. The total out-of-pocket cost to the audit firm was $5 million, not to mention personnel time, 
possible damage to their reputation, and general stress and strain. Thus, the cost of this suit, in which the auditors 
were completely innocent, was more than 75 times the average annual audit fee earned from this client. 


s the auditors at Orange & Rankle learned the hard way, legal liability and its consequences are significant. 

Although firms have insurance to help alleviate the impact of assessed damages, the premiums are high and the 
policies available to the firms require large deductibles. The amount of these deductibles is such that large firms are 
essentially self-insured for losses of many millions of dollars. 

This chapter on legal liability and the preceding one on professional ethics highlight the environment in which 
CPAs operate. These chapters provide an overview of the importance of protecting the profession’s reputation of high 
ethical standards, highlight consequences accountants face when others believe they have failed to live up to those 
standards, and show how CPAs can be held legally liable for the professional services they provide. 

In this chapter we focus on legal liability for CPAs both on a conceptual level and in terms of specific legal suits 
that have been filed against CPAs. We also discuss actions available to the profession and individual practitioners to 
minimize liability while, at the same time, maintaining high ethical and professional standards and meeting the 
needs of society. 


CHANGED LEGAL ENVIRONMENT 


Professionals have always been required to provide a reasonable level of care while 
performing work for those they serve. Under common law, audit professionals have a 
responsibility to fulfill implied or expressed contracts with clients. Should auditors fail 





Understand the litigious 
environment in which CPAs ” ; : : ‘ : 
practice. to provide the services or not exercise due care in their performance, they are liable to 





their clients for negligence and/or breach of contract, and, in certain circumstances, to 
parties other than their clients. 

Although the criteria for legal actions against auditors by third parties vary by state, 
the auditor generally owes a duty of care to third parties who are part of a limited group 
of persons whose reliance is “foreseen” by the auditor. In addition to common law 
liability, auditors may be held liable to third parties under statutory law. The Securities 
Act of 1933, the Securities Exchange Act of 1934, and the Sarbanes—Oxley Act contain 
provisf\ys & veRBD Rss heasztwmesyinst auditors. In rare cases, auditors 
have even beet held liable for criminal acts. A criminal conviction against an auditor can 
result when plaintiffs demonstrate that the auditor intended to deceive or harm others. 

Despite efforts by the profession to address legal liability of CPAs, both the number 
of lawsuits and sizes of awards to plaintiffs remain high, including suits involving third 
parties under both common law and the federal securities acts. No simple reasons 
explain this trend, but the following factors are major contributors: 


* Growing awareness of the responsibilities of public accountants by users of 
financial statements 

* An increased consciousness on the part of the Securities and Exchange Commis- 
sion (SEC) for its responsibility for protecting investors’ interests 

* The complexity of auditing and accounting functions caused by the increasing 
size of businesses, the globalization of business, and the complexities of business 
operations 

* The tendency of society to accept lawsuits by injured parties against anyone who 
might be able to provide compensation, regardless of who was at fault, coupled 
with the joint and several liability doctrine (often called the deep-pocket concept 
of liability) 

» Large civil court judgments against CPA firms awarded in a few cases, en- 
couraging attorneys to provide legal services on a contingent-fee basis, which 
offers the injured party a potential gain when the suit is successful, but minimal 
losses when it is not 

* Many CPA firms being willing to settle legal problems out of court in an attempt 
to avoid costly legal fees and adverse publicity, rather than pursuing resolution 
through the judicial process 

* The difficulty judges and jurors have understanding and interpreting technical 
accounting and auditing matters 


114 Part 1 / THE AUDITING PROFESSION 





SpA, a small member firm of Grant Thornton 
International, was the accounting firm most 
directly associated with the accounting scandal. 
The Italian member firm of Deloitte International 
was also involved in the audit of Parmalat. 
Following disclosure of the fraud and alleged 
audit deficiencies, Grant Thornton International 


INTERNATIONAL __ Inthe wake of a major accounting fraud in 2003 The legal concept that makes one party 
that exceeded $9 billion at Italian dairy giant potentially responsible for the conduct of another 
AFFILIATIONS Parmalat, CPA firms are reviewing the structure of is known as “vicarious liability.” In response, both 
BRING LEGAL __ their international affiliations to protect themselves the International Federation of Accountants (IFAC) 
from legal exposure for the actions of their and AICPA have taken actions to more clearly set 
EXPOSURE international affiliates. Italy’s Grant Thornton out to define a “network” compared to an 


“association” as it relates to accounting firms. 

An association ensures strict independence 
among the member firms, and does not have a 
common naming structure or operating manuals. 
In contrast, a network structure includes common 
ownership or control, and does allow for common 
naming and operating procedures. 


expelled its Italian affiliate. Grant Thornton also 
declared that the fraud occurred only within the 
Italian affiliate, and that it should not be legally 
liable for Grant Thornton SpA’s actions. However, 
Grant Thornton and Deloitte International, as well 
as their U.S. member firms, were forced to defend 
themselves in lawsuits related to Parmalat. 


Sources: Adapted from 1. Kevin Mead, “Find the 
Membership Group that's Right for Your Firm,” 
Accounting Today (July 21, 2008) (www.webcpa.com); 
2. Richard |. Miller, “Liability for Someone Else’s Sins: 
The Risks of Accounting Firm Alliances,” Journal of 
Accountancy (December 2006) pp. 30-32. 








Litigation costs for accountants are a concern because they are borne by all members 
of society. In recent years, legislative efforts have attempted to control litigation costs by 
discouraging nonmeritorious lawsuits and by bringing damages more in line with 
relative fault. Nevertheless, accountants’ liability remains burdensome and is a major 
consideration in the conduct of a CPA firm’s professional practice. 


DISTINGUISHING BUSINESS FAILURE, AUDIT FAILURE, AND AUDIT RISK 


Many accounting and legal professionals believe that a major cause of lawsuits against 


CPA firms is financial statement users’ lack of understanding of two concepts: empainnnie cilreer 
1. The difference between a business failure and an audit failure financial statement users to 


2. The difference between an audit failure and audit risk 


differentiate among business 
failure, audit failure, and audit 
risk has resulted in lawsuits. 





A business failure occurs when a business is unable to repay its lenders or meet the 
expectations of its investors because of economic or business conditions, such as a 
recession, poor management decisions, or unexpected competition in the industry. 
Audit failure occurs when the auditor issues an incorrect audit opinion because it 
failed to comply with the requirements of auditing standards. An example is a firm 
assigning unqualified assistants to perform certain audit tasks where they failed to 
notice material misstatements in the client’s records that a qualified auditor would have 
found. Audit risk represents the possibility that the auditor concludes after conducting 
an adequate audit that the financial statements were fairly stated when, in fact, they 
were materially misstated. Audit risk is unavoidable, because auditors gather evidence 
only on a test basis and because well-concealed frauds are extremely difficult to detect. 
An auditor may fully comply with auditing standards and still fail to uncover a material 
misstatement due to fraud. 

Accounting professionals tend to agree that in most cases, when an audit has failed 
to uncover material misstatements and the wrong type of audit opinion is issued, it is 
appropriate to question whether the auditor exercised due care in performing the 
audit. In cases of audit failure, the law often allows parties who suffered losses to 
recover some or all of the losses caused by the audit failure. In practice, because of the 
complexity of auditing, it is difficult to determine when the auditor has failed to use 
due care. Also, legal precedent makes it difficult to determine who has the right to 
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expect the benefit of an audit and recover losses in the event of an audit failure. 
Nevertheless, an auditor’s failure to follow due care often results in liability and, when 
appropriate, damages against the CPA firm. 

As highlighted by the lawsuit against Orange & Rankle in the opening story, diffi- 
culties often arise when a business failure, not an audit failure, occurs. For example, 
when a company files for bankruptcy protection or cannot pay its debts, statement 
users commonly claim that an audit failure has occurred, especially when the most 
recently issued auditor’s report indicates that the financial statements were fairly 
stated. Even worse, if a business failure happens and the financial statements are later 
determined to have been misstated, users may claim the auditor was negligent even if 
the audit was conducted in accordance with auditing standards. This conflict between 
statement users and auditors often arises because of an “expectation gap” between 
users and auditors. Most auditors believe that the conduct of the audit in accordance 
with auditing standards is all that can be expected of auditors. However, many users 
believe that auditors guarantee the accuracy of financial statements, and some users 
even believe that the auditor guarantees the financial viability of the business. 
Fortunately for the profession, courts continue to support the auditor’s view. Nonethe- 
less, the expectation gap often results in unwarranted lawsuits. The profession must 
continue to educate statement users about the role of auditors and the differences 
between business failure, audit failure, and audit risk. However, auditors must recognize 
that, in part, the claims of audit failure result from the hope of those who suffer a 
business loss to recover from any source, regardless of who is at fault. 


LEGAL CONCEPTS AFFECTING LIABILITY 





Use the primary legal 
concepts and terms con- 
cerning accountants’ liability 
as a basis for studying legal 
liability of auditors. 





Prudent Person 
Concept 


Liability for the 
Acts of Others 


A CPA is responsible for every aspect of his or her public accounting work, including 
auditApag@urPpRnEnhancer and accounting and bookkeeping 
services. If a CPA failed to correctly prepare and file a client’s tax return, the CPA can be 
held liable for any penalties and interest that the client was required to pay plus the tax 
preparation fee charged. In some states, the court can also assess punitive damages. 

Most of the major lawsuits against CPA firms have dealt with audited or unaudited 
financial statements. The discussion in this chapter is restricted primarily to those two 
aspects of public accounting. First, we examine several legal concepts pertinent to 
lawsuits involving CPAs. 


There is agreement within the profession and the courts that the auditor is not a 
guarantor or insurer of financial statements. The auditor is expected only to conduct 
the audit with due care, and is not expected to be perfect. This standard of due care is 
often called the prudent person concept. It is expressed in Cooley on Torts as follows: 


* Every man who offers his service to another and is employed assumes the duty 
to exercise in the employment such skill as he possesses with reasonable care 
and diligence. In all these employments where peculiar skill is prerequisite, if 
one offers his service, he is understood as holding himself out to the public as 
possessing the degree of skill commonly possessed by others in the same employ- 
ment, and, if his pretensions are unfounded, he commits a species of fraud upon 
every man who employs him in reliance on his public profession. But no man, 
whether skilled or unskilled, undertakes that the task he assumes shall be 
performed successfully, and without fault or error. He undertakes for good faith 
and integrity, but not for infallibility, and he is liable to his employer for 
negligence, bad faith, or dishonesty, but not for losses consequent upon pure 
errors of judgment. 


Generally, the partners, or shareholders in the case of a professional corporation, are 
jointly liable for the civil actions against any owner. It is different, however, if the firm 
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operates as a limited liability partnership (LLP), a limited liability company (LLC), a 
general corporation, or a professional corporation with limited liability. Under these 
business structures, the liability for one owner’s actions does not extend to another owner’s 
personal assets, unless the other owner was directly involved in the actions of the owner 
causing the liability. Of course, the firm’s assets are all subject to the damages that arise. 

The partners may also be liable for the work of others on whom they rely under the 
laws of agency. The three groups an auditor is most likely to rely on are employees, other 
CPA firms engaged to do part of the work, and specialists called upon to provide 
technical information. If an employee performs improperly in doing an audit, the 
partners can be held liable for the employee’s performance. 


Under common law, CPAs do not have the right to withhold information from the 
courts on the grounds that the information is privileged. Confidential discussions 
between the client and auditor cannot be withheld from the courts. (See page 97 in 
Chapter 4 on how auditor’s documentation can be subpoenaed by a court.) 

Several states have statutes that permit privileged communication between the 
client and auditor. Even then, the intent at the time of the communication must have 
been for the communication to remain confidential. A CPA can refuse to testify in a 
state with privileged communications statutes. However, that privilege does not extend 
to federal courts. 


Before proceeding in the discussion of legal liability, we examine several common legal 
terms that affect CPAs’ liability. These terms are defined in Table 5-1. Take a moment to 
review these definitions. When the auditor has failed to conduct an adequate audit, 
liability may depend on the level of negligence, which can range from ordinary 
negligence to fraud. Also note the distinction between joint and several liability and 
separate and proportionate liability, because the amounts assessed will likely vary 
greatly between these two approaches when courts assess damages. Generally, these 
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Lack of Privileged 
Communication 


Legal Terms Affecting 
CPAs’ Liability 





[eal Legal Terms Affecting CPAs’ Liability 





Legal Term Description 





Terms Related to Negligence and Fraud 
Ordinary negligence 


Absence of reasonable care that can be expected of a person in a set of circumstances. For 


Gross negligence 


Constructive fraud 


Fraud 


auditors, it is in terms of what other competent auditors would have done in the same situation. 


Lack of even slight care, tantamount to reckless behavior, that can be expected of a person. Some 
states do not distinguish between ordinary and gross negligence. 


Existence of extreme or unusual negligence even though there was no intent to deceive or do 
harm. Constructive fraud is also termed recklessness. Recklessness in the case of an audit is 
present if the auditor knew an adequate audit was not done but still issued an opinion, even 
though there was no intention of deceiving statement users. 


Occurs when a misstatement is made and there is both the knowledge of its falsity and the intent 
to deceive. 





Terms Related to Contract Law 
Breach of contract 


Third-party beneficiary 





Failure of one or both parties in a contract to fulfill the requirements of the contract. An example 
is the failure of a CPA firm to deliver a tax return on the agreed-upon date. Parties who have a 
relationship that is established by a contract are said to have privity of contract. 

A third party who does not have privity of contract but is known to the contracting parties and is 
intended to have certain rights and benefits under the contract. A common example is a bank 
that has a large loan outstanding at the balance sheet date and requires an audit as a part of 
its loan agreement. 





(continued on following page) 
4 
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bei Legal Terms Affecting CPAs’ Liability (Cont) ) 





Legal Term 


Description 





Other Terms 
Common law 
Statutory law 


Joint and several liability 


Separate and proportionate liability 





Laws that have been developed through court decisions rather than through government statutes. 

Laws that have been passed by the U.S. Congress and other governmental units. The Securities 
Acts of 1933 and 1934 and Sarbanes-Oxley Act of 2002 are important statutory laws affecting 
auditors. 

The assessment against a defendant of the full loss suffered by a plaintiff, regardless of the extent 
to which other parties shared in the wrongdoing. For example, if management intentionally 
misstates financial statements, an auditor can be assessed the entire loss to shareholders if the 
company is bankrupt and management is unable to pay. 

The assessment against a defendant of that portion of the damage caused by the defendant's 
negligence. For example, if the courts determine that an auditor's negligence in conducting an 
audit was the cause of 30% of a loss to a defendant, only 30% of the aggregate damage will be 
assessed to the CPA firm. 








Sources of 
Legal Liability 


damage approaches only apply in cases of liability to third parties under common law 
and under the federal securities laws. When lawsuits are filed in state court, state laws 
determine which approach to damages applies. When lawsuits are brought under the 
federal securities laws, the separate and proportionate approach applies, except where 
it can be shown that the CPA defendant had actual knowledge of fraud or has 
participated in fraud, in which case joint and several liability applies. Under the federal 
statutes, the amount of damages under separate and proportionate liability can be 
increased to 150 percent of the amount determined to be proportionate to the CPA’s 
Jeera falgge BOP RHPA eel 

The remainder of this chapter addresses the four sources of auditor’s legal liability: 


1. Liability to clients 

2. Liability to third parties under common law 
3. Civil liability under the federal securities laws 
4, Criminal liability 


Figure 5-1 provides examples of each of these classifications of liability. Let’s examine 
each of these liability classifications in more detail. 


LIABILITY TO CLIENTS 


OBJECTIVE 5-4 





Describe accountants’ 
liability to clients and related 
defenses. 





The most common source of lawsuits against CPAs is from clients. The suits vary 
widely, including such claims as failure to complete a nonaudit engagement on the 
agreed-upon date, inappropriate withdrawal from an audit, failure to discover an 
embezzlement (theft of assets), and breach of the confidentiality requirements of 
CPAs. Typically, the amount of these lawsuits is relatively small, and they do not receive 
the publicity often given to suits involving third parties. 

A typical lawsuit brought by a client involves a claim that the auditor did not 
discover an employee theft as a result of negligence in the conduct of the audit. The 
lawsuit can be for breach of contract, a tort action for negligence, or both. Tort actions 
are more common because the amounts recoverable under them are normally larger 
than under breach of contract. Tort actions can be based on ordinary negligence, gross 
negligence, or fraud. Refer to Table 5-1 for distinctions among these three levels of 
negligent actions. 
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fener Four Major Sources of Auditors’ Legal Liability 





Source of Liability Example of Potential Claim 
Liability to Clients Client sues auditor for not discovering a material fraud during the audit. 


Liability to third parties under Bank sues auditor for not discovering that a borrower's financial statements are 
common law materially misstated. 


Civil liability under federal Combined group of stockholders sues auditor for not discovering materially misstated 
securities laws financial statements. 


Criminal liability Federal government prosecutes auditor for knowingly issuing an incorrect audit report. 











The principal issue in cases involving alleged negligence is usually the level of care 
required. Although it is generally agreed that no one is perfect, not even a professional, 
in most instances, any significant error or mistake in judgment creates at least a 
presumption of negligence that the professional will have to rebut. In audits, failure to 
meet auditing standards is often conclusive evidence of negligence. Let’s examine a 
typical case that raised the question of negligent performance by a CPA firm: Cenco 
Incorporated v. Seidman & Seidman. The case, which is described in more detail in 
Figure 5-2, involved alleged negligence by the auditor in failing to find fraud. In the 
legal suit by Cenco’s management, the auditor was able to successfully argue that it 
was not negligent and that the previous management team’s deceitful actions had 
prevented the auditor from uncovering the fraud. 

The question of level of care becomes more difficult in the environment of a review 
or a compilation of financial statements in which there are fewer accepted standards to 
evaluate performance. Figure 5-3 (p. 120) summarizes a widely known example of a 
lawsuit dealing with the failure to uncover fraud in unaudited financial statements. 
Although the CPA was never engZy ago’PDF Erh ance Fenants 
Corporation, the CPA was found liable for Tailing to detect an embezzlement scheme 
conducted by one of the client’s managers. One of the reasons for this outcome was the 
lack of a clear understanding between the client and the CPA as to the exact nature of 
the services to be performed by the CPA. As noted in Figure 5-3, engagement letters 
between the client and the CPA firm developed as a result of this case. Now, CPA firms 
and clients typically sign engagement letters, which are required for audits, to formalize 
their agreements about the services to be provided, fees, and timing. Privity of contract 





Cenco Incorporated v. Seidman & Seidman (1982) — Liability to 
Clients 





Between 1970 and 1975 Cencos managerial employees, ultimately including top management, 
were involved in a massive fraud to inflate the value of the company’s inventory. This in turn 
enabled the company to borrow money at a lower interest rate and to obtain higher fire insurance 
settlements than were proper. After the fraud was discovered by an employee of Cenco and 
reported to the SEC, a class action suit was filed by stockholders against Cenco, its management, 
and its auditors. The CPA firm settled out of court on the class action suit by paying $3.5 million. 

By now, new management was operating Cenco. They brought a second suit against the CPA 
firm on behalf of Cenco for breach of contract, professional negligence, and fraud. The primary 
defense used by the CPA firm was that a diligent attempt was made on the part of the auditors to 
follow up any indications of fraud, but the combined efforts of a large number of Cenco’s manage- 
ment prevented them from uncovering the fraud. The CPA firm argued that the wrongdoings of 
management were a valid defense against the charges. 

The Seventh Circuit Court of Appeals concluded that the CPA firm was not responsible in this 
case. The wrongdoings of Cenco’s management were considered an appropriate defense against 
the charges of breach of contract, negligence, and fraud, even though the management no longer 
worked for the company. Considering management's involvement, the CPA firm was not deemed 
negligent. 
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Auditor's Defenses 
Against Client Suits 





1136 Tenants v. Max Rothenberg and Company (1967) — ) 
Liability to Clients 


The 1136 Tenants case was a civil case concerning a CPA's failure to uncover fraud as a part of 
unaudited financial statements. The tenants recovered approximately $235,000. 

A CPA firm was engaged by a real estate management agent for $600 per year to prepare 
financial statements, a tax return, and a schedule showing the apportionment of real estate 
taxes for the 1136 Tenants Corporation, a cooperative apartment house. The statements were 
sent periodically to the tenants. The statements included the words unaudited, and there was a 
cover letter stating that “the statement was prepared from the books and records of the 
cooperative and no independent verifications were taken thereon.” 

During the period of the engagement, from 1963 to 1965, the manager of the management 
firm embezzled significant funds from the tenants of the cooperative. The tenants sued the CPA 
firm for negligence and breach of contract for failure to find the fraud. 

There were two central issues in the case. Was the CPA firm engaged to do an audit instead 
of only accounting, and was there negligence on the part of the CPA firm? The court answered 
yes on both counts. The reasoning for the court’s conclusion that an audit had taken place was 
the performance of “some audit procedures” by the CPA firm, including the preparation of a 
worksheet entitled “missing invoices.” Had the CPA followed up on these, the fraud would likely 
have been uncovered. Most important, the court concluded that even if the engagement had 
not been considered an audit, the CPA had a duty to follow up on any potential significant 
exceptions uncovered during an engagement. 

Two developments resulted from the 1736 Tenants case and similar lawsuits concerning 
unaudited financial statements: 





* Engagement letters between the CPA and client were strongly recommended for all engage- 
ments, but especially for unaudited engagements. The letter should clearly define the intent 
of the engagement, the CPA's responsibilities, and any restrictions imposed on the CPA. 

* The Accounting and Review Services Committee was formed as a major committee of the 
AICPA to set forth guidelines for unaudited financial statements of nonpublic companies. 











(see breach of contract OF en ) can exist without a written agreement, but an 
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The CPA firm normally uses one or a combination of four defenses when there are legal 
claims by clients: lack of duty to perform the service, nonnegligent performance, 
contributory negligence, and absence of causal connection. 


Lack of Duty The lack of duty to perform the service means that the CPA firm claims 
that there was no implied or expressed contract. For example, the CPA firm might claim 
that misstatements were not uncovered because the firm did a review service, not an 
audit. The CPA’s use of an engagement letter provides a basis to demonstrate a lack of 
duty to perform. Many litigation experts believe that a well-written engagement letter 
significantly reduces the likelihood of adverse legal actions. 


Nonnegligent Performance For nonnegligent performance in an audit, the CPA 
firm claims that the audit was performed in accordance with auditing standards. Even if 
there were undiscovered misstatements, the auditor is not responsible if the audit was 
conducted properly. The prudent person concept (discussed on page 116) establishes in 
law that the CPA firm is not expected to be infallible. Similarly, auditing standards make 
it clear that an audit is subject to limitations and cannot be relied on for complete 
assurance that all misstatements will be found. Requiring auditors to discover all 
material misstatements would, in essence, make them insurers or guarantors of the 
accuracy of the financial statements. The courts do not require that. 


Contributory Negligence A defense of contributory negligence exists when 
the auditor claims the client’s own actions either resulted in the loss that is the basis for 
damages or interfered with the conduct of the audit in such a way that prevented the 
auditor from discovering the cause of the loss. Suppose a client claims that a CPA firm 
was negligent in not uncovering an employee’s theft of cash. If the CPA firm had 
notified the client (preferably in writing) of a deficiency in internal control that would 
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have prevented the theft but management did not correct it, the CPA firm would have 
a defense of contributory negligence. Or, suppose a CPA firm failed to determine that 
certain accounts receivable were uncollectible and, in reviewing collectibility, the 
auditors were lied to and given false documents by the credit manager. In this 
circumstance, assuming the audit of accounts receivable was done in accordance with 
auditing standards, the auditor can claim a defense of contributory negligence. 


Absence of Causal Connection To succeed in an action against the auditor, the 
client must be able to show that there is a close causal connection between the auditor’s 
failure to follow auditing standards and the damages suffered by the client. Assume that 
an auditor failed to complete an audit on the agreed-upon date. The client alleges that 
this caused a bank not to renew an outstanding loan, which caused damages. A 
potential auditor defense is that the bank refused to renew the loan for other reasons, 
such as the weakening financial condition of the client. This defense is called an 
absence of causal connection. 


LIABILITY TO THIRD PARTIES UNDER COMMON LAW 


In addition to being sued by clients, CPAs may be liable to third parties under common 
law. Third parties include actual and potential stockholders, vendors, bankers and 





Describe accountants’ 


other creditors, employees, and customers. A CPA firm may be liable to third parties if | |jability to third parties 
a loss was incurred by the claimant due to reliance on misleading financial statements. under common law and 
A typical suit occurs when a bank is unable to collect a major loan from an insolvent related defenses. 





customer and the bank then claims that misleading audited financial statements were 
relied on in making the loan and that the CPA firm should be held responsible because 
it failed to perform the audit with due care. 
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The leading precedent-setting auditifig caSe in third-party liability was Ultramares Ultramares Doctrine 
Corporation v. Touche (1931), which established the Ultramares doctrine. Take a 
moment to read the summary of the case in Figure 5-4. 

In this case, the court held that although the accountants were negligent, they were 
not liable to the creditors because the creditors were not a primary beneficiary. In this 
context, a primary beneficiary is one about whom the auditor was informed before con- 
ducting the audit (a known third party). This case established a precedent, commonly 
called the Ultramares doctrine, that ordinary negligence is insufficient for liability to 
third parties because of the lack of privity of contract between the third party and the 
auditor, unless the third party is a primary beneficiary. However, in a subsequent trial of 
the Ultramares case, the court pointed out that had there been fraud or gross negli- 
gence on the part of the auditor, the auditor could be held liable to third parties who 
are not primary beneficiaries. 


Ultramares Corporation v. Touche (1931) — Liability to ) 
Third Parties 


The creditors of an insolvent corporation (Ultramares) relied on the audited financials and subse- 
quently sued the accountants, alleging that they were guilty of negligence and fraudulent misrep- 
resentation. The accounts receivable had been falsified by adding to approximately $650,000 in 
accounts receivable another item of over $700,000. The creditors alleged that careful investigation 
would have shown the $700,000 to be fraudulent. The accounts payable contained similar 
discrepancies. 

The court held that the accountants had been negligent but ruled that accountants would 
not be liable to third parties for honest blunders beyond the bounds of the original contract unless 
they were primary beneficiaries. The court held that only one who enters into a contract with an 
accountant for services can sue if those services are rendered negligently. 

EE — 
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Foreseen Users 





In recent years, courts have broadened the Ultramares doctrine to allow recovery by 
third parties in more circumstances by introducing the concept of foreseen users, who 
are members of a limited class of users that the auditor knows will rely on the financial 
statements. For example, a bank that has loans outstanding to a client at the balance 
sheet date may be a foreseen user. Under this concept, a foreseen user is treated the 
same as a known third party. 

Although the concept of foreseen users may appear straightforward, courts have 
generated several different interpretations. At present, the three leading approaches 
taken by the courts that have emerged are described as follows: 


Credit Alliance In Credit Alliance v. Arthur Andersen & Co. (1986) in New York, a 
lender brought suit against the auditor of one of its borrowers, claiming that it relied 
on the financial statements of the borrower, who was in default, in granting the loan. 
The New York State Court of Appeals upheld the basic concept of privity established by 
Ultramares and stated that to be liable (1) an auditor must know and intend that the 
work product would be used by the third party for a specific purpose, and (2) the 
knowledge and intent must be evidenced by the auditor’s conduct. 


Restatement of Torts The approach followed by most states is to apply the rule 
cited in the Restatement of Torts, an authoritative set of legal principles. The 
Restatement Rule is that foreseen users must be members of a reasonably limited and 
identifiable group of users that have relied on the CPA’s work, such as creditors, even 
though those persons were not specifically known to the CPA at the time the work was 
done. A leading case supporting the application of this rule is Rusch Factors v. Levin, as 
presented in Figure 5-5. 


Foreseeable User The broadest interpretation of the rights of third-party bene- 
ficiaries is to use the concept of foreseeable users. Under this concept, any users that 
the auditor should have reasonably been able to foresee as likely users of the client’s 
finan EGO": PDE sinhancerwith privity of contract. These users 
are often called an unlimited class. Although a significant number of states followed 
this approach in the past, it is now used in only two states. 


Table 5-2 summarizes the three approaches to third party liability taken by the 
courts under common law. There is confusion caused by these differing views of 
liability to third parties under common law, but the movement is clearly away from 
the foreseeable user approach, and thus toward the first two approaches. For 
example, in Bily v. Arthur Young (1992), the California Supreme Court reversed a 
lower court decision against Arthur Young, clearly upholding the Restatement 
doctrine. In its decision, the court stated that “an auditor owes no general duty of 
care regarding the conduct of an audit to persons other than the client” and reasoned 
that the potential liability to auditors under the foreseeable user doctrine would be 
distinctly out of proportion to any fault. 


Rusch Factors v. Levin (1968) — Liability to Third Parties 


The plaintiff, Rusch Factors, a lender, asked the defendant auditor to audit the financial statements 
of a company seeking a loan. The auditor, Levin, issued an unqualified opinion on the financial 
statements, indicating that the company was solvent when, in fact, it was insolvent. The plaintiff 
loaned the company money, suffered a subsequent loss, and sued the auditor for recovery. 

The auditor's defense in the case was based on the absence of privity on the part of 
Rusch Factors. The court found in favor of this plaintiff. Although the court could have found in 
favor of Rusch Factors under U/tramares in that it was a primary beneficiary, it chose to rely on 
the Restatement of Torts, stating that the auditor should be liable for ordinary negligence in 
audits where the financial statements are relied on by actually foreseen and limited classes of 
persons. 
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" 
TABLE 5-2 Approaches Courts Take to Assign Third Party Liability Under Common Law 
Approaches by Courts Definition of 
Interpretation | and Example Cases Third Party User Example 
Narrow Primary beneficiary/identified user Auditor knows and intends Auditor is aware of bank loan 
A Ultramares Corporation v. Touche (1931) that user will use audit agreement that requires audited 
Credit Alliance v. Arthur Andersen (1986) report. financial statements. 
Foreseen user Reasonably limited and Bank or trade creditors when the 
Rusch Factors v. Levin (1968) identifiable group of users auditor is aware that the client 
who have relied on the has provided audited financial 
auditor's work. statements to such users. 
Foreseeable user An unlimited class of users A trade creditor that has not previously 
Rosenblum, Inc. v. Adler (1983) that the auditor should have conducted business with the client. 
reasonably been able to That client has not furnished financial 
Vv foresee as being likely users statements to trade creditors in the 
Broad of the financial statements. past. 
XS y 
Three of the four defenses available to auditors in suits by clients are also available Auditor 
in third-party lawsuits: lack of duty to perform the service, nonnegligent perfor- Defenses Against 
mance, and absence of causal connection. Contributory negligence is ordinarily not Third-Party Suits 
available because a third party is not in a position to contribute to misstated financial 


statements. 

A lack of duty defense in third-party suits contends lack of privity of contract. The 
extent to which privity of contract is an appropriate defense and the nature of the 
defense depend heavily on the approach to foreseen users in the state and the judicial 
jurisdiction of the case. Apago PDF Enhancer 

If the auditor is unsuccessful in using the lack of duty defense to have a case 
dismissed, the preferred defense in third-party suits is nonnegligent performance. If 
the auditor conducted the audit in accordance with auditing standards, that eliminates 
the need for the other defenses. Unfortunately, nonnegligent performance can be 
difficult to demonstrate to a court, especially in jury trials when laypeople with no 
accounting experience make up the jury. 

Absence of causal connection in third-party suits often means nonreliance on the 
financial statements by the user. Assume that the auditor can demonstrate that a lender 
relied on an ongoing banking relationship with a customer, rather than the financial 
statements, in making a loan. In that situation, auditor negligence in the conduct of the 
audit is not relevant. Of course, it is difficult to prove nonreliance on the financial 
statements. Absence of causal connection can be difficult to establish because users 
may claim reliance on the statements even when investment or loan decisions were 
made without considering the company’s financial condition. 


CIVIL LIABILITY UNDER THE FEDERAL SECURITIES LAWS 


Although there has been some growth in actions brought against accountants by OBJECTIVE 5-6 
clients and third parties under common law, the greatest growth in CPA liability eecuh woe 
ie bean a nie escribe accountants’ civil 
litigation has been under the federal securities laws. Litigants commonly seek federal liability under the federal 
remedies because of the availability of class-action litigation and the ability to obtain securities laws and related 
significant damages from defendants. defenses. 

Other factors also make federal courts attractive to litigants. For example, several 
sections of the securities laws impose strict liability standards on CPAs and federal 
courts are often likely to favor plaintiffs in lawsuits when there are strict standards. 
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Securities Act of 1933 


However, fairly recent tort reform legislation may result in a reduction of negative 
outcomes for CPA firms in federal courts. 


The Securities Act of 1933 deals only with the reporting requirements for companies 
issuing new securities, including the information in registration statements and 
prospectuses. The only parties who can recover from auditors under the 1933 act are 
the original purchasers of securities. The amount of the potential recovery equals the 
original purchase price less the value of the securities at the time of the suit. (If the 
securities have been sold, users can recover the amount of the loss incurred.) 

The Securities Act of 1933 imposes an unusual burden on the auditor. Section 11 
of the 1933 act defines the rights of third parties and auditors, which are summarized 
as follows: 


* Any third party who purchased securities described in the registration statement 
may sue the auditor for material misrepresentations or omissions in audited 
financial statements included in the registration statement. 

* Third-party users do not have the burden of proof that they relied on the 
financial statements or that the auditor was negligent or fraudulent in doing the 
audit. Users must only prove that the audited financial statements contained a 
material misrepresentation or omission. 

* The auditor has the burden of demonstrating as a defense that (1) an adequate 
audit was conducted or (2) all or a portion of the plaintiff’s loss was caused by 
factors other than the misleading financial statements. The 1933 act is the only 
common or statutory law where the burden of proof is on the defendant. 


Furthermore, the auditor is responsible for making sure that the financial statements 
are fairly stated beyond the date of issuance, up to the date the registration statement 
becomes effective, which can be several months later. Assume that the audit report date 
for December 31, 2010 financial statements is February 10, 2011, but the registration 


pean ame fe NPdD Ber iBnhancexnudit, the auditor must review trans- 
actions through the audit report date, February 10, 2011. In statements filed under the 
1933 act, the auditor is responsible for reviewing transactions — for almost nine 
additional months — through the registration statement date, November 1, 2011. 


Escott et al. v. BarChris Construction Corporation (1968) — 
Securities Act of 1933 


BarChris filed an S-1 registration statement with the SEC in 1961 for the issuance of convertible 
subordinated debentures, thereby subjecting the company to the Securities Act of 1933. Approxi- 
mately 17 months later, BarChris filed for bankruptcy. The purchasers of the debentures filed suit 
against the CPA firm under the 1933 act. 

The most significant issue of the case, especially to audit staff personnel, was the matter of 
the review for events subsequent to the balance sheet, called an S-1 review for registration state- 
ments. The courts concluded that the CPA firm’s written audit program was in conformity with 
auditing standards in existence at that time. However, they were highly critical of the auditor 
conducting the review, who was inexperienced in audits of construction companies, for the failure 
to appropriately follow up on answers by management. The following is an important part of the 
court's opinion in the case: 








* Accountants should not be held to a higher standard than that recognized in their profession. 
| do not do so here. Richard’s review did not come up to that written standard. He did not take 
the steps which the CPA firm's written program prescribed. He did not spend an adequate 
amount of time on a task of this magnitude. Most important of all, he was too easily satisfied 
with glib answers to his inquiries. This is not to say that he should have made a complete audit. 
But there were enough danger signals in the materials which he did examine to require some 
further investigation on his part.... It is not always sufficient merely to ask questions. (Italics 
were added and the name used in the case was changed.) 


The CPA firm was found liable in the case on the grounds that they had not established due 
diligence required under the 1933 securities act. 
S > 
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Although the burden may appear harsh to auditors, there have been relatively few 
cases tried under the 1933 act. One of the most significant is Escott et al. v. BarChris 
Construction Corporation (1968). As noted in Figure 5-6, the CPA firm was held liable 
for a lack of due diligence required under the 1933 act when performing its review of 
events occurring subsequent to the balance sheet date. This case brought about two 
noteworthy consequences: 


1. Auditing standards were changed to require greater emphasis on procedures 
that the auditor must perform for events subsequent to the balance sheet date. 

2. A greater emphasis began to be placed on the importance of the audit staff 
understanding the client’s business and industry. 


The liability of auditors under the Securities Exchange Act of 1934 often centers on 
the audited financial statements issued to the public in annual reports submitted to the 
SEC as a part of annual Form 10-K reports. Every company with securities traded on 
national and over-the-counter exchanges is required to submit audited statements 
annually. Obviously, a much larger number of statements fall under the 1934 act than 
under the 1933 act. 

Auditors also face potential legal exposure for quarterly information (Form 10-Q) 
or other reporting information filed with the SEC, such as an unusual event filed in a 
Form 8-K. The auditor must perform a review of the Form 10-Q before it is filed with 
the SEC, and the auditor is frequently involved in reviewing the information in other 
reports, and, therefore, may be legally responsible. However, few cases have involved 
auditors for reports other than reports on annual audits. 


Hochfelder v. Ernst & Ernst (1976) — Securities Exchange Act 
of 1934 


The case involved the auditor's responsibility for detecting fraud perpetrated by the president of 
the client firm. Lestor Nay, the president of First Securities Co. of Chicago, fraudulently convinced 
certain customers to invest funds in escrow accounts that he represented would yield a high 
return. There were no escrow accounts. Nay converted the customers’ funds to his own use. 

The transactions were not in the usual form of dealings between First Securities and its 
customers. First, all correspondence with customers was made solely with Nay. Second, checks of 
the customers were drawn payable to Nay and because of a mail rule that Nay imposed, such mail 
was opened only by him. Third, the escrow accounts were not reflected on the books of First 
Securities, or in filings with the SEC, or in connection with customers’ other investment accounts. 
The fraud was uncovered at the time of Nay’s suicide. 

Respondent customers originally sued in district court for damages against the auditors, Ernst & 
Ernst, as aiders and abettors under Section 10b-5. They alleged that Ernst & Ernst failed to conduct a 
proper audit that should have led them to discover the “mail rule” and the fraud. No allegations were 
made as to Ernst & Ernst’s fraudulent and intentional conduct. The action was based solely on a 
claim that Ernst & Ernst failed to conduct a proper audit. The district court dismissed the action but did 
not resolve the issue of whether a cause of action could be based merely on allegations of negligence. 

The court of appeals reversed the district court. The appeals court held that one who breaches 
a duty of inquiry and disclosure owed another is liable in damages for aiding and abetting a third 
party's violation of Rule 10b-5 if the fraud would have been discovered or prevented had the 
breach not occurred. The court reasoned that Ernst & Ernst had a common-law and statutory duty of 
inquiry into the adequacy of First Securities’ internal control because it had contracted to audit First 
Securities and to prepare for filing with the commission the annual report of its financial condition. 

The U.S. Supreme Court reversed the court of appeals, concluding that the interpretation of 
Rule 10b-5 required the “intent to deceive, manipulate or defraud.” Justice Powell wrote in the 
Court's opinion that 











* When a statute speaks so specifically in terms of manipulation and deception, and of imple- 
menting devices and contrivances—the commonly understood terminology of intentional 
wrongdoing—and when its history reflects no more expansive intent, we are quite unwilling to 
extend the scope of the statute to negligent conduct. 


The Court pointed out that in certain areas of the law, recklessness is considered to be a 
form of intentional conduct for purposes of imposing liability. This left open the possibility that 
reckless behavior may be sufficient for liability under Rule 10b-5. 











Securities Exchange 
Act of 1934 
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Rule 10b-5 of the 
Securities Exchange 
Act of 1934 


Auditor Defenses — 
1934 Act 


SEC Sanctions 





The principal focus on CPA liability litigation under the 1934 act is Rule 10b-5. Section 
10 and Rule 10b-5 are often called the antifraud provisions of the 1934 act, as they 
prohibit any fraudulent activities involving the purchase or sale of any security. 
Numerous federal court decisions have clarified that Rule 10b-5 applies not only to 
direct sellers but also to accountants, underwriters, and others. Generally, accountants 
can be held liable under Section 10 and Rule 10b-5 if they intentionally or recklessly 
misrepresent information intended for third-party use. 

In 1976, in Hochfelder v. Ernst & Ernst, known both as a leading securities law case 
and as a CPA liabilities case, the U.S. Supreme Court ruled that scienter, which is 
knowledge and intent to deceive, is required before CPAs can be held liable for 
violation of Rule 10b-5. A summary of Hochfelder is included in Figure 5-7 (p. 125). 

Many auditors believed the knowledge and intent to deceive requirement established 
in the Hochfelder case would significantly reduce auditors’ exposure to liability. However, 
subsequent cases were brought arguing the knowledge and deceit standard was met in 
cases in which the auditor knew all the relevant facts but made poor judgments. In such 
situations, the courts emphasized that the CPAs had requisite knowledge. The Solitron 
Devices case, described in Figure 5-8, is an example of that reasoning. In that case, the court 
of appeals ruled that reckless behavior on the part of the auditor was sufficient to hold 
the auditor liable for violation of Rule 10b-5. However, in subsequent suits under Rule 
10b-5, Worlds of Wonder (1994) and Software Toolworks (1994), two key Ninth Circuit 
court decisions stated that poor judgment isn’t proof of fraud. This view appears now to be 
winning favor in the courts. Although Rule 10b-5 continues to be a basis for lawsuits against 
auditors, Hochfelder and subsequent court decisions have limited the liability somewhat. 


The same three defenses available to auditors in common-law suits by third parties are 
also available for suits under the 1934 act: nonnegligent performance, lack of duty, and 
absence of causal connection. 

As we just discussed, the use of the lack of duty defense in response to actions under 
Rule Apag Ad PRE ddan €& Fepending on the jurisdiction. In the 
Hochfelder case, the court ruled that knowledge and intent to deceive were necessary 
for the auditor to be found liable. In other cases, negligent or reckless behavior was 
sufficient for the auditor to be found liable. Continued court interpretations are likely 
to clarify this unresolved issue. 


Closely related to auditors’ liability is the SEC’s authority to sanction. The SEC has the 
power in certain circumstances to sanction or suspend practitioners from doing 
audits for SEC companies. The SEC’s Rules of Practice permit them to temporarily or 





Howard Sirota v. Solitron Devices, Inc. (1982) — Securities 
Exchange Act of 1934 


Solitron was a manufacturer of electronic devices, with its stock issued on the American Stock 
Exchange. It was involved in government contracts that subjected it to assessments on excess 
profits as determined by the Renegotiations Board. When the board determined that profits were 
excessive, management admitted that profits had been intentionally overstated to aid in acquiring 
new companies. It was subsequently shown in court, through an audit by another CPA firm, that 
earnings had been materially overstated by more than 30 percent in two different years, by 
overstating inventory. 

A jury trial found the auditor responsible for reckless behavior in the conduct of the audit. 
The trial judge overturned the jury verdict on the grounds that the CPA firm could not be held 
liable for damages under Rule 10b-5 unless there was proof that the CPA firm had actual knowl- 
edge of the misstatement. Reckless behavior was not sufficient for damages. 

On appeal, the Second Circuit Court of Appeals concluded that there had been sufficient 
evidence for the jury to conclude that the CPA firm had knowledge of the fraud. It therefore 
overturned the trial judge's findings and affirmed the original jury’s guilty verdict. 

The court of appeals also stated that proof of recklessness may meet the requirement of 
intent in Rule 10b-5, but that it need not address whether there was sufficient recklessness in this 
case because the CPA firm had knowledge of the misstatement. 
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permanently deny a CPA or CPA firm from being associated with financial statements 
of public companies, either because of a lack of appropriate qualifications or having 
engaged in unethical or improper professional conduct. 

In recent years, the SEC has temporarily suspended a number of individual CPAs 
from doing any audits of SEC clients. It has similarly prohibited a number of CPA firms 
from accepting any new SEC clients for a period, such as six months. In some cases, the 
SEC has required an extensive review of a major CPA firm’s practices by another CPA 
firm, or made CPA firms make changes in their practices. Individual CPAs and their 
firms have also been required to participate in continuing education programs. 
Sanctions such as these are published by the SEC and are often reported in the business 
press, making them a significant embarrassment to those involved. 


Another significant congressional action affecting both CPA firms and their clients was 
the passage of the Foreign Corrupt Practices Act of 1977. The act makes it illegal to 
offer a bribe to an official of a foreign country for the purpose of exerting influence and 
obtaining or retaining business. The prohibition against payments to foreign officials is 
applicable to all U.S. domestic firms, regardless of whether they are publicly or privately 
held, and to all foreign companies filing with the SEC. 

The law also requires SEC registrants under the Securities Exchange Act of 1934 to 
meet additional requirements of reasonably complete and accurate records, plus an 
adequate system of internal control. The law significantly affected all SEC companies, 
and potentially affected auditors because of their responsibility to review and evaluate 
systems of internal control as a part of the audit. Although the provisions of the Foreign 
Corrupt Practices Act remain in effect, the provisions related to accounting records and 
internal control are largely superseded by the more stringent requirements of the 
Sarbanes—Oxley Act of 2002. 


The Sarbanes—Oxley Act greatly increases the responsibilities of public companies and 
their auditors. The Act requires the arg 6 OP DFifvkinhan eeqearterly 
financial statements filed with the SEC.Tn ad@ition, as discussed in Chapter 3 (p. 49-51), 
management must report its assessment of the effectiveness of internal control over 
financial reporting, and for accelerated filers, the auditor must provide an opinion on the 
effectiveness of internal control over financial reporting. As a result, auditors may be 
exposed to legal liability related to their opinions on internal control. The PCAOB also 
has the authority to sanction registered CPA firms for any violations of the Act. 

Table 5-3 (p. 128) summarizes the sources of liability to clients and others for breach 
of contract under common law, liability to third parties under common law, and liability 
to third parties under the 1933 and 1934 Securities acts. The table illustrates the strict 
burden on auditors to defend themselves under the 1933 act. Liability to third parties 
under common law and the 1934 act depends on the degree of negligence. Liability to 
third parties under common law also depends upon the jurisdiction and whether the 
third party is a primary beneficiary or known user of the financial statements. 

The defenses available to the auditor are summarized in Table 5-4 (p. 128). If the 
auditor is unable to prove a lack of duty to perform the service, the preferred defense is 
generally nonnegligent performance. 


Foreign Corrupt 
Practices Act of 1977 


Sarbanes-Oxley Act 
of 2002 


CRIMINAL LIABILITY 


A fourth way CPAs can be held liable is under criminal liability for accountants. CPAs 
can be found guilty for criminal action under both federal and state laws. Under state 
law, the most likely statutes to be enforced are the Uniform Securities Acts, which are 
similar to parts of the SEC rules. The more relevant federal laws affecting auditors are 
the 1933 and 1934 securities acts, as well as the Federal Mail Fraud Statute and the 
Federal False Statements Statute. All make it a criminal offense to defraud another 





Specify what constitutes 
criminal liability for 
accountants. 
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Summary of Auditor Liability 














Alleged Liability Third Parties under Liability to Third Parties Liability to Third Parties 
Auditor Action to Client Common Law under 1933 Securities Act under 1934 Securities Act 
Breach of contract Yes N/A N/A N/A 
Negligence Yes Primary Beneficiary — N/A! No 

Yes 


Other third parties — 
depends on jurisdiction 

















Gross Negligence Yes Yes N/A Yes — likely 
Constructive fraud/ Yes Yes N/A Yes — likely 
Recklessness 
Fraud Yes Yes N/A Yes — likely 
x J 





“Yes” indicates that the auditor could be held liable to a client or third party for the alleged audit or action. 
“No” means the auditor would not be liable for the alleged action. 
“N/A means that the alleged auditor action is not an available basis to seek liability from the auditor under common law or the securities acts. 


'Material error or omission is required for liability under the 1933 act. 


person through knowingly being involved with false financial statements. In addition, 
the Sarbanes—Oxley Act of 2002 made it a felony to destroy or create documents to 
impede or obstruct a federal investigation. Under Sarbanes—Oxley, a person may face 
fines and imprisonment of up to 20 years for altering or destroying documents. 
These provisions were adopted following the United States v. Andersen (2002) case 
descrifk pakzoe SPDHhibnbran@ercharged Andersen with obstruction 
of justice for the destruction and alteration of documents related to its audit of 
Enron. 

Unfortunately, a few notorious criminal cases have involved CPAs. Historically, one 
of the leading cases of criminal action against CPAs is United States v. Simon, which 
occurred in 1969. In this case, three auditors were prosecuted for filing false financial 
statements of a client with the government, and all three were held criminally liable. 
Three major criminal cases followed Simon: 























TABLE 5-4 Auditor Defenses Against Suits by Client, Third Parties Under Common Law, and Under the 
1933 and 1934 Securities Acts 

Available Third Parties 1933 1934 

Auditor Defenses Client Suits Common Law Securities Act Securities Act 

Lack of duty to perform service X x N/A X 

Nonnegligent performance (audit in xX X x! xX 
accordance with audit standards) 

Contributory negligence by client or X N/A N/A N/A 
third party 

Absence of causal connection (no X X N/A2 X 
reliance on financial statements) 

x Z 











"X" indicates the auditor defense would be available. 
“N/A’ indicates the defense generally would not be applicable. 


‘Under the 1933 Securities Act, the auditor must prove due diligence in the performance of the audit. 
Auditor may prove that the loss was not attributable to the misleading financial statements. 
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fener United States v. Andersen (2002) — Criminal Liability ) 


In this case, the government charged Andersen with destruction of documents related to the 
firm’s audit of Enron. During the period between October 19, 2001, when Enron alerted Andersen 
that the SEC had begun an inquiry into Enron’s accounting for certain special purpose entities, 
and November 8, 2001, when the SEC served Andersen with a subpoena in connection with its 
work for Enron, Andersen personnel shredded extensive amounts of physical documentation and 
deleted computer files related to Enron. 

The firm was ultimately convicted of one count of obstruction of justice. The conviction was 
not based on the document shredding, but it was based on the alteration of a memo related to 
Enron's characterization of charges as nonrecurring in its third quarter 2001 earnings release, in 
which the company announced a loss of $618 million. 

As a result of the conviction, Andersen was no longer able to audit publicly traded U.S. 
companies. The conviction was overturned by the U.S. Supreme Court in 2005 because the 
instructions provided the jury were too broad. The victory was largely symbolic since the firm 
effectively ceased operations after the original conviction. 














* In United States v. Natelli (1975), two auditors were convicted of criminal liability 
under the 1934 act for certifying financial statements of National Student 
Marketing Corporation that contained inadequate disclosures. 

* In United States v. Weiner (1975), three auditors were convicted of securities 
fraud in connection with their audit of Equity Funding Corporation of America. 
The fraud was so extensive and the audit work so poor that the court concluded 
that the auditors must have been aware of the fraud and were therefore guilty of 
knowing complicity. 

* In ESM Government Securities v. Alexander Grant & Co. (1986), management 
revealed to the partner in charge of the audit of ESM that the previous year’s 
audited financial Stavemen SAAS okey IPP ofagherri Ceiger than 
complying with professional m standards, the partner agreed to say 
nothing in the hope that management would work its way out of the problem 
during the current year. The partner was convicted of criminal charges for his 
role in sustaining the fraud. 


These cases teach several critical lessons: 


» An investigation of the integrity of management is an important part of 
deciding on the acceptability of clients and the extent of work to perform. 
Auditing guidance for auditors in investigating new clients will be discussed in 
Chapter 8. 

* As discussed in Chapter 4, independence by all individuals on the engagement is 
essential, especially in a defense involving criminal actions. 





e 
LESSONS LEARNED _ Aswe consider the advisability of legislation for identify the misstatement was usually present. 
the reform of accountants’ liability, it is useful to In other words, the problem was not any 
FROM AUDITOR review actual experiences with past accountants’ inadequacy in the audit process as presented 


LITIGATION litigation. Accordingly, a review was conducted of by professional standards; it was a lack of 
23 cases of alleged audit failure with which | have professional skepticism on the part of the auditor. 





been involved as a litigation consultant and The auditor had evidence in his or her possession 
expert witness. Of these 23 cases, six were clearly that indicated the problem, but did not see it as 
without merit and should not have been brought such. 

on equitable grounds. Of the 17 that were with Source: Presentation by James K. Loebbecke at 
merit, 13 did, in fact, represent a real audit failure. the Forum on Responsibilities and Liabilities of 
Considering the nature of the failure in each case, Accountants and Auditors, United Nations Conference 
the evidence that would lead the auditor to on Trade and Development, March 16, 1995. 
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* ‘Transactions with related parties require special scrutiny because of the potential 
for misstatement. Auditing requirements for related-party transactions are 
discussed in Chapter 8. 

* Accounting principles cannot be relied on exclusively in deciding whether 
financial statements are fairly presented. The substance of the statements, con- 
sidering all facts, is required. 

* The potential consequences of the auditor knowingly committing a wrongful act 
are so severe that it is unlikely that the potential benefits can ever justify the actions. 


THE PROFESSION’S RESPONSE TO LEGAL LIABILITY 





OBJECTIVE 5-8 The AICPA and the profession as a whole can do a number of things to reduce practi- 
tioners’ exposure to lawsuits: 


Describe how the profession 
and individual CPAs can 1. Seek protection from nonmeritorious litigation 


ASME DES BUSES ILE San 2. Improve auditing to better meet users’ needs 


3. Educate users about the limits of auditing 





Let’s discuss some specific activities briefly: 


* Standard and rule setting. The IAASB, AICPA and PCAOB must constantly set 
standards and revise them to meet the changing needs of auditing. For example, 
changes in auditing standards on the auditor’s responsibility to detect fraud 
were issued to address users’ needs and expectations as to auditor performance. 

* Oppose lawsuits. CPA firms must continue to oppose unwarranted lawsuits even 
if, in the short run, the costs of winning are greater than the costs of settling. 

* Education of users. The AICPA, leaders of CPA firms, and educators should 
educate investors and others who read financial statements as to the meaning 

Apagoao PPFonknhancecnd nature of the auditor’s work. In 
addition, users need to understand that auditors do not guarantee the accuracy 
of the financial records or the future prosperity of an audited company. People 
outside of the profession need to understand that accounting and auditing are 
arts, not sciences. Perfection and precision are simply not achievable. 

* Sanction members for improper conduct and performance. A profession must 
police its own membership. The AICPA and the PCAOB have made progress in 
dealing with the problems of inadequate CPA performance, but more rigorous 
review of alleged failures is still needed. 

* Lobby for changes in laws. Since the 1990s several changes in state and federal 
laws have favorably impacted the legal environment for the profession. Most 
states have revised their laws to allow accounting firms to practice in different 
organizational forms, including limited liability organizations that provide some 
protection from litigation. The passage of the Private Securities Litigation 
Reform Act of 1995 (the Reform Act) and the Securities Litigation Uniform 
Standards Act of 1998 significantly reduced potential damages in federal 
securities-related litigation by providing for proportionate liability in most 
instances. The profession continues to pursue litigation reform at the state 
level, including application of a strict privity standard for liability to nonclients 
and proportionate liability in all cases not involving fraud. 


PROTECTING INDIVIDUAL CPAs FROM LEGAL LIABILITY 


Practicing auditors may also take specific action to minimize their liability. Some of the 
more common actions are as follows: 
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* Deal only with clients possessing integrity. There is an increased likelihood of 
having legal problems when a client lacks integrity in dealing with customers, 
employees, units of government, and others. A CPA firm needs procedures to 
evaluate the integrity of clients and should dissociate itself from clients found 
lacking integrity. 

* Maintain independence. Independence is more than merely financial. Independence 
requires an attitude of responsibility separate from the client’s interest. Much 
litigation has arisen from auditors’ too-willing acceptance of client representations 
or from client pressure. The auditor must maintain an attitude of healthy professional 
skepticism. 

* Understand the client’s business. In several cases, the lack of knowledge of industry 
practices and client operations has been a major factor in auditors failing to 
uncover misstatements. 

* Perform quality audits. Quality audits require that auditors obtain appropriate 
evidence and make appropriate judgments about the evidence. It is essential, for 
example, that the auditor understands the client’s internal controls and modify 
the evidence to reflect the findings. Improved auditing reduces the likelihood of 
failing to detect misstatements and the likelihood of lawsuits. 

* Document the work properly. The preparation of good audit documentation helps 
the auditor perform quality audits. Quality audit documentation is essential if an 
auditor has to defend an audit in court, including an engagement letter and a 
representation letter that define the respective obligations of the client and the 
auditor. 

* Exercise professional skepticism. Auditors are often liable when they are presented 
with information indicating a problem that they fail to recognize. Auditors need 
to strive to maintain a healthy level of skepticism, one that keeps them alert to 
potential misstatements, so that they can SDE misstatements when they 
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It is also important for CPAs to carry adequate insurance and choose a form of 
organization that provides some form of legal liability protection to owners. In the 
event of actual or threatened litigation, an auditor should consult with experienced 
legal counsel. 


SUMMARY 


This chapter provides insight into the environment in which CPAs operate by high- 
lighting the significance of the legal liability facing the CPA profession. No reasonable 
CPA wants to eliminate the profession’s legal responsibility for fraudulent or 
incompetent performance. It is certainly in the profession’s best interest to maintain 
public trust in the competent performance of the auditing profession, while avoiding 
liability for cases involving strictly business failure and not audit failure. To more 
effectively avoid legal liability, CPAs need to have an understanding of how they can be 
held liable to their clients or third parties. Knowledge about how CPAs are liable to 
clients under common law, to third parties under common law, to third parties under 
federal securities laws, and for criminal liability, provides auditors an awareness of 
issues that may subject them to greater liability. CPAs can protect themselves from legal 
liability in numerous ways, and the profession has worked diligently to identify ways to 
help CPAs reduce the profession’s potential exposure. It is necessary for the profession 
and society to determine a reasonable trade-off between the degree of responsibility the 
auditor should take for the financial statements and the audit cost to society. CPAs, 
Congress, the SEC, and the courts will all continue to have a major influence in shaping 
the final solution. 
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Absence of causal connection—an 
auditor’s legal defense under which the 
auditor contends that the damages claimed 
by the client were not brought about by 
any act of the auditor 


Audit failure—a situation in which the 
auditor issues an incorrect audit opinion 
as the result of an underlying failure to 
comply with the requirements of auditing 
standards 


Audit risk—the risk that the auditor will 
conclude after conducting an adequate 
audit that the financial statements are 
fairly stated and an unqualified opinion 
can therefore be issued when, in fact, they 
are materially misstated 


Business failure—the situation when a 
business is unable to repay its lenders or 
meet the expectations of its investors 
because of economic or _ business 
conditions 


Contributory negligence—an auditor’s 
legal defense under Pye uditor 
chim AAG QcnB HE oH 

certain obligations and that it is the 
client’s failure to perform those obli- 


gations that brought about the claimed 
damages 


Criminal liability for accountants— 
defrauding a person through knowing 
involvement with false financial state- 
ments 


Foreign Corrupt Practices Act of 1977—a 
federal statute that makes it illegal to offer 
a bribe to an official of a foreign country 
for the purpose of exerting influence and 
obtaining or retaining business and that 
requires U.S. companies to maintain 
reasonably complete and accurate records 
and an adequate system of internal 
control 


Foreseeable users—an unlimited class of 
users that the auditor should have 
reasonably been able to foresee as being 
likely users of financial statements 


Foreseen users—members of a limited 
class of users whom the auditor is aware 
will rely on the financial statements 
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Lack of duty to perform—an auditor’s 
legal defense under which the auditor 
claims that no contract existed with the 
client; therefore, no duty existed to 
perform the disputed service 


Legal liability—the professional’s obliga- 
tion under the law to provide a reasonable 
level of care while performing work for 
those served 


Nonnegligent performance—an auditor’s 
legal defense under which the auditor 
claims that the audit was performed in 
accordance with auditing standards 


Private Securities Litigation Reform Act 
of 1995—a federal law passed in 1995 that 
significantly reduced potential damages 
in securities-related litigation 


Prudent person concept—the legal con- 
cept that a person has a duty to exercise 
reasonable care and diligence in the 
performance of obligations to another 


Scienter—commission of an act with 
knowledge or intent to deceive 


er 


Securities Act of 1933—a federal statute 
dealing with companies that register and 
sell securities to the public; under the 
statute, third parties who are original 
purchasers of securities may recover 
damages from the auditor if the financial 
statements are misstated, unless the 
auditor proves that the audit was ade- 
quate or that the third party’s loss was 
caused by factors other than misleading 
financial statements 


Securities Exchange Act of 1934—a federal 
statute dealing with companies that trade 
securities on national and over-the- 
counter exchanges; auditors are involved 
because the annual reporting require- 
ments include audited financial statements 


Ultramares doctrine—a common-law 
approach to third-party liability, estab- 
lished in 1931 in the case of Ultramares 
Corporation v. Touche, in which ordinary 
negligence is insufficient for liability to 
third parties because of the lack of privity 
of contract between the third party and 
the auditor, unless the third party is a 
primary beneficiary 


REVIEW QUESTIONS 


5-1 (Objective 5-1) State several factors that have affected the incidence of lawsuits against 
CPAs in recent years. 

5-2 (Objective 5-1) Lawsuits against CPA firms continue to increase. State your opinion of 
the positive and negative effects of the increased litigation on CPAs and on society as a 
whole. 

5-3 (Objective 5-2) Distinguish between business failure and audit risk. Why is business 
failure a concern to auditors? 


5-4 (Objective 5-3) How does the prudent person concept affect the liability of the auditor? 
5-5 (Objective 5-3) Distinguish between “fraud” and “constructive fraud.” 

5-6 (Objectives 5-1, 5-8) Discuss why many CPA firms have willingly settled lawsuits out of 
court. What are the implications to the profession? 


5-7 (Objective 5-4) A common type of lawsuit against CPAs is for the failure to detect a 
fraud. State the auditor’s responsibility for such discovery. Give authoritative support for 
your answer. 

5-8 (Objectives 5-3, 5-4) What is meant by contributory negligence? Under what con- 
ditions will this likely be a successful defense? 

5-9 (Objective 5-4) Explain how an engagement letter might affect an auditor’s liability to 
clients under common law. 

5-10 (Objectives 5-4, 5-5) Compare and contrast traditional auditors’ legal responsibilities 
to clients and third-party users under common law. How has that law changed in recent years? 
5-11 (Objective 5-5) Is the auditor’s liability affected if the third party was unknown rather 
than known? Explain. 

5-12 (Objective 5-6) Contrast the auditor’s liability under the Securities Act of 1933 with 
that under the Securities Exchange AApag o PDF Enhancer 

5-13 (Objectives 5-4, 5-5, 5-6, 5-7) Distinguish between the auditor’s potential liability to 
the client, liability to third parties under common law, civil liability under the securities 
laws, and criminal liability. Describe one situation for each type of liability in which the 
auditor can be held legally responsible. 

5-14 (Objective 5-6) What potential sanctions does the SEC have against a CPA firm? 

5-15 (Objective 5-8) In what ways can the profession positively respond to and reduce 
liability in auditing? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 





5-16 (Objectives 5-4, 5-5) The following questions concern CPA firms’ liability under 
common law. Choose the best response. 


a. Sharp, CPA, was engaged by Peters & Sons, a partnership, to give an opinion on the 
financial statements that were to be submitted to several prospective partners as part 
of a planned expansion of the firm. Sharp’s fee was fixed on a per diem basis. After a 
period of intensive work, Sharp completed about half of the necessary field work. 
Then, because of unanticipated demands on his time by other clients, Sharp was 
forced to abandon the work. The planned expansion of the firm failed to materialize 
because the prospective partners lost interest when the audit report was not promptly 
available. Sharp offered to complete the task at a later date. This offer was refused. 
Peters & Sons suffered damages of $400,000 as a result. Under the circumstances, what 
is the probable outcome of a lawsuit between Sharp and Peters & Sons? 

(1) Sharp will be compensated for the reasonable value of the services actually 
performed. 
(2) Peters & Sons will recover damages for breach of contract. 
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(3) Peters & Sons will recover both punitive damages and damages for breach of 
contract. 
(4) Neither Sharp nor Peters & Sons will recover against the other. 


. Ina common law action against an accountant, lack of privity is a viable defense if the 


plaintiff 

(1) is the client’s creditor who sues the accountant for negligence. 

(2) can prove the presence of gross negligence that amounts to a reckless disregard for 
the truth. 

(3) is the accountant’s client. 

(4) bases the action upon fraud. 


. The 1136 Tenants case was important chiefly because of its emphasis on the legal 


liability of the CPA when associated with 

(1) an SEC engagement. 

(2) unaudited financial statements. 

(3) an audit resulting in a disclaimer of opinion. 
(4) letters for underwriters. 


5-17 (Objective 5-6) The following questions deal with liability under the 1933 and 1934 
securities acts. Choose the best response. 


a. Major, Major, & Sharpe, CPAs, are the auditors of MacLain Technologies. In connection 


with the public offering of $10 million of MacLain securities, Major expressed an 

unqualified opinion as to the financial statements. Subsequent to the offering, certain 

misstatements were revealed. Major has been sued by the purchasers of the stock offered 

pursuant to the registration statement that included the financial statements audited 

by Major. In the ensuing lawsuit by the MacLain investors, Major will be able to avoid 

liability if 

(1) the misstatements were caused primarily by MacLain. 

(2) it can be shown that at least some of the investors did not actually read the audited 

jorPDF Enhancer . . 

(3) ‘Tt can"prove due diligence in the audit of the financial statements of MacLain. 

(4) MacLain had expressly assumed any liability in connection with the public 
offering. 


. Under the 1933 Securities Act, which of the following must be proven by the purchaser 


of the security? 





Reliance on the Fraud by 

Financial Statements The CPA 
(1) Yes Yes 
(2) Yes No 
(3) No Yes 
(4) No No 





. Donalds & Company, CPAs, audited the financial statements included in the annual 


report submitted by Markum Securities, Inc. to the SEC. The audit was improper in 

several respects. Markum is now insolvent and unable to satisfy the claims of its 

customers. The customers have instituted legal action against Donalds based on 

Section 10b and Rule 10b-5 of the Securities Exchange Act of 1934. Which of the 

following is likely to be Donalds’ best defense? 

(1) They did not intentionally certify false financial statements. 

(2) Section 10b does not apply to them. 

(3) They were not in privity of contract with the creditors. 

(4) Their engagement letter specifically disclaimed any liability to any party that 
resulted from Markum’s fraudulent conduct. 


d. Which of the following statements about the Securities Act of 1933 is not true? 


(1) The third party user does not have the burden of proof that she/he relied on the 
financial statements. 


Part 1 / THE AUDITING PROFESSION 


(2) The third party has the burden of proof that the auditor was either negligent or 
fraudulent in doing the audit. 

(3) The third party user does not have the burden of proof that the loss was caused by 
the misleading financial statements. 

(4) The auditor will not be liable if he or she can demonstrate due diligence in 
performing the audit. 


DISCUSSION QUESTIONS AND PROBLEMS 


5-18 (Objectives 5-3, 5-4, 5-5, 5-6) Following are 8 statements with missing terms 
involving auditor legal liability. 


_ 


. Under the Ultramares Doctrine, an auditor is generally not liability for to third 
parties lacking 


N 


. The auditor will use a defense of in a suit brought under the 1933 Securities Act. 





ww 


. After passage of the Private Securities Litigation Reform Act, auditors generally have 
liability in federal securities cases. 





aS 


. The broadest class of third parties under common law is known as 


wn 


. Based on the ruling in Hochfelder v. Ernst & Ernst, an auditor generally must have 
knowledge and to be found guilty of a violation of Rule 10b-5 of the 1934 Act. 


. Under the 1933 Act, plaintiffs do not have to demonstrate 
demonstrate the existence of a 





lon 


, but need merely 


vie is generally only available as a defense in suits brought by clients. 
8. A third party lacking privity will often be successful in bringing a claim against the 
auditor if they can demonstrate or 
Terms 
a. Due diligence Apago :BDE.Enhancer 
b. Reliance on the financial statements h. Privity of contract 
c. Fraud i. Gross negligence 
d. Ordinary negligence j. Foreseen users 
e. Separate and proportionate k. Material error or omission 


f. Contributory negligence 


For each of the 11 blanks in statements 1 through 8, identify the most appropriate term. No 
term can be used more than once. 


5-19 (Objectives 5-4, 5-5) Lauren Yost & Co., a medium-sized CPA firm, was engaged to 
audit Stuart Supply Company. Several staff were involved in the audit, all of whom had 
attended the firm’s in-house training program on effective auditing methods. Throughout 
the audit, Yost spent most of her time in the field planning the audit, supervising the staff, 
and reviewing their work. 

A significant part of the audit entailed verifying the physical count, cost, and summari- 
zation of inventory. Inventory was highly significant to the financial statements, and Yost 
knew the inventory was pledged as collateral for a large loan to First City National Bank. In 
reviewing Stuart’s inventory count procedures, Yost told the president she believed the 
method of counting inventory at different locations on different days was highly undesirable. 
The president stated that it was impractical to count all inventory on the same day because 
of personnel shortages and customer preference. After considerable discussion, Yost agreed 
to permit the practice if the president would sign a statement that no other method was 
practical. The CPA firm had at least one person at each site to audit the inventory count 
procedures and actual count. There were more than 40 locations. 

Eighteen months later, Yost found out that the worst had happened. Management below 
the president’s level had conspired to materially overstate inventory as a means of covering 
up obsolete inventory and inventory losses resulting from mismanagement. The misstate- 
ment occurred by physically transporting inventory at night to other locations after it had 
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been counted in a given location. The accounting records were inadequate to uncover these 
illegal transfers. 
Both Stuart Supply Company and First City National Bank sued Lauren Yost & Co. 


Answer the following questions, setting forth reasons for any conclusions stated: 
a. What defense should Lauren Yost & Co. use in the suit by Stuart? 
b. What defense should Lauren Yost & Co. use in the suit by First City National Bank? 
c. Is Yost likely to be successful in her defenses? 


d. Would the issues or outcome be significantly different if the suit was brought under 
the Securities Exchange Act of 1934? 


5-20 (Objective 5-5) The CPA firm of Bigelow, Barton, and Brown was expanding rapidly. 
Consequently, it hired several junior accountants, including a man named Small. The 
partners of the firm eventually became dissatisfied with Small’s production and warned 
him they would be forced to discharge him unless his output increased significantly. 

At that time, Small was engaged in audits of several clients. He decided that to avoid 
being fired, he would reduce or omit some of the standard auditing procedures listed in 
audit programs prepared by the partners. One of the CPA firm’s clients, Newell Corporation, 
was in serious financial difficulty and had adjusted several of the accounts being audited 
by Small to appear financially sound. Small prepared fictitious audit documentation in his 
home at night to support purported completion of auditing procedures assigned to him, 
although he in fact did not examine the adjusting entries. The CPA firm rendered an 
unqualified opinion on Newell’s financial statements, which were grossly misstated. Several 
creditors, relying on the audited financial statements, subsequently extended large sums of 
money to Newell Corporation. 


Will the CPA firm be liable to the creditors who extended the money because of their 
reliance on the erroneous financial statements if Newell Corporation should fail to pay 
them? Explain.* 
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5-21 (O 2a. 5-5) Doyle uly pancel audited the accounts of Regal Jewelry, 


Inc., a corporation that imports and deals in fine jewelry. Upon completion of the audit, 
the auditors supplied Regal Jewelry with 20 copies of the audited financial statements. The 
firm knew in a general way that Regal Jewelry wanted that number of copies of the auditor’s 
report to furnish to banks and other potential lenders. 

The balance sheet in question was misstated by approximately $800,000. Instead of 
having a $600,000 net worth, the corporation was insolvent. The management of Regal 
Jewelry had doctored the books to avoid bankruptcy. The assets had been overstated by 
$500,000 of fictitious and nonexisting accounts receivable and $300,000 of nonexisting 
jewelry listed as inventory when in fact Regal Jewelry had only empty boxes. The audit 
failed to detect these fraudulent entries. Thompson, relying on the audited financial 
statements, loaned Regal Jewelry $200,000. She seeks to recover her loss from Doyle and 
Jensen. 


State whether each of the following is true or false and give your reasons: 


a. If Thompson alleges and proves negligence on the part of Doyle and Jensen, she will 
be able to recover her loss. 


b. If Thompson alleges and proves constructive fraud (that is, gross negligence on the 
part of Doyle and Jensen), she will be able to recover her loss. 


c. Thompson does not have a contract with Doyle and Jensen. 


d. Unless actual fraud on the part of Doyle and Jensen can be shown, Thompson can not 
recover. 


e. Thompson is a third-party beneficiary of the contract Doyle and Jensen made with 
Regal Jewelry.* 


*AICPA adapted. 
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5-22 (Objectives 5-5, 5-6) In order to expand its operations, Barton Corp. raised $5 million 
in a public offering of common stock, and also negotiated a $2 million loan from First 
National Bank. In connection with this financing, Barton engaged Hanover & Co., CPAs to 
audit Barton’s financial statements. Hanover knew that the sole purpose of the audit was so 
that Barton would have audited financial statements to provide to First National Bank and 
the purchasers of the common stock. Although Hanover conducted the audit in conformity 
with its audit program, Hanover failed to detect material acts of embezzlement committed 
by Barton Corp.s president. Hanover did not detect the embezzlement because of its 
inadvertent failure to exercise due care in designing the audit program for this engagement. 

After completing the engagement, Hanover issued an unqualified opinion on Barton’s 
financial statements. The financial statements were relied upon by the purchasers of the 
common stock in deciding to purchase the shares. In addition, First National Bank 
approved the loan to Barton based on the audited financial statements. Within sixty days 
after the sale of the common stock and the issuance of the loan, Barton was involuntarily 
petitioned into bankruptcy. Because of the president’s embezzlement, Barton became 
insolvent and defaulted on the loan from the bank. Its common stock became virtually 
worthless. Actions have been brought against Hanover by: 


* The purchasers of the common stock who have asserted that Hanover is liable for 
damages under Section 10(b) and Rule 10b-5 of the Securities Exchange Act of 1934. 

* First National Bank, based upon Hanover’s negligence. 

* Trade creditors who extended credit to Barton, based upon Hanover’s negligence. 


a. Discuss whether you believe Hanover will be found liable to the purchasers of common 
stock. 


b. Indicate whether you believe First National Bank will be successful in its claim against 
Hanover. 


c. Indicate whether you believe the trade creditors will be successful in their claim 
against Hanover.* 


5-23 (Objectives 5-4, 5-5, 5-7) Che AP AGG ARNE KahanGexturing 
Corporation, a privately owned company that has a June 30 fiscal year. Greenleaf arranged 
for a substantial bank loan that was dependent on the bank’s receiving, by September 30, 
audited financial statements that showed a current ratio of at least 2 to 1. On September 25, 
just before the audit report was to be issued, Chen received an anonymous letter on 
Greenleaf’s stationery indicating that a 5-year lease by Greenleaf, as lessee, of a factory 
building accounted for in the financial statements as an operating lease was, in fact, a 
capital lease. The letter stated that there was a secret written agreement with the lessor 
modifying the lease and creating a capital lease. 

Chen confronted the president of Greenleaf, who admitted that a secret agreement 
existed but said it was necessary to treat the lease as an operating lease to meet the current 
ratio requirement of the pending loan and that nobody would ever discover the secret 
agreement with the lessor. The president said that if Chen did not issue his report by 
September 30, Greenleaf would sue Chen for substantial damages that would result from 
not getting the loan. Under this pressure and because the audit files contained a copy of the 
5-year lease agreement that supported the operating lease treatment, Chen issued his 
report with an unqualified opinion on September 29. 

Despite the fact that the loan was received, Greenleaf went bankrupt within 2 years. The 
bank is suing Chen to recover its losses on the loan, and the lessor is suing Chen to recover 
uncollected rents. 


Answer the following questions, setting forth reasons for any conclusions stated: 
a. Is Chen liable to the bank? 
b. Is Chen liable to the lessor? 
c. Is there potential for criminal action against Chen?* 


*AICPA adapted. 
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5-24 (Objective 5-6) Under Section 11 of the Securities Act of 1933 and Section 10(b), Rule 
10b-5, of the Securities Exchange Act of 1934, a CPA may be sued by a purchaser of 
registered securities. The following items relate to what a plaintiff who purchased securities 
must prove in a civil liability suit against a CPA. 
The plaintiff security purchaser must allege or prove: 

1. Material misstatements were included in a filed document. 

2. A monetary loss occurred. 

3. Lack of due diligence by the CPA. 

4. Privity with the CPA. 

5. Reliance on the financial statements. 

6. The CPA had scienter (knowledge and intent to deceive). 


For each of the items 1 through 6 listed above, indicate whether the statement must be 
proven under 
a. Section 11 of the Securities Act of 1933 only. 
b. Section 10(b) of the Securities Exchange Act of 1934 only. 
c. Both Section 11 of the Securities Act of 1933 and Section 10(b) of the Securities 
Exchange Act of 1934. 
d. Neither Section 11 of the Securities Act of 1933 nor Section 10(b) of the Securities 
Exchange Act of 1934.* 


5-25 (Objective 5-6) Gordon & Groton, CPAs, were the auditors of Bank & Company, a 
brokerage firm and member of a national stock exchange. Gordon & Groton audited and 
reported on the financial statements of Bank, which were filed with the Securities and 
Exchange Commission. 

Several of Bank’s customers were swindled by a fraudulent scheme perpetrated by 
Bank’s president, who owned 90% of the voting stock of the company. The facts establish 
that Gordon & Groton were negligent but not reckless or grossly negligent in the conduct 
of the audit, and neither participated in the fraudulent scheme or knew of its existence. 

ThAPAgGoreRDEFoHNn Rance ew the antifraud provisions of Section 
10b and Rule 10b-5 of the Securities Exchange Act of 1934 for aiding and abetting the 
fraudulent scheme of the president. The customers’ suit for fraud is predicated exclusively 
on the nonfeasance of the auditors in failing to conduct a proper audit, thereby failing to 
discover the fraudulent scheme. 


Answer the following questions, setting forth reasons for any conclusions stated: 
a. What is the probable outcome of the lawsuit? 
b. What other theory of liability might the customers have asserted?* 


5-26 (Objective 5-5) Sarah Robertson, CPA, had been the auditor of Majestic Co. for several 
years. As she and her staff prepared for the audit for the year ended December 31, 2010, 
Herb Majestic told her that he needed a large bank loan to “tide him over” until sales picked 
up as expected in late 2011. 

In the course of the audit, Robertson discovered that the financial situation at Majestic 
was worse than Majestic had revealed and that the company was technically bankrupt. She 
discussed the situation with Majestic, who pointed out that the bank loan will “be his 
solution”—he was sure he will get it as long as the financial statements don’t look too bad. 

Robertson stated that she believed the statements will have to include a going concern 
explanatory paragraph. Majestic said that this wasn’t needed because the bank loan was so 
certain and that inclusion of the going concern paragraph will certainly cause the manage- 
ment of the bank to change its mind about the loan. 

Robertson finally acquiesced and the audited statements were issued without a going 
concern paragraph. The company received the loan, but things did not improve as Majestic 
thought they would and the company filed for bankruptcy in August 2011. 

The bank sued Sarah Robertson for fraud. 


Indicate whether or not you think the bank will succeed. Support your answer. 


*AICPA adapted. 
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5-27 (Objectives 5-5, 5-6) Part 1. Whitlow & Company is a brokerage firm registered under 
the Securities Exchange Act of 1934. The act requires such a brokerage firm to file audited 
financial statements with the SEC annually. Mitchell & Moss, Whitlow’s CPAs, performed 
the annual audit for the year ended December 31, 2011, and rendered an unqualified 
opinion, which was filed with the SEC along with Whitlow’s financial statements. During 
2011, Charles, the president of Whitlow & Company, engaged in a huge embezzlement scheme 
that eventually bankrupted the firm. As a result, substantial losses were suffered by cus- 
tomers and shareholders of Whitlow & Company, including Thaxton, who had recently 
purchased several shares of stock of Whitlow & Company after reviewing the company’s 
2011 audit report. Mitchell & Moss’s audit was deficient; if they had complied with auditing 
standards, the embezzlement would have been discovered. However, Mitchell & Moss had 
no knowledge of the embezzlement, nor can their conduct be categorized as reckless. 


Answer the following questions, setting forth reasons for any conclusions stated: 


a. What liability to Thaxton, if any, does Mitchell & Moss have under the Securities 
Exchange Act of 1934? 


b. What theory or theories of liability, if any, are available to Whitlow & Company’s 
customers and shareholders under common law? 


Part 2. Jackson is a sophisticated investor. As such, she was initially a member of a small 
group that was going to participate in a private placement of $1 million of common stock of 
Clarion Corporation. Numerous meetings were held between management and the investor 
group. Detailed financial and other information was supplied to the participants. Upon the 
eve of completion of the placement, it was aborted when one major investor withdrew. 
Clarion then decided to offer $2.5 million of Clarion common stock to the public pursuant 
to the registration requirements of the Securities Act of 1933. Jackson subscribed to 
$300,000 of the Clarion public stock offering. Nine m PHRS aripn’s earnin s dropped 
significantly, and as a result, the stock SAGO. e. ARSE Kiition, 
the Dow Jones Industrial Average was down 10% at the time of the eS 

Jackson sold her shares at a loss of $60,000 and seeks to hold all parties liable who 
participated in the public offering, including Clarion’s CPA firm of Allen, Dunn, and Rose. 
Although the audit was performed in conformity with auditing standards, there were some 
relatively minor misstatements. The financial statements of Clarion Corporation, which 
were part of the registration statement, contained minor misleading facts. It is believed by 
Clarion and Allen, Dunn, and Rose that Jackson’s asserted claim is without merit. 


Answer the following questions, setting forth reasons for any conclusions stated: 
a. If Jackson sues under the Securities Act of 1933, what will be the basis of her claim? 


b. What are the probable defenses that might be asserted by Allen, Dunn, and Rose in 
light of these facts?* 


INTERNET PROBLEM 5-1: SEC ENFORCEMENT 


The SEC Enforcement Division investigates possible violations of securities laws, recom- 
mends SEC action when appropriate, either in a federal court or before an administrative 
law judge, and negotiates settlements. Litigation Releases, which are descriptions of SEC 
civil and selected criminal suits in the federal courts, are posted on the SEC web site 
(www.sec.gov/litigation/litreleases.shtml). Find Litigation Release No. 21532 dated May 25, 
2010. 

a. What is the nature of the complaint underlying LR No. 21532? 


b. What sections of the federal securities laws is the individual involved accused of 
violating? 


*AICPA adapted. 
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CHAPTERS 


6-13 





THE AUDIT PROCESS 





Part 2 presents the audit process in a manner that will enable you to apply the 
concepts developed in these chapters to any audit area. Because the planning 
concepts covered in these chapters will be used extensively throughout the rest 

of the book, it is essential for you to master this material and fully understand the 
importance of audit planning. 


e Chapters 6 and 7 deal with auditors’ and managements’ responsibilities, 
audit objectives, and general concepts of evidence accumulation. 


e Chapters 8 through 12 study various aspects of audit planning in depth, 
including risk assessment and auditors’ responsibility for detecting fraud. 


e Chapter 13 summarizes and integrates audit planning and audit evidence. 


Throughout the remainder of the book, many of the concepts are illustrated 
with examples based on the Hillsburg Hardware Company. The financial 
statements and other information from the company’s annual report are 
included in the glossy insert material to the textbook. 











AUDIT RESPONSIBILITIES 
AND OBJECTIVES 


Where Were The Auditors? 


Barry Minkow was a true “whiz kid.” He started ZZZZ Best Company, a high- 
flying carpet cleaning company specializing in insurance restoration 
contracts, at the age of 16. In 1982, when Minkow started the business, it 
was run out of his garage, but a mere 5 years later he had taken the 
company public and it had sales of $50 million and earnings of more than 
$5 million. The market value of Minkow’s stock in ZZZZ Best exceeded 
$100 million. 


As it turned out, Minkow’s genius lay not in business but in deception. 
Instead of being a solid operating company, ZZZZ Best was an illusion. 
There were no large restoration jobs and no real revenues and profits. They 
were only on paper and supported by an effective network of methods to 
deceive shareholders, the SEC, and the reputable professionals who served 
the company, including its auditors. Many, including members of Congress, 
asked, “How could this happen? Where were the auditors?” 


When ZZZZ Best first started to Srp algo PDFo Enhancer a cycle approach to segmenting 
e 


problem of needing credit. He dev scheme with an Insurance 
adjuster to validate nonexistent jobs to potential creditors. Minkow could 
then get large sums of cash on credit despite not doing any real work. The 
scam was broadened when ZZZZ Best started needing audits. To fool the 
auditors, the coconspirator insurance adjuster was kept busy running a 
company that generated false contracts for ZZZZ Best. When the auditors 
tried to check on those contracts, the adjuster confirmed them. Minkow 
even went so far as taking auditors to real work sites, sites that weren't 
actually his. He even leased a partially completed building and hired 
subcontractors to perform work on the site, all for the sake of a visit by the 
auditors. 


As incredible as the ZZZZ Best story may seem, when asked about it, most 
knowledgeable observers would answer: “It's not the first time, and it 
won't be the last.” It is also not the last time people will ask, “Where were 
the auditors?” 


LEARNING OBJECTIVES 


After studying this chapter, 
you should be able to 


6-1 Explain the objective of 
conducting an audit of financial 
statements and an audit of 
internal controls. 


6-2 Distinguish management's 
responsibility for the financial 
statements and internal control 
from the auditor's responsibility 
for verifying the financial state- 
ments and effectiveness of 
internal control. 


6-3 Explain the auditor's responsi- 
bility for discovering material 
misstatements. 


6-4 Classify transactions and account 
balances into financial statement 
cycles and identify benefits of 


the audit. 


6-5 Describe why the auditor obtains 
a combination of assurance by 
auditing classes of transactions 
and ending balances in accounts, 
including presentation and 
disclosure. 


6-6 Distinguish among the three 
categories of management asser- 
tions about financial information. 


6-7 Link the six general transaction- 
related audit objectives to 
management assertions for 
classes of transactions. 


6-8 _ Link the eight general balance- 
related audit objectives to 
management assertions for 
account balances. 


6-9 Link the four presentation and 
disclosure-related audit objectives 
to management assertions for 
presentation and disclosure. 


6-10 Explain the relationship between 
audit objectives and the 
accumulation of audit evidence. 











he ZZZZ Best story illustrates failure by the auditors to achieve the objectives of the audit of the company’s 

financial statements. This chapter describes the overall objectives of the audit, the auditor’s responsibilities in con- 
ducting the audit, and the specific objectives the auditor tries to accomplish. Without an understanding of these topics, 
planning and accumulating audit evidence during the audit has no relevance. Figure 6-1 summarizes the five topics that 
provide keys to understanding evidence accumulation. These are the steps used to develop specific audit objectives. 


OBJECTIVE OF CONDUCTING AN AUDIT OF FINANCIAL STATEMENTS 


OBJECTIVE 6-1 





Explain the objective of 
conducting an audit of 
financial statements and an 
audit of internal controls. 








Understand objectives 
and responsibilities 
for the audit 


ae ae 


Divide financial 
statements 
into cycles 


Know management 
assertions about 
financial statements 


Know general audit 
objectives for classes 
of transactions, 
accounts, and 
disclosures 


Know specific audit 
objectives for classes 
of transactions, 
accounts, and 
disclosures 
































Auditing standards indicate 





The purpose of an audit is to provide financial statement users with an opinion by the auditor on 
whether the financial statements are presented fairly, in all material respects, in accordance with the 
applicable financial accounting framework. 





Our primary focus is the section that emphasizes issuing an opinion on financial 
statements. For some public companies, the auditor also issues a report on internal 
control over financial reporting as required by Section 404 of the Sarbanes—Oxley 
Act. Auditors accumulate evidence in order to reach conclusions about whether the 
financial statements are fairly stated and to determine the effectiveness of internal 
control, after which they issue the appropriate audit report. 

If the auditor believes that the statements are not fairly presented or is unable to 
reach a conclusion because of insufficient evidence, the auditor has the responsibility 
of notifying users through the auditor’s report. Subsequent to their issuance, if 
facts indicate that the statements were not fairly presented as in the ZZZZ Best case, 
the auditor will probably have to demonstrate to the courts or regulatory agencies 


that t aig copipyed De Vel-telel—h ae the auditor reached reasonable 
ms. 


conclus1 


france Steps to Develop Audit Objectives 


Understand objectives and 
responsibilities for the audit 


Divide financial statements 
into cycles 


Know management assertions 
about financial statements 


Know general audit objectives 
for classes of transactions, 
accounts, and disclosures 
































Know specific audit objectives 
for classes of transactions, 
accounts, and disclosures 
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MANAGEMENT'S RESPONSIBILITIES 


The responsibility for adopting sound accounting policies, maintaining adequate OBJECTIVE 6-2 
internal control, and making fair representations in the financial statements rests with 
management rather than with the auditor. Because they operate the business daily, a 





Distinguish management's 
responsibility for the financial 


company’s management knows more about the company’s transactions and related statements and internal 
assets, liabilities, and equity than the auditor. In contrast, the auditor’s knowledge of control from the auditor's 
these matters and internal control is limited to that acquired during the audit. responsibility for verifying 


the financial statements and 
effectiveness of internal 
control. 


The annual reports of many public companies include a statement about manage- 
ment’s responsibilities and relationship with the CPA firm. Figure 6-2 presents selected 
sections of the report of management for International Business Machines (IBM) 
Corporation as a part of its annual report. Read the report carefully to determine what 
management states about its responsibilities. 

Management’s responsibility for the integrity and fairness of the representations 
(assertions) in the financial statements carries with it the privilege of determining 
which presentations and disclosures it considers necessary. If management insists on 
financial statement disclosure that the auditor finds unacceptable, the auditor can 
either issue an adverse or qualified opinion or withdraw from the engagement. 

The Sarbanes—Oxley Act requires the chief executive officer (CEO) and the chief 
financial officer (CFO) of public companies to certify the quarterly and annual financial 
statements submitted to the SEC. In signing those statements, management certifies that 
the financial statements fully comply with the requirements of the Securities Exchange 
Act of 1934 and that the information contained in the financial statements fairly 


International Business Machines Corporation's Report of 
Management 


REPORT OF MANAGEMENT 


International Business Machines Corporation and Subsidiary Companies 














Management Responsibility for Financial Information 


Responsibility for the integrity and objectivity of the financial information presented in this Annual 
Report rests with IBM management. The accompanying financial statements have been prepared 
in accordance with accounting principles generally accepted in the United States of America, 
applying certain estimates and judgments as required. 


IBM maintains an effective internal control structure. It consists, in part, of organizational arrange- 
ments with clearly defined lines of responsibility and delegation of authority, and comprehensive 
systems and control procedures. An important element of the control environment is an ongoing 
internal audit program. Our system also contains self-monitoring mechanisms, and actions are 
taken to correct deficiencies as they are identified. 


The Audit Committee of the Board of Directors is composed solely of independent, non- 
management directors, and is responsible for recommending to the Board the independent 
registered public accounting firm to be retained for the coming year, subject to stockholder 
ratification. The Audit Committee meets periodically and privately with the independent 
registered public accounting firm, with the company’s internal auditors, as well as with IBM 
management, to review accounting, auditing, internal control structure and financial reporting 








matters. 
Samuel J. Palmisano Mark Loughridge 
Chairman of the Board, Senior Vice President 
President and Chief Executive Officer Chief Financial Officer 
February 23, 2010 February 23, 2010 
e — 
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present, in all material respects, the financial condition and results of operations. The 
Sarbanes—Oxley Act provides for criminal penalties, including significant monetary 
fines or imprisonment up to 20 years, for anyone who knowingly falsely certifies those 
statements. 


AUDITOR'S RESPONSIBILITIES 





OBJECTIVE 6-3 





Explain the auditor's 
responsibility for discovering 
material misstatements. 





Auditing standards state 


iT] 

The overall objectives of the auditor are: 

(a) To obtain reasonable assurance about whether the financial statements as a whole are free from 
material misstatement, whether due to fraud or error, thereby enabling the auditor to express an 
opinion whether the financial statements are prepared, in all material respects, in accordance with 
an applicable financial reporting framework; and 

(b) To report on the financial statements, and communicate as required by auditing standards, in 
accordance with the auditor's findings. 








Va 


4 





This paragraph discusses the auditor’s responsibility for detecting material mis- 
statements in the financial statements. When the auditor also reports on the effectiveness 
of internal control over financial reporting, the auditor is also responsible for identifying 
material weaknesses in internal control over financial reporting. The auditor’s respon- 
sibilities for audits of internal control are discussed in Chapter 10. 

This paragraph and the related discussion in the standards about the auditor’s 
responsibility to detect material misstatements include several important terms and 
phrases. 


Ma Rpago! SBMHaHESD sitements are usually considered 
materialif the combined uncorrected errors and fraud in the financial statements 
would likely have changed or influenced the decisions of a reasonable person using the 
statements. Although it is difficult to quantify a measure of materiality, auditors are 
responsible for obtaining reasonable assurance that this materiality threshold has been 


satisfied. It would be extremely costly (and probably impossible) for auditors to have 
responsibility for finding all immaterial errors and fraud. 


Reasonable Assurance Assurance is a measure of the level of certainty that the auditor 
has obtained at the completion of the audit. Auditing standards indicate reasonable 
assurance is a high, but not absolute, level of assurance that the financial statements are 
free of material misstatements. The concept of reasonable, but not absolute, assurance 
indicates that the auditor is not an insurer or guarantor of the correctness of the finan- 
cial statements. Thus, an audit that is conducted in accordance with auditing standards 
may fail to detect a material misstatement. 

The auditor is responsible for reasonable, but not absolute, assurance for several 
reasons: 


1. Most audit evidence results from testing a sample of a population such as 
accounts receivable or inventory. Sampling inevitably includes some risk of 
not uncovering a material misstatement. Also, the areas to be tested; the type, 
extent, and timing of those tests; and the evaluation of test results require 
significant auditor judgment. Even with good faith and integrity, auditors can 
make mistakes and errors in judgment. 

2. Accounting presentations contain complex estimates, which inherently involve 
uncertainty and can be affected by future events. As a result, the auditor has to 
rely on evidence that is persuasive, but not convincing. 
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3. Fraudulently prepared financial statements are often extremely difficult, if not 
impossible, for the auditor to detect, especially when there is collusion among 
management. 


If auditors were responsible for making certain that all the assertions in the state- 
ments were correct, the types and amounts of evidence required and the resulting cost 
of the audit function would increase to such an extent that audits would not be 
economically practical. Even then, auditors would be unlikely to uncover all material 
misstatements in every audit. The auditor’s best defense when material misstatements 
are not uncovered is to have conducted the audit in accordance with auditing standards. 


Errors Versus Fraud Auditing standards distinguish between two types of misstate- 
ments: errors and fraud. Either type of misstatement can be material or immaterial. An 
error is an unintentional misstatement of the financial statements, whereas fraud is 
intentional. Two examples of errors are a mistake in extending price times quantity on a 
sales invoice and overlooking older raw materials in determining the lower of cost or 
market for inventory. 

For fraud, there is a distinction between misappropriation of assets, often called 
defalcation or employee fraud, and fraudulent financial reporting, often called manage- 
ment fraud. An example of misappropriation of assets is a clerk taking cash at the time a 
sale is made and not entering the sale in the cash register. An example of fraudulent 
financial reporting is the intentional overstatement of sales near the balance sheet date 
to increase reported earnings. 


Professional Skepticism Auditing standards require that an audit be designed to 
provide reasonable assurance of detecting both material errors and fraud in the 
financial statements. To accomplish this, the audit must be planned and performed 
with an attitude of professional skepticism in all aspects of the engagement. Professional 
skepticism is an attitude that includes a questioning mind and a critical assessment of 
audit evidence. Auditors should ny OutPpRaEn hares put the 
possibility of dishonesty must be conker. At the same time, auditors also should 
not assume that management is unquestionably honest. 


Auditors spend a great portion of their time planning and performing audits to detect 
unintentional mistakes made by management and employees. Auditors find a variety of 
errors resulting from such things as mistakes in calculations, omissions, misunder- 
standing and misapplication of accounting standards, and incorrect summarizations 
and descriptions. Throughout the rest of this book, we consider how the auditor plans 
and performs audits for detecting both errors and fraud. 


Auditing standards make no distinction between the auditor’s responsibilities for 
searching for errors and fraud. In either case, the auditor must obtain reasonable 
assurance about whether the statements are free of material misstatements. The 
standards also recognize that fraud is often more difficult to detect because manage- 
ment or the employees perpetrating the fraud attempt to conceal the fraud, similar to 
the ZZZZ Best case. Still, the difficulty of detection does not change the auditor’s 
responsibility to properly plan and perform the audit to detect material misstatements, 
whether caused by error or fraud. 


Fraud Resulting from Fraudulent Financial Reporting Versus Misappro- 
priation of Assets Both fraudulent financial reporting and misappropriation of 
assets are potentially harmful to financial statement users, but there is an important 
difference between them. Fraudulent financial reporting harms users by providing 
them incorrect financial statement information for their decision making. When assets 
are misappropriated, stockholders, creditors, and others are harmed because assets are 
no longer available to their rightful owners. 


Auditor's 
Responsibilities 
for Detecting 
Material Errors 


Auditor's 
Responsibilities 
for Detecting 
Material Fraud 
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CABLE MOGULS 
ARRESTED FOR 
CORPORATE 
LOOTING 





Auditor's 
Responsibilities 
for Discovering 
Illegal Acts 
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Sometimes, misappropriation of assets involves 
significant amounts and occurs at the very top of 
the organization. In 2002 the SEC charged former 
Adelphia CEO John Rigas and other Rigas family 
members with “rampant self dealing” at Adelphia 
Communications Corp. in what has been called 
one of the most extensive financial frauds ever to 
take place at a public company. According to the 
SEC complaint, the Rigas family used Adelphia 
funds to finance open market purchases of stock, 
pay off margin loans and other family debts, 
purchase timber rights, construct a golf club, and 
purchase luxury condominiums in Colorado, 
Mexico, and New York City. 

In the criminal complaint, prosecutors charged 
that the Rigas family “looted Adelphia on a 


massive scale, using the company as the Rigas 
family’s personal piggy bank, at the expense of 
public investors and creditors.” After details of 
the misappropriations and fraudulent reporting 
in the company’s financial statements became 
public, Adelphia filed for bankruptcy, and its 
stock collapsed from a price of $20 per share to 
less than $1 per share. John Rigas was convicted 
and sentenced to 15 years in prison; his son 
Timothy, the company’s former CFO, was 
sentenced to 20 years in prison. 


” 


Sources: 1. “Adelphia founder sentenced to 15 years’ 
(money.cnn.com/2005/06/20/news/newsmakers/ 
tigas_sentencing/); 2. SEC press release 2002-110 
(www.sec.gov/news/press/2002-110.htm). 


Typically, fraudulent financial reporting is committed by management, sometimes 
without the knowledge of employees. Management is in a position to make accounting 
and reporting decisions without employees’ knowledge. An example is the decision to 
omit an important footnote disclosure about pending litigation. 

Usually, but not always, theft of assets is perpetrated by employees and not by manage- 
ment, and the amounts are often immaterial. However, there are well-known examples of 
extremely material misappropriation of assets by employees and management, similar to 
the Adelphia fraud described in the shaded box at the top of this page. 

There is an important distinction between the theft of assets and misstatements 
a en the theft of assets. Consider the following three situations: 

1 


ARAGO. RODE ENRARCEHK« by misstating assets. For example, 


cash collected from a customer was stolen before it was recorded as a cash 
receipt, and the account receivable for the customer’s account was not credited. 
The misstatement has not been discovered. 

2. Assets were taken and the theft was covered by understating revenues or overstating 
expenses. For example, cash from a cash sale was stolen, and the transaction was 
not recorded. Or, an unauthorized disbursement to an employee was recorded as 
a miscellaneous expense. The misstatement has not been discovered. 

3. Assets were taken, but the misappropriation was discovered. The income 
statement and related footnotes clearly describe the misappropriation. 


In all three situations, there has been a misappropriation of assets, but the financial 
statements are misstated only in situations | and 2. In situation 1, the balance sheet is 
misstated, whereas in situation 2, revenues or expenses are misstated. 


Illegal acts are defined as violations of laws or government regulations other than 
fraud. Two examples of illegal acts are a violation of federal tax laws and a violation of 
the federal environmental protection laws. 


Direct-Effect Illegal Acts Certain violations of laws and regulations have a direct 
financial effect on specific account balances in the financial statements. For example, a 
violation of federal tax laws directly affects income tax expense and income taxes 
payable. The auditor’s responsibility for these direct-effect illegal acts is the same as for 
errors and fraud. On each audit, therefore, the auditor normally evaluates whether or 
not there is evidence available to indicate material violations of federal or state tax laws. 
To do this evaluation, the auditor might hold discussions with client personnel and 
examine reports issued by the Internal Revenue Service after completion of an exami- 
nation of the client’s tax return. 
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Indirect-Effect Illegal Acts Most illegal acts affect the financial statements only 
indirectly. For example, if the company violates environmental protection laws, 
financial statements are affected only if there is a fine or sanction. Potential material 
fines and sanctions indirectly affect financial statements by creating the need to 
disclose a contingent liability for the potential amount that might ultimately be paid. 
This is called an indirect-effect illegal act. Other examples of illegal acts that are likely 
to have only an indirect effect are violations of insider securities trading regulations, 
civil rights laws, and federal employee safety requirements. Auditing standards state 
that the auditor provides no assurance that indirect-effect illegal acts will be detected. 
Auditors lack legal expertise, and the frequent indirect relationship between illegal acts 
and the financial statements makes it impractical for auditors to assume responsibility 
for discovering those illegal acts. 
Auditors have three levels of responsibility for finding and reporting illegal acts: 


Evidence Accumulation When There Is No Reason to Believe Indirect-Effect 
Illegal Acts Exist Many audit procedures normally performed on audits to search for 
errors and fraud may also uncover illegal acts. Examples include reading the minutes of 
the board of directors and inquiring of the client’s attorneys about litigation. The 
auditor should also inquire of management about policies they have established to 
prevent illegal acts and whether management knows of any laws or regulations that the 
company has violated. Other than these procedures, the auditor should not search for 
indirect-effect illegal acts unless there is reason to believe they may exist. 


Evidence Accumulation and Other Actions When There Is Reason to Believe 
Direct- or Indirect-Effect Illegal Acts May Exist The auditor may find indications 
of possible illegal acts in a variety of ways. For example, the minutes may indicate 
that an investigation by a government agency is in process or the auditor may have 
identified unusually large payments to consultants or government officials. 


When the auditor believes that ay illegal act m iB oceytred, several actions are 
necessary to determine whether the ADA .P ie BaHaneS r 
1. The auditor should first inquire of management at a level above those likely to 
be involved in the potential illegal act. 
2. The auditor should consult with the client’s legal counsel or other specialist 
who is knowledgeable about the potential illegal act. 


3. The auditor should consider accumulating additional evidence to determine 
whether there actually is an illegal act. 


Actions When the Auditor Knows of an Illegal Act The first course of action when 
an illegal act has been identified is to consider the effects on the financial statements, 
including the adequacy of disclosures. These effects may be complex and difficult to 
resolve. For example, a violation of civil rights laws could involve significant fines, but it 
could also result in the loss of customers or key employees, which could materially affect 
future revenues and expenses. If the auditor concludes that the disclosures relative to 
an illegal act are inadequate, the auditor should modify the audit report accordingly. 

The auditor should also consider the effect of such illegal acts on the CPA firm’s 
relationship with management. If management knew of the illegal act and failed to 
inform the auditor, it is questionable whether management can be believed in other 
discussions. 

The auditor should communicate with the audit committee or others of equivalent 
authority to make sure that they know of the illegal act. The communication can be oral 
or written. If it is oral, the nature of the communication and discussion should be docu- 
mented in the audit files. If the client either refuses to accept the auditor’s modified 
report or fails to take appropriate remedial action concerning the illegal act, the auditor 
may find it necessary to withdraw from the engagement. If the client is publicly held, the 
auditor must also report the matter directly to the SEC. Such decisions are complex and 
normally involve consultation by the auditor with the auditor’s legal counsel. 
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FINANCIAL STATEMENT CYCLES 


OBJECTIVE 6-4 





Classify transactions and 
account balances into 
financial statement cycles 
and identify benefits of a 
cycle approach to 
segmenting the audit. 





Cycle Approach to 
Segmenting an Audit 


Audits are performed by dividing the financial statements into smaller segments or 
components. The division makes the audit more manageable and aids in the assign- 
ment of tasks to different members of the audit team. For example, most auditors treat 
fixed assets and notes payable as different segments. Each segment is audited separately 
but not on a completely independent basis. (For example, the audit of fixed assets may 
reveal an unrecorded note payable.) After the audit of each segment is completed, 
including interrelationships with other segments, the results are combined. A con- 
clusion can then be reached about the financial statements taken as a whole. 

There are different ways of segmenting an audit. One approach is to treat every 
account balance on the statements as a separate segment. Segmenting that way is usually 
inefficient. It would result in the independent audit of such closely related accounts as 
inventory and cost of goods sold. 


A common way to divide an audit is to keep closely related types (or classes) of trans- 
actions and account balances in the same segment. This is called the cycle approach. 
For example, sales, sales returns, cash receipts, and charge-offs of uncollectible 
accounts are the four classes of transactions that cause accounts receivable to increase 
and decrease. Therefore, they are all parts of the sales and collection cycle. Similarly, 
payroll transactions and accrued payroll are parts of the payroll and personnel cycle. 

The logic of using the cycle approach is that it ties to the way transactions are 
recorded in journals and summarized in the general ledger and financial statements. 
Figure 6-3 shows that flow. To the extent that it is practical, the cycle approach 
combines transactions recorded in different journals with the general ledger balances 
that se from those transactions. 

pag. used 1 5) re an vet} xe are then explained in detail. Note 

dda e Qok eS fe or more later chapters address the 
audit of a soa 


hewasar Transaction Flow from Journals to Financial Statements 
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* Sales and collection cycle 
* Acquisition and payment cycle 
* Payroll and personnel cycle 


* Inventory and warehousing cycle 
* Capital acquisition and repayment cycle 


Figure 6-4 (p. 150) illustrates the application of cycles to audits using the 
December 31, 2011, trial balance for Hillsburg Hardware Company. (The financial 
statements prepared from this trial balance are included in the glossy insert to the 
textbook.) A trial balance is used to prepare financial statements and is a primary focus 
of every audit. Prior-year account balances are usually included for comparative 
purposes, but are excluded from Figure 6-4 in order to focus on transaction cycles. The 
letter representing a cycle is shown for each account in the left column beside the 
account name. Observe that each account has at least one cycle associated with it, and 
only cash and inventory are a part of two or more cycles. 

The accounts for Hillsburg Hardware Co. are summarized in Table 6-1 (p. 151) by 
cycle, and include the related journals and financial statements in which the accounts 
appear. The following observations expand on the information contained in Table 6-1. 


* All general ledger accounts and journals for Hillsburg Hardware Co. are included 
at least once. For a different company, the number and titles of journals and 
general ledger accounts will differ, but all will be included. 

* Some journals and general ledger accounts are included in more than one cycle. 
When that occurs, it means that the journal is used to record transactions from 
more than one cycle and indicates a tie-in between the cycles. The most important 
general ledger account included in and affecting several cycles is general cash 
(cash in bank). General cash connects most cycles. 

* The sales and collection cycle is the first cycle listed and is a primary focus on 
most audits. Collections on trade accounts receivable in the cash receipts journal 
is the primary operating inflow to cash in the bank. 

* The capital acquisition and rgy OPP Pcl Ris tildoribe egeisition 
and payment cycle. Transactior$ in fhe acquisition and payment cycle include 
the purchase of inventory, supplies, and other goods and services related to 
operations. Transactions in the capital acquisition and repayment cycle are 
related to financing the business, such as issuing stock or debt, paying dividends, 
and repaying debt. 

Although the same journals are used for transactions in the acquisition and 
payment and capital acquisition and repayment cycles, it is useful to separate capital 
acquisition and repayment cycle transactions into a separate transaction cycle. 
First, capital acquisitions and repayments relate to financing the business, rather 
than operations. Second, most capital acquisition and repayment cycle accounts 
involve few transactions, but each is often highly material and therefore should be 
audited extensively. Considering both reasons, it is more convenient to separate 
the two cycles. 

* The inventory and warehousing cycle is closely related to all other cycles, 
especially for a manufacturing company. The cost of inventory includes raw 
materials (acquisition and payment cycle), direct labor (payroll and personnel 
cycle), and manufacturing overhead (acquisition and payment and payroll and 
personnel cycles). The sale of finished goods involves the sales and collection 
cycle. Because inventory is material for most manufacturing companies, it is 
common to borrow money using inventory as security. In those cases, the capital 
acquisition and repayment cycle is also related to inventory and warehousing. 
Inventory is included as a separate cycle both because it is related to other 
cycles and because for most manufacturing and retail companies inventory is 
usually highly material, there are unique systems and controls for inventory, 
and inventory is often complex to audit. 
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Hillsburg Hardware Co. Adjusted Trial Balance 





HILLSBURG HARDWARE CO. 
TRIAL BALANCE 
December 31, 2011 


Cash in bank 

Trade accounts receivable 
Allowance for uncollectible accounts 
Other accounts receivable 
Inventories 

Prepaid expenses 

Land 

Buildings 

Computer and other equipment 
Furniture and fixtures 
Accumulated depreciation 
Trade accounts payable 

Notes payable 

Accrued payroll 

Accrued payroll taxes 

Accrued interest 

Dividends payable 

Accrued income tax 

Long-term notes payable 
Deferred tax 

Other accrued payables 

Capital stock 

Capital in excess of par value 
Retained earnings 

Sales 

Sales returns and allowances 
Cost of goods sold 

Salaries and commissions 

Sales payroll taxes 

Travel and entertainment-—selling 
Advertising 

Sales and promotional literature 
Sales meetings and training 
Miscellaneous sales expense 
Executive and office salaries 
Administrative payroll taxes 
Travel and entertainment—administrative 
Computer maintenance and supplies 
Stationery and supplies 

Postage 

Telephone and fax 

Rent 

Legal fees and retainers 
Auditing and related services 
Depreciation 

Bad debt expense 

Insurance 

Office repairs and maintenance 
Miscellaneous office expense 
Miscellaneous general expense 
Gain on sale of assets 

Income taxes 

Interest expense 

Dividends 





Debit Credit 

$ 827,568 
20,196,800 

$ 1,240,000 
945,020 
29,864,621 
431,558 
3,456,420 
32,500,000 
3,758,347 
2,546,421 

31,920,126 

4,719,989 

4,179,620 

1,349,800 

119,663 

149,560 

1,900,000 

795,442 

24,120,000 

738,240 

829,989 

5,000,000 

3,500,000 

11,929,075 

144,327,789 
1,241,663 
103,240,768 
7,738,900 
1,422,100 
1,110,347 
2,611,263 
321,620 
924,480 
681,041 
5,523,960 
682,315 
561,680 
860,260 
762,568 
244,420 
722,315 
312,140 
383,060 
302,840 
1,452,080 
3,323,084 
722,684 
843,926 
643,680 
323,842 

719,740 
1,746,600 
2,408,642 
1,900,000 

$237,539,033 $237,539,033 











Note: Letters in the left-hand column refer to the following transaction cycles: 
| = Inventory and warehousing 
C = Capital acquisition and repayment 


S = Sales and collection 
A = Acquisition and payment 


P= Payroll and personnel 
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~ 
Cycles Applied to Hillsburg Hardware Co. 
General Ledger Accounts Included 
Journals Included in the Cycle (See Figure 6-4) 
in the Cycle 
Cycle (See Figure 6-3, p. 148) Balance Sheet Income Statement 
Sales Sales journal Cash in bank Sales 
and collection Cash receipts journal Trade accounts receivable Sales returns and allowances 
General journal Other accounts receivable Bad debt expense 
Allowance for uncollectible accounts 
Acquisition Acquisitions journal Cash in bank AdvertisingS 
and payment Cash disbursements journal Inventories Travel and entertainment 
General journal Prepaid expenses Sales meetings and training® 
Land Sales and promotional literature® 
Buildings Miscellaneous sales expense® 
Computer and other equipment Travel and entertainment" 
Furniture and fixtures Stationery and supplies“ 
Accumulated depreciation Postage’ 
Trade accounts payable Telephone and fax* 
Other accrued payables Computer maintenance and suppliesA 
Accrued income tax Depreciation’ 
Deferred tax Rent’ 
Legal fees and retainers" 
Auditing and related services“ 
Insurance’ 
Office repairs and maintenance 
expense” 
Miscellaneous office expense’ 
Miscellaneous general expense’ 
Gain on sale of assets 
Income taxes 
Payroll Payroll journal Cash in bank Salaries and commissions® 
and personnel General journal Accrued payroll Sales payroll taxes® 
Accrued payroll taxes Executive and office salaries” 
Administrative payroll taxes‘ 
Inventory Acquisitions journal Inventories Cost of goods sold 
and warehousing Sales journal 
General journal 
Capital acquisition Acquisitions journal Cash in bank Interest expense 
and repayment Cash disbursements journal Notes payable 
General journal Long-term notes payable 
Accrued interest 
Capital stock 
Capital in excess of par value 
Retained earnings 
Dividends 
Dividends payable 
XN y 
S = Selling expense; A = general and administrative expense. 
Figure 6-5 (p. 152) illustrates the relationships of the five cycles and general cash. Note Relationships 


that cycles have no beginning or end except at the origin and final disposition of a 


Among Cycles 


company. A company begins by obtaining capital, usually in the form of cash. In a 
manufacturing company, cash is used to acquire raw materials, fixed assets, and related 
goods and services to produce inventory (acquisition and payment cycle). Cash is also 
used to acquire labor for the same reason (payroll and personnel cycle). Acquisition 
and payment and payroll and personnel are similar in nature, but the functions are 
sufficiently different to justify separate cycles. The combined result of these two cycles 
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is inventory (inventory and warehousing cycle). At a subsequent point, the inventory is 
sold and billings and collections result (sales and collection cycle). The cash generated 
is used to pay dividends and interest or finance capital expansion and to start the cycles 
again. The cycles interrelate in much the same way in a service company, where there 
will be billings and collections, although there will be no inventory. 

Transaction cycles are an important way to organize audits. For the most part, 
auditors treat each cycle separately during the audit. Although auditors need to 
consider the interrelationships between cycles, they typically treat cycles independently 
to the extent practical to manage complex audits effectively. 


SETTING AUDIT OBJECTIVES 





OBJECTIVE 6-5 


Describe why the auditor 
obtains a combination of 
assurance by auditing classes 
of transactions and ending 
balances in accounts, 
including presentation and 
disclosure. 








Auditors conduct financial statement audits using the cycle approach by performing 
audit tests of the transactions making up ending balances and also by performing audit 
tests of the account balances and related disclosures. Figure 6-6 illustrates this concept 
by showing the four classes of transactions that determine the ending balance in 
accounts receivable for Hillsburg Hardware Co. Assume that the beginning balance of 
$17,521 (thousand) was audited in the prior year and is therefore considered fairly 
stated. If the auditor could be completely sure that each of the four classes of trans- 
actions is correctly stated, the auditor could also be sure that the ending balance of 




















y 
Balances and Transactions Affecting Those Balances 
for Accounts Receivable 
Accounts Receivable (in thousands) 
Beginning 
balance $ 17,521 
$144,328 $137,087 Cash receipts 
$ 1,242 Sales returns and allowances 
S535 25 Charge-off of uncollectible accounts 
Ending 
balance $ 20,197 
e 4 
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$20,197 (thousand) is correctly stated. But it is almost always impractical for the auditor 
to obtain complete assurance about the correctness of each class of transactions, 
resulting in less than complete assurance about the ending balance in accounts 
receivable. In almost all audits, overall assurance can be increased by also auditing the 
ending balance of accounts receivable. Auditors have found that, generally, the most 
efficient and effective way to conduct audits is to obtain some combination of assurance 
for each class of transactions and for the ending balance in the related accounts. 

For any given class of transactions, several audit objectives must be met before the 
auditor can conclude that the transactions are properly recorded. These are called 
transaction-related audit objectives in the remainder of this book. For example, there 
are specific sales transaction-related audit objectives and specific sales returns and 
allowances transaction-related audit objectives. 

Similarly, several audit objectives must be met for each account balance. These are 
called balance-related audit objectives. For example, there are specific accounts receivable 
balance-related audit objectives and specific accounts payable balance-related audit 
objectives. We show later in this chapter that the transaction-related and balance- 
related audit objectives are somewhat different but closely related. 

The third category of audit objectives relates to the presentation and disclosure of 
information in the financial statements. These are called presentation and disclosure- 
related audit objectives. For example, there are specific presentation and disclosure- 
related audit objectives for accounts receivable and notes payable. 

Throughout this text, the term audit objectives refers to transaction-related, 
balance-related, and presentation and disclosure-related audit objectives. Before exam- 
ining audit objectives in more detail, we first deal with management assertions. 


Management assertions are implied or expressed representations by management 
about classes of transactions and the related accounts and disclosures in the financial 
statements. In most cases they are implied. Examine Figure 6-4 on page 150. Manage- 
ment of Hillsburg Hardware Co. asserts that cash of $827,568 was present in the 
company’s bank accounts as of the balance sheet date. Unless otherwise disclosed in the 
financial statements, management also asserts that the cash was unrestricted and avail- 
able for normal use. Management also asserts that all required disclosures related to cash 
are accurate and are understandable. Similar assertions exist for each asset, liability, 
owners’ equity, revenue, and expense item in the financial statements. These assertions 
apply to classes of transactions, account balances, and presentation and disclosures. 

Management assertions are directly related to the financial reporting framework 
used by the company (usually U.S. GAAP or IFRS), as they are part of the criteria that 
management uses to record and disclose accounting information in financial statements. 
The definition of auditing in Chapter 1, in part, states that auditing is a comparison of 
information (financial statements) to established criteria (assertions established 
according to accounting standards). Auditors must therefore understand the assertions 
to do adequate audits. 

International auditing standards and U.S. GAAS classify assertions into three 
categories: 


1. Assertions about classes of transactions and events for the period under audit 
2. Assertions about account balances at period end 
3. Assertions about presentation and disclosure 


The specific assertions included in each category are included in Table 6-2 (p. 154). 
The assertions are grouped so that assertions related across categories of assertions are 
included on the same table row. 


OBJECTIVE 6-6 


MANAGEMENT ASSERTIONS 


Distinguish among the three 


categories of management 
assertions about financial 
information. 
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TABLE 6-2 





Management Assertions for Each Category of Assertions 





Assertions About 
Classes of Transactions and Events 


Assertions About 
Account Balances 


Assertions About 
Presentation and Disclosure 





Occurrence — Transactions and 
events that have been recorded have 
occurred and pertain to the entity. 


Existence — Assets, liabilities, and 
equity interests exist. 


Occurrence and rights and obligations — 
Disclosed events and transactions have 
occurred and pertain to the entity. 





Completeness — All transactions 
and events that should have been 
recorded have been recorded. 


Completeness — All assets, liabilities, 
and equity interests that should have 
been recorded have been recorded. 


Completeness — All disclosures that 
should have been included in the 
financial statements have been included. 





Accuracy —Amounts and other data 
relating to recorded transactions 
and events have been recorded 
appropriately. 


Valuation and allocation — Assets, 
liabilities, and equity interests are included 
in the financial statements at appropriate 
amounts and any resulting valuation 
adjustments are appropriately recorded. 


Accuracy and valuation — Financial 
and other information are disclosed 
appropriately and at appropriate 
amounts. 





Classification — Transactions and 
events have been recorded in the 
proper accounts. 


Classification and understandability — 
Financial and other information is 
appropriately presented and described 
and disclosures are clearly expressed. 





Cutoff —Transactions and events 
have been recorded in the correct 


accounting period. 








Rights and obligations —The entity 
holds or controls the rights to assets, and 
liabilities are the obligation of the entity. 








x 

Apago PDF Enhancer | 
Assertions Management makes several assertions about transactions. These assertions also apply 
About Classes to other events that are reflected in the accounting records, such as recording depre- 
of Transactions ciation and recognizing pension obligations. 
and Events Occurrence The occurrence assertion concerns whether recorded transactions in- 





Understand objectives 
and responsibilities 
for the audit 








Divide financial 
statements 
into cycles 








Know management 
assertions about 
financial statements 








Know general audit 
objectives for classes 
of transactions, 
accounts, and 
disclosures 











Know specific audit 
objectives for classes 
of transactions, 
accounts, and 








cluded in the financial statements actually occurred during the accounting period. For 
example, management asserts that recorded sales transactions represent exchanges of 
goods or services that actually took place. 


Completeness This assertion addresses whether all transactions that should be included 
in the financial statements are in fact included. For example, management asserts that 
all sales of goods and services are recorded and included in the financial statements. 

The completeness assertion addresses matters opposite from the occurrence 
assertion. The completeness assertion is concerned with the possibility of omitting trans- 
actions that should have been recorded, whereas the occurrence assertion is concerned 
with inclusion of transactions that should not have been recorded. Thus, violations of 
the occurrence assertion relate to account overstatements, whereas violations of the 
completeness assertion relate to account understatements. The recording of a sale that 
did not take place is a violation of the occurrence assertion, whereas the failure to record 
a sale that did occur is a violation of the completeness assertion. 


Accuracy The accuracy assertion addresses whether transactions have been recorded 
at correct amounts. Using the wrong price to record a sales transaction and an error in 
calculating the extensions of price times quantity are examples of violations of the 
accuracy assertion. 


Classification The classification assertion addresses whether transactions are 


disclosures recorded in the appropriate accounts. Recording administrative salaries in cost of sales 
is one example of a violation of the classification assertion. 
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Cutoff The cutoff assertion addresses whether transactions are recorded in the proper 
accounting period. Recording a sales transaction in December when the goods were 
not shipped until January violates the cutoff assertion. 


Assertions about account balances at year-end address existence, completeness, valuation 
and allocation, and rights and obligations. 


Existence The existence assertion deals with whether assets, liabilities, and equity 
interests included in the balance sheet actually existed on the balance sheet date. For 
example, management asserts that merchandise inventory included in the balance 
sheet exists and is available for sale at the balance sheet date. 


Completeness This assertion addresses whether all accounts and amounts that 
should be presented in the financial statements are in fact included. For example, 
management asserts that notes payable in the balance sheet include all such obligations 
of the entity. 

The completeness assertion addresses matters opposite from the existence assertion. 
The completeness assertion is concerned with the possibility of omitting items from 
the financial statements that should have been included, whereas the existence 
assertion is concerned with inclusion of amounts that should not have been included. 
Thus, violations of the existence assertion relate to account overstatements, whereas 
violations of the completeness assertion relate to account understatements. Inclusion 
of a receivable for a customer that does not exist violates the existence assertion, whereas 
the failure to include a receivable from a customer violates the completeness assertion. 


Valuation and Allocation The valuation and allocation assertion deals with whether 
assets, liabilities, and equity interests have been included in the financial statements at 
appropriate amounts, including any valuation adjustments to reflect asset amounts at 
net realizable value. For example, management asserts that property is recorded at 
historical cost and that such cost is page., d riate een 
periods through depreciation. sin webhang EXcounts 
receivable included in the balance sheet are ee at net realizable value. 


Rights and Obligations This assertion addresses whether assets are the rights of the 
entity and whether liabilities are the obligations of the entity at a given date. For 
example, management asserts that assets are owned by the company or that amounts 
capitalized for leases in the balance sheet represent the cost of the entity’s rights to leased 
property and that the corresponding lease liability represents an obligation of the entity. 


With increases in the complexity of transactions and the need for expanded disclosures 
about these transactions, assertions about presentation and disclosure have increased in 
importance. These assertions include occurrence and rights and obligations, complete- 
ness, accuracy and valuation, and classification and understandability. 


Occurrence and Rights and Obligations This assertion addresses whether 
disclosed events have occurred and are the rights and obligations of the entity. For 
example, if the client discloses that it has acquired another company, it asserts that the 
transaction has been completed. 


Completeness This assertion deals with whether all required disclosures have been in- 
cluded in the financial statements. As an example, management asserts that all material 
transactions with related parties have been disclosed in the financial statements. 


Accuracy and Valuation The accuracy and valuation assertion deals with whether 
financial information is disclosed fairly and at appropriate amounts. Management’s 
disclosure of the amount of unfunded pension obligations and the assumptions 
underlying these amounts is an example of this assertion. 


Classification and Understandability This assertion relates to whether amounts 
are appropriately classified in the financial statements and footnotes, and whether the 


Assertions About 
Account Balances 


Assertions 
About Presentation 
and Disclosure 
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PCAOB 
ASSERTIONS 





As noted in Chapter 2, the PCAOB establishes ¢ Valuation or allocation 
auditing standards for audits of U.S public @ Rights and obligations 
companies, and the PCAOB adopted existing @ Presentation and disclosure 


auditing standards established by the ASB as of 
April 2003 as interim standards. As a result, 
PCAOB standards currently include only the five 
assertions included in the interim standards 
(AU 326). These five assertions are: 


These assertions are similar to the U.S. GAAS 
assertions as the first three assertions are 
applicable to account balances and classes of 
transactions. Presentation and disclosure is 
treated as a single assertion. 
® Existence or occurrence Source: Public Company Accounting Oversight 
¢ Completeness Board (www.pcaobus.org/Standards/Auditing). 





balance descriptions and related disclosures are understandable. For example, manage- 
ment asserts that the classification of inventories as finished goods, work-in-process, 
and raw materials is appropriate, and the disclosures of the methods used to value 
inventories are understandable. 


Auditors may use different terms to express the management assertions as long as 
all the aspects included in Table 6-2 (p. 154) are addressed. The auditor should con- 
sider the relevance of each assertion for each significant class of transactions, account 
balance, and presentation and disclosure. Relevant assertions have a meaningful bearing 
on whether the account is fairly stated and are used to assess the risk of material mis- 
statement and the design and performance of audit procedures. For example, valuation 
is likely to be a relevant assertion for accounts receivable, but not for cash. 

After the relevant assertions have been identified, the auditor can then develop 
audit objectives for each category of assertions. The auditor’s audit objectives follow 
and are closely related to management assertions. That is not surprising because the 
auditor’s primary responsibility is to determine whether management assertions about 
finan AP e&gots PDEAiknhance ning audit objectives, rather than the 
assertions, is to provide a framework to help the auditor accumulate sufficient appro- 
priate evidence and decide the proper evidence to accumulate given the circumstances 
of the engagement. The objectives remain the same from audit to audit, but the evidence 
varies, depending on the circumstances. 


TRANSACTION-RELATED AUDIT OBJECTIVES 


OBJECTIVE 6-7 





Link the six general 
transaction-related audit 
objectives to management 
assertions for classes of 
transactions. 





General 
Transaction-Related 
Audit Objectives 


The auditor’s transaction-related audit objectives follow and are closely related to 
management’s assertions about classes of transactions. There is a difference between 
general transaction-related audit objectives and specific transaction-related audit 
objectives for each class of transactions. The six general transaction-related audit 
objectives discussed here are applicable to every class of transactions and are stated in 
broad terms. Specific transaction-related audit objectives are also applied to each class 
of transactions but are stated in terms tailored to a specific class of transactions, such as 
sales transactions. Once the auditor establishes general transaction-related audit 
objectives, they can be used to develop specific transaction-related audit objectives for 
each class of transactions being audited. 


Occurrence—Recorded Transactions Exist This objective deals with whether 
recorded transactions have actually occurred. Inclusion of a sale in the sales journal 
when no sale occurred violates the occurrence objective. This objective is the auditor’s 
counterpart to the management assertion of occurrence for classes of transactions. 


Completeness—Existing Transactions Are Recorded This objective deals with 
whether all transactions that should be included in the journals have actually been 
included. Failure to include a sale in the sales journal and general ledger when a sale 
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occurred violates the completeness objective. This objective is the counterpart to the 
management assertion of completeness for classes of transactions. 

The occurrence and completeness objectives emphasize opposite audit concerns. 
Occurrence deals with potential overstatement; completeness with unrecorded trans- 
actions (understatement). 


Accuracy—Recorded Transactions Are Stated at the Correct Amounts This 
objective addresses the accuracy of information for accounting transactions and is one 
part of the accuracy assertion for classes of transactions. For sales transactions, this 
objective is violated if the quantity of goods shipped was different from the quantity 
billed, the wrong selling price was used for billing, extension or adding errors occurred 
in billing, or the wrong amount was included in the sales journal. 

It is important to distinguish between accuracy and occurrence or completeness. For 
example, if a recorded sales transaction should not have been recorded because the ship- 
ment was on consignment, the occurrence objective has been violated, even if the amount 
of the invoice was accurately calculated. If the recorded sale was for a valid shipment but 
the amount was calculated incorrectly, there is a violation of the accuracy objective but 
not of occurrence. The same relationship exists between completeness and accuracy. 


Posting and Summarization—Recorded Transactions Are Properly Included 
in the Master Files and Are Correctly Summarized This objective deals with the 
accuracy of the transfer of information from recorded transactions in journals to 
subsidiary records and the general ledger. It is part of the accuracy assertion for classes 
of transactions. For example, if a sales transaction is recorded in the wrong customer’s 
record or at the wrong amount in the master file or the sum of all sales transactions 
posted from the sales journal to the general ledger is inaccurate, this objective is 
violated. Because the posting of transactions from journals to subsidiary records, the 
general ledger, and other related master files is typically cee wane automatically by 


computerized accounting ‘ystem a the ag of 3. BE 34 error ra osting is 
minimal. Once the auditor can est RA Be nhan, perly, 
there is a reduced concern about posting i errors. 


Classification—Transactions Included in the Client’s Journals Are Properly 
Classified This objective addresses whether transactions are included in the appro- 
priate accounts, and is the auditor’s counterpart to management’s classification assertion 
for classes of transactions. Examples of misclassifications for sales are including cash 
sales as credit sales, recording a sale of operating fixed assets as revenue, and misclassi- 
fying commercial sales as residential sales. 


Timing—Transactions Are Recorded on the Correct Dates The timing objective 
for transactions is the auditor’s counterpart to management's cutoff assertion. A timing 
error occurs if a transaction is not recorded on the day it took place. A sales transaction, 
for example, should be recorded on the date of shipment. 


After the general transaction-related audit objectives are determined, specific trans- 
action-related audit objectives for each material class of transactions can be developed. 
Such classes of transactions typically include sales, cash receipts, acquisitions of goods 
and services, payroll, and so on. At least one specific transaction-related audit objective 
should be included for each general transaction-related audit objective unless the 
auditor believes that the general transaction-related audit objective is not relevant or is 
unimportant in the circumstances. 


Table 6-3 (p. 158) illustrates the relationships among management assertions, the 
general transaction-related audit objectives, and specific transaction-related audit 
objectives as applied to sales for Hillsburg Hardware Co. Notice that there is a one-to- 
one relationship between assertions and objectives, except for the accuracy assertion. 
The accuracy assertion has two objectives because of the need to provide auditors with 
guidance in testing transaction accuracy. 
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TABLE 6-3 Hillsburg Hardware Co.: Management Assertions and Transaction- 
Related Audit Objectives Applied to Sales Transactions 





Management Assertions 
About Classes of 
Transactions and Events 


General Transaction- 
Related Audit Objectives 


Specific Sales Transaction- 
Related Audit Objectives 





Occurrence 


Occurrence 


Recorded sales are for shipments made 
to nonfictitious customers. 





Completeness 


Completeness 


Existing sales transactions are recorded. 





Accuracy 


Accuracy 


Recorded sales are for the amount of 


goods shipped and are correctly 
billed and recorded. 

Sales transactions are properly included 
in the master file and are correctly 
summarized. 


Posting and summarization 





Classification Classification Sales transactions are properly classified. 





Sales transactions are recorded on the 
correct dates. 


Cutoff Timing 











BALANCE-RELATED AUDIT OBJECTIVES 


S 


OBJECTIVE 6-8 


Link the eight general 
balance-related audit 


objectives to management 
assertions for account 
balances. 


General 
Balance-Related 
Audit Objectives 





Balance-related audit objectives are similar to the transaction-related audit objectives 
just discussed. They also follow from management assertions and they provide a frame- 
work to help the auditor accumulate sufficient appropriate evidence related to account 
balances. There are also both general and specific balance-related audit objectives. 

TADS two “p es between balance-related and transaction-related audit 
objec cohen DE. BHHARCESE os audit objectives are applied to 
account balances such as accounts receivable and inventory rather than classes of trans- 
actions such as sales transactions and purchases of inventory. Second, there are eight 
balance-related audit objectives compared to six transaction-related audit objectives. 

Because of the way audits are performed, balance-related audit objectives are almost 
always applied to the ending balance in balance sheet accounts, such as accounts 
receivable, inventory, and notes payable. However, some balance-related audit objectives 
are applied to certain income statement accounts. These usually involve nonroutine 
transactions and unpredictable expenses, such as legal expense or repairs and main- 
tenance. Other income statement accounts are closely related to balance sheet accounts 
and are tested simultaneously, such as depreciation expense with accumulated deprecia- 
tion and interest expense with notes payable. 

When using the balance-related audit objectives to audit account balances, the 
auditor accumulates evidence to verify detail that supports the account balance, rather 
than verifying the account balance itself. For example, in auditing accounts receivable, 
the auditor obtains a listing of the accounts receivable master file that agrees to the 
general ledger balance (see page 527 for an illustration). The accounts receivable 
balance-related audit objectives are applied to the customer accounts in that listing. 


Throughout the following discussion of the eight balance-related audit objectives, we 
make references to a supporting schedule, by which we mean a client-provided schedule 
or electronic file, such as the list of accounts receivable just discussed. 


Existence—Amounts Included Exist This objective deals with whether the amounts 
included in the financial statements should actually be included. For example, inclusion 
of an account receivable from a customer in the accounts receivable trial balance when 
there is no receivable from that customer violates the existence objective. This objective is 
the auditor’s counterpart to the management assertion of existence for account balances. 
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Completeness—Existing Amounts Are Included This objective deals with 
whether all amounts that should be included have actually been included. Failure to 
include an account receivable from a customer in the accounts receivable trial balance 
when a receivable exists violates the completeness objective. This objective is the 
counterpart to the management assertion of completeness for account balances. 

The existence and completeness objectives emphasize opposite audit concerns. 
Existence deals with potential overstatement; completeness deals with unrecorded 
amounts (understatement). 


Accuracy—Amounts Included Are Stated at the Correct Amounts The accuracy 
objective refers to amounts being included at the correct amount. An inventory item 
on a client’s inventory listing can be wrong because the number of units of inventory 
on hand was misstated, the unit price was wrong, or the total was incorrectly extended. 
Each of these violates the accuracy objective. Accuracy is one part of the valuation and 
allocation assertion for account balances. 


Classification—Amounts Included in the Client’s Listing are Properly 
Classified Classification involves determining whether items included on a client’s 
listing are included in the correct general ledger accounts. For example, on the 
accounts receivable listing, receivables must be separated into short-term and long- 
term, and amounts due from affiliates, officers, and directors must be classified 
separately from amounts due from customers. Classification is also part of the 
valuation and allocation assertion. The classification balance-related audit objective is 
closely related to the presentation and disclosure-related audit objectives, but relates to 
how balances are classified in general ledger accounts so they can be appropriately 
presented and disclosed in the financial statements. 


Cutoff—Transactions Near the Balance Sheet Date Are Recorded in the 
Proper Period In testing for cutoff of account balances, the auditor’s objective is to 
determine whether transactions areAPaAg Qd PREd E NMRE in the 
proper period. An account balance is likely to be misstated by those transactions 
recorded near the end of the accounting period. For an annual audit this is as of the 
balance sheet date. Cutoff tests can be thought of as a part of verifying either the balance 
sheet accounts or the related transactions, but for convenience, auditors usually 
perform them as a part of auditing balance sheet accounts. For this reason, we also 
include cutoff as a balance-related audit objective related to the valuation and allocation 
assertion for account balances. The timing objective for transactions deals with the 
proper timing of recording transactions throughout the year, whereas the cutoff objec- 
tive for balance-related audit objectives relates only to transactions near year-end. For 
example, in a December 31 year-end audit, a sales transaction recorded in March for a 
February shipment is a transaction-related audit objective error, but not a balance- 
related audit objective error. 


Detail Tie-In—Details in the Account Balance Agree with Related Master File 
Amounts, Foot to the Total in the Account Balance, and Agree with the Total in 
the General Ledger Account balances on financial statements are supported by 
details in master files and schedules prepared by clients. The detail tie-in objective is 
concerned that the details on lists are accurately prepared, correctly added, and agree 
with the general ledger. For example, individual accounts receivable on a listing of 
accounts receivable should be the same in the accounts receivable master file, and the 
total should equal the general ledger control account. Detail tie-in is also a part of the 
valuation and allocation assertion for account balances. 


Realizable Value—Assets Are Included at the Amounts Estimated to Be 
Realized This objective concerns whether an account balance has been reduced for 
declines from historical cost to net realizable value or when accounting standards 
require fair market value accounting treatment. Examples when the objective applies 
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Specific 
Balance-Related 
Audit Objectives 


Relationships 
Among Management 
Assertions and 
Balance-Related 
Audit Objectives 





TABLE 6-4 Hillsburg Hardware Co.: Management Assertions and Balance- ) 
Related Audit Objectives Applied to Inventory 














Management General Specific Balance-Related 

Assertions About Balance-Related Audit Objectives 

Account Balances Audit Objectives Applied to Inventory 

Existence Existence All recorded inventory exists at the balance 
sheet date. 

Completeness Completeness All existing inventory has been counted and 
included in the inventory summary. 

Valuation Accuracy Inventory quantities on the client's perpetual 

and allocation records agree with items physically on hand. 
Prices used to value inventories are materially 

correct. 


Extensions of price times quantity are correct 
and details are correctly added. 











Classification Inventory items are properly classified as to raw 
materials, work in process, and finished goods. 

Cutoff Purchase cutoff at year-end is proper. 

Sales cutoff at year-end is proper. 

Detail tie-in Total of inventory items agrees with general ledger. 

Realizable value Inventories have been written down where net 
realizable value is impaired. 

Rights Rights The company has title to all inventory items listed. 
and obligations and obligations Inventories are not pledged as collateral. 
= 4 





are considering the adequacy of the allowance for uncollectible accounts receivable 
and write-downs of BE En bsolescence. The objective applies only to asset 


accouARagaleDE: ADNGCKd allocation assertion for account 


balances. 


Rights and Obligations In addition to existing, most assets must be owned before 
it is acceptable to include them in the financial statements. Similarly, liabilities must 
belong to the entity. Rights are always associated with assets and obligations with 
liabilities. This objective is the auditor’s counterpart to the management assertion of 
rights and obligations for account balances. 


The same as for transaction related-audit objectives, after the general balance-related 
audit objectives are determined, specific balance-related audit objectives for each 
account balance on the financial statements can be developed. At least one specific 
balance-related audit objective should be included for each general balance-related 
audit objective unless the auditor believes that the general balance-related audit 
objective is not relevant or is unimportant for the account balance being considered. 
There may be more than one specific balance-related audit objective for a general 
balance-related audit objective. For example, specific balance-related audit objectives 
for rights and obligations of the inventory of Hillsburg Hardware Co. could include 
(1) the company has title to all inventory items listed and (2) inventory is not pledged 
as collateral for a loan unless it is disclosed. 


Table 6-4 illustrates the relationships among management assertions, the general 
balance-related audit objectives, and specific balance-related audit objectives as 
applied to inventory for Hillsburg Hardware Co. Notice that there is a one-to-one 
relationship between assertions and objectives, except for the valuation and allocation 
assertion. The valuation and allocation assertion has multiple objectives because of 
the complexity of valuation issues and the need to provide auditors with additional 
guidance for testing valuation. 
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PRESENTATION AND DISCLOSURE-RELATED AUDIT OBJECTIVES 


The presentation and disclosure-related audit objectives are identical to the manage- OBJECTIVE 6-9 

ment assertions for presentation and disclosure discussed previously. The same inthe ene Reena 
concepts that apply to balance-related audit objectives apply equally to presentation andidistiocurecralstedaucit 
and disclosure audit objectives. Table 6-5 includes the management assertions about objectives to management 
presentation and disclosure, related general presentation and disclosure-related audit assertions for presentation 
objectives and specific audit objectives for notes payable for Hillsburg Hardware Co. and disclosure. 





HOW AUDIT OBJECTIVES ARE MET 








The auditor must obtain sufficient appropriate audit evidence to support all manage- OBJECTIVE 6-10 
ment assertions in the financial statements. This is done by accumulating evidence in eepaimmnenelsnenenin 
support of some appropriate combination of transaction-related audit objectives and between audit objectives 
balance-related audit objectives. A comparison of Tables 6-3 (p. 158) and 6-4 illustrates and the accumulation of 
the significant overlap between the transaction-related and balance-related audit audit evidence. 





objectives. Rights and obligations is the only balance-related assertion without a 
similar transaction-related assertion. Presentation and disclosure-related audit 
objectives are closely related to the balance-related audit objectives. Auditors often 
consider presentation and disclosure audit objectives when addressing the balance- 
related audit objectives. 

The auditor must decide the appropriate audit objectives and the evidence to 
accumulate to meet those objectives on every audit. To do this, auditors follow an audit 
process, which is a well-defined methodology for organizing an audit to ensure that the 
evidence gathered is both sufficient gnd appro a) ll nequired audit objec- 
tives are both specified and met. iAPad Sa ARSE pany: 
the auditor must also plan to meet the objectives associated with reporting on the 
effectiveness of internal control over financial reporting. PCAOB Auditing Standard 5 
requires that the audit of the effectiveness of internal control be integrated with the 
audit of the financial statements. The audit process, as described in this text, has four 
specific phases, as shown in Figure 6-7 (p. 162). The rest of this chapter provides a brief 
introduction to each of the four phases of the audit process. 





TABLE 6-5 Hillsburg Hardware Co.: Management Assertions and Presentation ) 
and Disclosure-Related Audit Objectives Applied to Notes Payable 











Management Assertions _—_ General Presentation- Specific Presentation and 

About Presentation and Disclosure-Related Disclosure-Related Audit Objectives 

and Disclosure Audit Objectives Applied to Notes Payable 

Occurrence and rights Occurrence and rights Notes payable as described in the footnotes 
and obligations and obligations exist and are obligations of the company. 

Completeness Completeness All required disclosures related to notes 


payable are included in the financial 
statement footnotes. 








Accuracy and valuation Accuracy and valuation Footnote disclosures related to notes payable 
are accurate. 
Classification and Classification and Notes payable are appropriately classified as 
understandability understandability to short-term and long-term obligations 


and related financial statement disclosures 
are understandable. 
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Plan and Design 
an Audit Approach 
(Phase 1) 





laura Four Phases of a Financial Statement Audit ) 


Plan and design 
an audit approach 


Perform tests of controls and 
Phase Il : : 
substantive tests of transactions 


EE |= aaaase 


Perform analytical procedures 








Phase I 
































Aso and tests of details of balances 
Complete the audit and 
PEE OU issue an audit report 
X y 





For any given audit, there are many ways in which an auditor can accumulate evidence 
to meet the overall audit objective of providing an opinion on the financial statements. 
Two overriding considerations affect the approach the auditor selects: 


1. Sufficient appropriate evidence must be accumulated to meet the auditor’s 
professional responsibility. 
2. The cost of accumulating the evidence should be minimized. 


The first consideration is the most important, but cost minimization is necessary if 
CPA firms are to be competitive and profitable. If there were no concern for controlling 
costs, evidence decision making would be easy. Auditors would keep adding evidence, 
with APAGOor BDBicy. NNANGE Hfficiently certain that there were no 
material misstatements. 

Concern for sufficient appropriate evidence and cost control necessitates planning 
the engagement. The plan should result in an effective audit approach at a reasonable 
cost. Planning and designing an audit approach can be broken down into several parts. 
Three key aspects are introduced here and are discussed in subsequent chapters. 


Obtain An Understanding of the Entity and its Environment To adequately 
assess the risk of misstatements in the financial statements and to interpret information 
obtained throughout the audit, the auditor must have a thorough understanding of the 
client’s business and related environment, including knowledge of strategies and 
processes. The auditor should study the client’s business model, perform analytical 
procedures and make comparisons to competitors. The auditor must also understand 
any unique accounting requirements of the client’s industry. For example, when auditing 
an insurance company, the auditor must understand how loss reserves are calculated. 


Understand Internal Control and Assess Control Risk The risk of misstatement 
in the financial statements is reduced if the client has effective controls over computer 
operations and transaction processing. In Chapter 2, we discussed how the ability of the 
client’s internal controls to generate reliable financial information and safeguard assets 
and records is one of the most important and widely accepted concepts in the theory 
and practice of auditing. The auditor identifies internal controls and evaluates their 
effectiveness, a process called assessing control risk. If internal controls are considered 
effective, planned assessed control risk can be reduced and the amount of audit evidence 
to be accumulated can be significantly less than when internal controls are not adequate. 


Assess Risk of Material Misstatement The auditor uses the understanding of the 
client’s industry and business strategies, as well as the effectiveness of controls, to assess 
the risk of misstatements in the financial statements. This assessment will then impact 
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the audit plan and the nature, timing, and extent of audit procedures. For example, if 
the client is expanding sales by taking on new customers with poor credit ratings, the 
auditor will assess a higher risk of misstatement for net realizable value of accounts 
receivable and plan to expand testing in this area. 


Before auditors can justify reducing planned assessed control risk when internal 
controls are believed to be effective, they must first test the effectiveness of the controls. 
The procedures for this type of testing are commonly referred to as tests of controls. 
For example, assume a client’s internal controls require the verification by an inde- 
pendent clerk of all unit selling prices on sales before sales invoices are transmitted to 
customers. This control is directly related to the accuracy transaction-related audit 
objective for sales. The auditor might test the effectiveness of this control by examining 
the sales transaction file for evidence that the unit selling price was verified. 

Auditors also evaluate the client’s recording of transactions by verifying the 
monetary amounts of transactions, a process called substantive tests of transactions. 
For example, the auditor might use computer software to compare the unit selling price 
on duplicate sales invoices with an electronic file of approved prices as a test of the 
accuracy objective for sales transactions. Like the test of control in the preceding 
paragraph, this test satisfies the accuracy transaction-related audit objective for sales. 
For the sake of efficiency, auditors often perform tests of controls and substantive tests 
of transactions at the same time. 


There are two general categories of phase III procedures. Analytical procedures use 
comparisons and relationships to assess whether account balances or other data appear 
reasonable. For example, to provide some assurance for the accuracy objective for both 
sales transactions (transaction-related audit objective) and accounts receivable 
(balance-related audit objective), the auditor might examine sales transactions in the 
sales journal for unusually large amounts and also compare total monthly sales with 
prior years. If a company is consis Page UPpE sKFnhancercperly 
recording sales, significant differences are likely. 

Tests of details of balances are specific procedures intended to test for monetary 
misstatements in the balances in the financial statements. An example related to the 
accuracy objective for accounts receivable (balance-related audit objective) is direct 
written communication with the client’s customers to identify incorrect amounts. Tests 
of details of ending balances are essential to the conduct of the audit because most of 
the evidence is obtained from a source independent of the client and therefore is 
considered to be of high quality. 


After the auditor has completed all procedures for each audit objective and for each 
financial statement account and related disclosures, it is necessary to combine the infor- 
mation obtained to reach an overall conclusion as to whether the financial statements 
are fairly presented. This highly subjective process relies heavily on the auditor’s 
professional judgment. When the audit is completed, the CPA must issue an audit 
report to accompany the client’s published financial statements. These reports were 
discussed in Chapter 3. 


Perform Tests of 
Controls and 
Substantive Tests of 
Transactions 

(Phase II) 


Perform Analytical 
Procedures and Tests 
of Details of Balances 
(Phase III) 


Complete the 
Audit and Issue 
an Audit Report 

(Phase IV) 


SUMMARY 


This chapter described management’s responsibility for the financial statements and 
internal control and the auditor’s responsibility to audit the financial statements and the 
effectiveness of internal control over financial reporting. This chapter also discussed 
management assertions and the related objectives of the audit and the way the auditor 
subdivides an audit to result in specific audit objectives. The auditor then accumulates 
evidence to obtain assurance that each audit objective has been satisfied. The illustration 
on meeting the accuracy objectives for sales transactions and accounts receivable shows 
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that the auditor can obtain assurance by accumulating evidence using tests of controls, 
substantive tests of transactions, analytical procedures, and tests of details of balances. In 
some audits, there is more emphasis on certain tests such as analytical procedures and tests 
of controls, whereas in others, there is emphasis on substantive tests of transactions and 


tests of details of balances. 


Analytical procedures—use of compari- 
sons and relationships to assess whether 
account balances or other data appear 
reasonable 


Balance-related audit objectives—eight 
audit objectives that must be met before 
the auditor can conclude that any given 
account balance is fairly stated; the general 
balance-related audit objectives are exist- 
ence, completeness, accuracy, classifica- 
tion, cutoff, detail tie-in, realizable value, 
and rights and obligations 


Cycle approach—a method of dividing 
an audit by keeping closely related types 
of transactions and account balances in 
the same segment 


ESSENTIAL TERMS 


and (4) complete the audit and issue an 
audit report 


Presentation and disclosure-related 
audit objectives—four audit objectives 
that must be met before the auditor 
can conclude that presentation and 
disclosures are fairly stated; the four 
presentation and disclosure-related audit 
objectives are occurrence and rights and 
obligations, completeness, accuracy and 
valuation, and classification and under- 
standability 


Relevant assertions—assertions that 
have a meaningful bearing on whether 
an account is fairly stated and used to 
assess the risk of material misstatement 
and the design and performance of audit 


ine ADRES. PDE Eh ancers 


Fraud—an intentional misstatement of 
the financial statements 


Fraudulent financial reporting—intentional 
misstatements or omissions of amounts 
or disclosures in financial statements to 
deceive users 


Illegal acts—violations of laws or govern- 
ment regulations other than fraud 


Management assertions—implied or ex- 
pressed representations by management 
about classes of transactions, related 
account balances, and presentation and 
disclosures in the financial statements 


Misappropriation of assets—a fraud 
involving the theft of an entity’s assets 


Phases of the audit process—the four 
aspects of a complete audit: (1) plan and 
design an audit approach, (2) perform 
tests of controls and substantive tests of 
transactions, (3) perform analytical pro- 
cedures and tests of details of balances, 
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Substantive tests of transactions—audit 
procedures testing for monetary mis- 
statements to determine whether the six 
transaction-related audit objectives have 
been satisfied for each class of trans- 
actions 


Tests of controls—audit procedures to 
test the effectiveness of controls in sup- 
port of a reduced assessed control risk 


Tests of details of balances—audit pro- 
cedures testing for monetary misstate- 
ments to determine whether the eight 
balance-related audit objectives have 
been satisfied for each significant account 
balance 


Transaction-related audit objectives— 
six audit objectives that must be met 
before the auditor can conclude that the 
total for any given class of transactions 
is fairly stated; the general transaction- 
related audit objectives are occurrence, 
completeness, accuracy, classification, 
timing, and posting and summarization 


REVIEW QUESTIONS 


6-1 (Objective 6-1) State the objective of the audit of financial statements. In general terms, 
how do auditors meet that objective? 


6-2 (Objectives 6-2, 6-3) Distinguish between management’s and the auditor’s responsi- 
bility for the financial statements being audited. 


6-3 (Objective 6-3) Distinguish between the terms errors and fraud. What is the auditor’s 
responsibility for finding each? 


6-4 (Objective 6-3) Distinguish between fraudulent financial reporting and misappro- 
priation of assets. Discuss the likely difference between these two types of fraud on the fair 
presentation of financial statements. 


6-5 (Objective 6-3) Because management operates the business on a daily basis, they know 
more about the company’s transactions and related assets, liabilities, and equity than the 
auditor. For example, it is extremely difficult, if not impossible, for the auditor to evaluate 
the obsolescence of inventory as well as management can in a highly complex business. 
Given these observations, evaluate the auditor’s responsibility for detecting material 
misrepresentations in the financial statements by management. 


6-6 (Objective 6-3) List two major characteristics that are useful in predicting the likeli- 
hood of fraudulent financial reporting in an audit. For each of the characteristics, state two 
things that the auditor can do to evaluate its significance in the engagement. 


6-7 (Objective 6-4) Describe what is meant by the cycle approach to auditing. What are the 
advantages of dividing the audit into different cycles? 


6-8 (Objective 6-4) Identify the cycle to which each of the following general ledger 
accounts will ordinarily be assigned: sales, accounts payable, retained earnings, accounts 
receivable, inventory, and repairs and maintenance. 


6-9 (Objectives 6-4, 6-5) Why are sales, sales ate =)) et ces, bad debts, cash 
discounts, accounts receivable, and al Gain le AN GRR in the 


same cycle? 


6-10 (Objective 6-6) Define what is meant by a management assertion about financial 
statements. Identify the three broad categories of management assertions. 


6-11 (Objectives 6-5, 6-6) Distinguish between the general audit objectives and manage- 
ment assertions. Why are the general audit objectives more useful to auditors? 


6-12 (Objective 6-7) An acquisition of a fixed-asset repair by a construction company is 
recorded on the wrong date. Which transaction-related audit objective has been violated? 
Which transaction-related audit objective has been violated if the acquisition had been 
capitalized as a fixed asset rather than expensed? 


6-13 (Objective 6-8) Distinguish between the existence and completeness balance-related 
audit objectives. State the effect on the financial statements (overstatement or under- 
statement) of a violation of each in the audit of accounts receivable. 


6-14 (Objectives 6-7, 6-8, 6-9) What are specific audit objectives? Explain their relationship 
to the general audit objectives. 


6-15 (Objectives 6-6, 6-8) Identify the management assertion and general balance-related 
audit objective for the specific balance-related audit objective: All recorded fixed assets exist 
at the balance sheet date. 


6-16 (Objectives 6-6, 6-8) Explain how management assertions, general balance-related 
audit objectives, and specific balance-related audit objectives are developed for an account 
balance such as accounts receivable. 


6-17 (Objectives 6-6, 6-9) Identify the management assertion and presentation and dis- 
closure-related audit objective for the specific presentation and disclosure-related audit 
objective: Read the fixed asset footnote disclosure to determine that the types of fixed 
assets, depreciation methods and useful lives are clearly disclosed. 
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6-18 (Objective 6-10) Identify the four phases of the audit. What is the relationship of the 
four phases to the objective of the audit of financial statements? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


6-19 (Objective 6-1) The following questions concern the reasons auditors do audits. 
Choose the best response. 


a. Which of the following best describes the reason why an independent auditor reports 


on financial statements? 

(1) A misappropriation of assets may exist, and it is more likely to be detected by 
independent auditors. 

(2) Different interests may exist between the company preparing the statements and 
the persons using the statements. 

(3) A misstatement of account balances may exist and is generally corrected as the 
result of the independent auditor’s work. 

(4) Poorly designed internal controls may be in existence. 


. Because of the risk of material misstatement, an audit should be planned and per- 


formed with an attitude of 
(1) objective judgment. (3) professional skepticism. 
(2) independent integrity. (4) impartial conservatism. 


. The major reason an independent auditor gathers audit evidence is to 


(1) form an opinion on the financial statements. 
(2) detect fraud. 

(3) evaluate management. 

(4) assess control risk. 


6-20 (Objective 6-3) The following questions deal with errors and fraud. Choose the best 


a PDF Enh r 
a. A Peet PPE nad charts to design the audit to provide reasonable 


assurance of detecting errors and fraud that might have a material effect on the 
financial statements. Which of the following, if material, is a fraud as defined in audit- 
ing standards? 

(1) Misappropriation of an asset or groups of assets. 

(2) Clerical mistakes in the accounting data underlying the financial statements. 

(3) Mistakes in the application of accounting principles. 

(4) Misinterpretation of facts that existed when the financial statements were prepared. 


b. What assurance does the auditor provide that errors, fraud, and direct-effect illegal 


acts that are material to the financial statements will be detected? 





Errors Fraud Direct-Effect Illegal Acts 
(1) Limited Negative Limited 
(2) Reasonable Reasonable Reasonable 
(3) Limited Limited Reasonable 
(4) Reasonable Limited Limited 





c. Which of the following statements describes why a properly designed and executed 


audit may not detect a material misstatement in the financial statements resulting 

from fraud? 

(1) Audit procedures that are effective for detecting unintentional misstatements may 
be ineffective for an intentional misstatement that is concealed through collusion. 

(2) An audit is designed to provide reasonable assurance of detecting material errors, 
but there is no similar responsibility concerning fraud. 

(3) The factors considered in assessing control risk indicated an increased risk of 
intentional misstatements, but only a low risk of unintentional misstatements. 

(4) The auditor did not consider factors influencing audit risk for account balances 
that have effects pervasive to the financial statements taken as a whole. 
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6-21 (Objective 6-6) The following questions deal with management assertions. Choose 
the best response. 


a. An auditor reviews aged accounts receivable to assess likelihood of collection to 
support management’s assertion about account balances of 
(1) existence. (3) valuation and allocation. 
(2) completeness. (4) rights and obligations. 


b. An auditor will most likely review an entity’s periodic accounting for the numerical 
sequence of shipping documents to ensure all documents are included to support 
management’s assertion about classes of transactions of 
(1) occurrence. (3) accuracy. 

(2) completeness. (4) classification. 


c. In the audit of accounts payable, an auditor’s procedures will most likely focus primarily 
on management's assertion about account balances of 
(1) existence. (3) valuation and allocation. 
(2) completeness. (4) classification and understandability. 


DISCUSSION QUESTIONS AND PROBLEMS 


6-22 (Objectives 6-2, 6-3) The following are selected portions of the report of management 
from a published annual report. 


REPORT OF MANAGEMENT 

Management's Report on Internal Control over Financial Reporting 
The Company’s management is responsible for establishing and maintaining adequate 
internal control over financial reporting. The Company’s internal control over financial 
reporting is a process designed under the supervision of its President and Chief 
Executive Officer and Chief Fina Apago’ ‘PDE ‘Enha iéer arding 
the reliability of financial pees i € preparatio é Compariy's Brancial 
statements for external reporting in accordance with accounting principles generally 
accepted in the United States of America. Management evaluates the effectiveness of the 
Company’s internal control over financial reporting using the criteria set forth by the 
Committee of Sponsoring Organizations of the Treadway Commission (COSO) in 
Internal Control-Integrated Framework. Management, under the supervision and with 
the participation of the Company’s President and Chief Executive Officer and Chief 
Financial Officer assessed the effectiveness of the Company’s internal control over 
financial reporting as of December 31, 2009 and concluded it is effective. 

Management's Responsibility for Consolidated Financial Statements 
The management of Colgate-Palmolive Company is also responsible for the 
preparation and content of the accompanying consolidated financial statements as 
well as all other related information contained in this annual report. These financial 
statements have been prepared in conformity with accounting principles generally 
accepted in the United States, and necessarily include amounts which are based on 
management’s best estimates and judgments. 


a. What are the purposes of the two parts of the report of management? 

b. What is the auditor’s responsibility related to the report of management? 
6-23 (Objectives 6-1, 6-3) Auditors provide “reasonable assurance” that the financial state- 
ments are “fairly stated, in all material respects.” Questions are often raised as to the 


responsibility of the auditor to detect material misstatements, including misappropriation 
of assets and fraudulent financial reporting. 


a. Discuss the concept of “reasonable assurance” and the degree of confidence that 
financial statement users should have in the financial statements. 

b. What are the responsibilities of the independent auditor in the audit of financial 
statements? Discuss fully, but in this part do not include fraud in the discussion. 
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c. What are the responsibilities of the independent auditor for the detection of fraud 
involving misappropriation of assets and fraudulent financial reporting? Discuss fully, 
including your assessment of whether the auditor’s responsibility for the detection of 
fraud is appropriate. 


6-24 (Objective 6-4) The following general ledger accounts are included in the trial balance 
for an audit client, Jones Wholesale Stationery Store. 


Accounts payable Insurance expense 
Accounts receivable Interest expense 
Accrued interest expense Inventory 
Accrued sales salaries Loans payable 
Accumulated depreciation— Notes payable 
furniture and equipment Notes receivable—trade 
Advertising expense Prepaid insurance 
Allowance for doubtful accounts Property tax expense 
Bad debt expense Property tax payable 
Cash Purchases 
Common stock Rent expense 
Depreciation expense—furniture Retained earnings 
and equipment Salaries, office and general 
Furniture and equipment Sales 
Income tax expense Sales salaries expense 
Income tax payable Telecommunications expense 
Required a. Identify the accounts in the trial balance that are likely to be included in each trans- 
action cycle. Some accounts will be included in more than one cycle. Use the format 
that follows. 
Balance Sheet Income Statement 
Cycle Accounts Accounts 





Sales and collection 

Acquisition and payment 

rApagorPDE Enhancer 
Inverttory arta warehousing 

Capital acquisition and repayment 





b. How will the general ledger accounts in the trial balance most likely differ if the 
company were a retail store rather than a wholesale company? How will they differ for 
a hospital or a government unit? 


6-25 (Objective 6-6) The following are various management assertions (a through m) 
related to sales and accounts receivable. 


Management Assertion 

a. All sales transactions have been recorded. 

b. Receivables are appropriately classified as to trade and other receivables in the 
financial statements and are clearly described. 
Accounts receivable are recorded at the correct amounts. 
Sales transactions have been recorded in the proper period. 
Sales transactions have been recorded in the appropriate accounts. 
All required disclosures about sales and receivables have been made. 
All accounts receivable have been recorded. 
There are no liens or other restrictions on accounts receivable. 
Disclosures related to receivables are at the correct amounts. 
Recorded sales transactions have occurred. 
Recorded accounts receivable exist. 
Sales transactions have been recorded at the correct amounts. 
Disclosures related to sales and receivables relate to the entity. 


Bere ro mo an 


Required a. Explain the differences among management assertions about classes of transactions and 
events, management assertions about account balances, and management assertions 
about presentation and disclosure. 
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b. For each assertion, indicate whether it is an assertion about classes of transactions and 
events, an assertion about account balances, or an assertion about presentation and 
disclosure. 


c. Indicate the name of the assertion made by management. (Hint: See Table 6-2 on page 
154.) 


6-26 (Objectives 6-6, 6-8) The following are specific balance-related audit objectives 
applied to the audit of accounts receivable (a through h) and management assertions about 
account balances (1 through 4). The list referred to in the specific balance-related audit 
objectives is the list of the accounts receivable from each customer at the balance sheet date. 


Specific Balance-Related Audit Objective 

There are no unrecorded receivables. 

Receivables have not been sold or discounted. 

Uncollectible accounts have been provided for. 

Receivables that have become uncollectible have been written off. 

All accounts on the list are expected to be collected within 1 year. 

The total of the amounts on the accounts receivable listing agrees with the general 

ledger balance for accounts receivable. 

g. All accounts on the list arose from the normal course of business and are not due 
from related parties. 

h. Sales cutoff at year-end is proper. 


moans 


Management Assertion about Account Balances 
1. Existence 3. Valuation and allocation 
2. Completeness 4. Rights and obligations 


For each specific balance-related audit objective, identify the appropriate management 
assertion. (Hint: See Table 6-4 on page 160.) 


6-27 (Objectives 6-6, 6-7) The following are specific transaction-related audit objectives 
applied to the audit of cash disbu acdco-PpF (2 nhan ceexrcment 
assertions about classes of transactions (T throtigh 5), and general transaction-related audit 
objectives (6 through 11). 
Specific Transaction-Related Audit Objective 
a. Recorded cash disbursement transactions are for the amount of goods or services 
received and are correctly recorded. 


b. Cash disbursement transactions are properly included in the accounts payable 
master file and are correctly summarized. 
c. Recorded cash disbursements are for goods and services actually received. 
d. Cash disbursement transactions are properly classified. 
e. Existing cash disbursement transactions are recorded. 
f. Cash disbursement transactions are recorded on the correct dates. 
Management Assertion about General Transaction-Related 
Classes of Transactions Audit Objective 
1. Occurrence 6. Occurrence 
2. Completeness 7. Completeness 
3. Accuracy 8. Accuracy 
4. Classification 9. Posting and summarization 
5. Cutoff 10. Classification 
11. Timing 


a. Explain the differences among management assertions about classes of transactions 
and events, general transaction-related audit objectives, and specific transaction- 
related audit objectives and their relationships to each other. 


b. For each specific transaction-related audit objective, identify the appropriate manage- 
ment assertion. 


c. For each specific transaction-related audit objective, identify the appropriate general 
transaction-related audit objective. 
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6-28 (Objectives 6-6, 6-9) The following are specific presentation and disclosure-related 
audit objectives applied to presentation and disclosure for fixed assets (a through d) and 
management assertions (1 through 4). 


Specific Presentation and Disclosure-Related Audit Objective 
a. All required disclosures regarding fixed assets have been made. 
b. Footnote disclosures related to fixed assets are clear and understandable. 
c. Methods and useful lives disclosed for each category of fixed asset are accurate. 
d. Disclosed fixed asset dispositions have occurred. 

Management Assertion about Presentation and Disclosure 
1. Occurrence and rights and obligations 
2. Completeness 
3. Accuracy and valuation 
4. Classification and understandability 

Required For each specific presentation and disclosure-related audit objective, identify the appro- 
priate management assertion. (Hint: See Table 6-5 on page 161.) 


6-29 (Objective 6-8) The following are two specific balance-related audit objectives in the 
audit of accounts payable. The list referred to is the list of accounts payable taken from the 
accounts payable master file. The total of the list equals the accounts payable balance on the 
general ledger. 
1. All accounts payable included on the list represent amounts due to valid vendors. 
2. There are no unrecorded accounts payable. 
Required a. Explain the difference between these two specific balance-related audit objectives. 
b. Which of these two specific balance-related audit objectives applies to the general 
balance-related audit objective of existence, and which one applies to completeness? 
c. For the audit of accounts payable, which of these two specific balance-related audit 
objectives is usually more important? Explain. 


6-30 (Apago®) PDH obinhanee g are the balance-related, transaction- 


related, and presentation and disclosure related audit objectives. 


Balance-Related Transaction-Related Presentation and Dis- 
Audit Objectives Audit Objectives closure Audit Objectives 
1. Existence 9. Occurrence 15. Occurrence and 
2. Completeness 10. Completeness rights 

3. Accuracy 11. Accuracy 16. Completeness 

4. Classification 12. Classification 17. Accuracy and 

5. Cutoff 13. Timing valuation 

6. Detail tie-in 14. Posting and 18. Classification and 
7. Realizable value summarization understandability 
8. Rights and obligations 


Required Identify the specific audit objective (1-18) that each of the following specific audit pro- 
cedures (a. through 1.) satisfies in the audit of sales, accounts receivable and cash receipts 
for fiscal year ended December 31, 2011. 

a. Examine a sample of duplicate sales invoices to determine whether each one has a 
shipping document attached. 

b. Add all customer balances in the accounts receivable trial balance and agree the 
amount to the general ledger. 

c. Fora sample of sales transactions selected from the sales journal, verify that the amount 
of the transaction has been recorded in the correct customer account in the accounts 
receivable subledger. 

d. Inquire of the client whether any accounts receivable balances have been pledged as 
collateral on long-term debt and determine whether all required information is 
included in the footnote description for long-term debt. 

e. For a sample of shipping documents selected from shipping records, trace each 
shipping document to a transaction recorded in the sales journal. 
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f. Discuss with credit department personnel the likelihood of collection of all accounts 
as of December 31, 2011 with a balance greater than $100,000 and greater than 90 days 
old as of year end. 


g. Examine sales invoices for the last five sales transactions recorded in the sales journal 
in 2011 and examine shipping documents to determine they are recorded in the 
correct period. 


h. For a sample of customer accounts receivable balances at December 31, 2011, examine 
subsequent cash receipts in January 2012 to determine whether the customer paid the 
balance due. 


i. Determine whether all risks related to accounts receivable are adequately disclosed. 


. Foot the sales journal for the month of July and trace postings to the general ledger. 


—. 


k. Send letters to a sample of accounts receivable customers to verify whether they have 
an outstanding balance at December 31, 2011. 


|. Determine whether long-term receivables and related party receivables are reported 
separately in the financial statements. 
6-31(Objective 6-10) Following are seven audit activities. 
a. Examine invoices supporting recorded fixed asset additions. 


b. Review industry databases to assess the risk of material misstatement in the financial 
statements. 


c. Summarize misstatements identified during testing to assess whether the overall 
financial statements are fairly stated. 
d. Test computerized controls over credit approval for sales transactions. 
e. Send letters to customers confirming outstanding accounts receivable balances. 
f. Perform analytical procedures comparing the client with similar companies in the 
industry to gain an understandijAg Bgont PH Fss Hinhencer 
g. Compare information on purchases invoices recorded in the acquisitions journal with 
information on receiving reports. 
For each activity listed above, indicate in which phase of the audit the procedure was likely 
performed. 


1. Plan and design an audit approach (Phase I) 

2. Perform tests of controls and substantive tests of transactions (Phase II) 
3. Perform analytical procedures and tests of details of balances (Phase III) 
4. Complete the audit and issue an audit report (Phase IV) 


CASE 


6-32 (Objectives 6-1, 6-3) Rene Ritter opened a small grocery and related-products 
convenience store in 1989 with money she had saved working as an A&P store manager. 
She named it Ritter Dairy and Fruits. Because of the excellent location and her fine 
management skills, Ritter Dairy and Fruits grew to three locations by 1994. By that time, 
she needed additional capital. She obtained financing through a local bank at 2 percent 
above prime, under the condition that she submit quarterly financial statements reviewed 
by a CPA firm approved by the bank. After interviewing several firms, she decided to use 
the firm of Gonzalez & Fineberg CPAs, after obtaining approval from the bank. 

In 1998, the company had grown to six stores, and Rene developed a business plan to 
add another 10 stores in the next several years. Ritter’s capital needs had also grown, so 
Rene decided to add two business partners who both had considerable capital and some 
expertise in convenience stores. After further discussions with the bank and continued 
conversations with the future business partners, she decided to have an annual audit and 
quarterly reviews done by Gonzalez & Fineberg, even though the additional cost was 
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Required 


almost $25,000 annually. The bank agreed to reduce the interest rate on the $4,000,000 of 
loans to 1 percent above prime. 

By 2003, things were going smoothly, with the two business partners heavily involved in 
day-to-day operations and the company adding two new stores each year. The company was 
growing steadily and was more profitable than they had expected. By the end of 2002, one of 
the business partners, Fred Worm, had taken over responsibility for accounting and finance 
operations, as well as some marketing. Annually, Gonzalez & Fineberg did an in-depth 
review of the accounting system, including internal controls, and reported their conclusions 
and recommendations to the board of directors. Specialists in the firm provided tax and 
other advice. The other partner, Ben Gold, managed most of the stores and was primarily 
responsible for building new stores. Rene was president and managed four stores. 

In 2008, the three partners decided to go public to enable them to add more stores and 
modernize existing ones. The public offering was a major success, resulting in $25 million 
in new capital and nearly 1,000 shareholders. Ritter Dairy and Fruits added stores rapidly 
under the three managers, and the company remained highly profitable under the leader- 
ship of Ritter, Worm, and Gold. 

Rene retired in 2011 after a highly successful career. During the retirement celebration, 
she thanked her business partners, employees, and customers. She also added a special 
thanks to the bank management for their outstanding service and to Gonzalez & Fineberg 
for being partners in the best and most professional sense of the word. She mentioned their 
integrity, commitment, high-quality service in performing their audits and reviews, and 
considerable tax and business advice for more than two decades. 


a. Explain why the bank imposed a requirement of a quarterly review of the financial 
statements as a condition of obtaining the loan at 2 percent above prime. Also explain 
why the bank didn’t require an audit and why the bank demanded the right to approve 
which CPA firm was engaged. 


b. Explain why Ritter Dairy and Fruits agreed to have an audit performed rather than a 
VAP: considerin i) the  Enhan annual cost of $25,000. 

Cc. vVAPAaGQ: en Bh nhancekalez & Fineberg as partners? Does the 
CPA firm have an independence problem? 

d. What benefit does Gonzalez & Fineberg provide to stockholders, creditors, and 
management in performing the audit and related services? 

e. What are the responsibilities of the CPA firm to stockholders, creditors, management, 
and other users? 


INTERNET PROBLEM 6-1: INTERNATIONAL 


AND PCAOB AUDIT OBJECTIVES 


Required 





This problem requires you to access authoritative standards to compare the objective of an 
audit as defined by GAAS (www.aicpa.org) and International Standards on Auditing (ISA 
200) (www.iaasb.org) and the objective of an audit of internal control over financial 
reporting as defined by PCAOB auditing standards (www.pcaobus.org). 


a. Compare the objective of an audit under GAAS and International Standards on 
Auditing. Are there substantive differences in the objective of an audit as defined by 
these two standards? 

b. What is the objective of an audit of internal control over financial reporting? 

c. What defines whether financial statements are fairly stated, and what defines whether 
internal control is considered effective? Are they related? 
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AUDIT EVIDENCE 


Sometimes The Most Important Evidence 
Is Not Found In The Accounting Records 


Crenshaw Properties was a real estate developer that specialized in apart- 
ment buildings that it sold to limited partner investors. Crenshaw’s role 
was to identify projects, serve as general partner with a small investment, 
and raise capital from pension funds. Crenshaw had an extensive network 
of people who marketed these investments on a commission basis. As 
general partner, Crenshaw earned significant fees for related activities, 
including promotional fees, investment management fees, and real estate 
commissions. 


As long as the investments were successful, Crenshaw prospered. Because 
the investments were reasonably long-term, the underlying investors did 
not pay careful attention to them. However, in the late-2000s, the market 
for real estate in many parts of the country became oversaturated. Occu- 
pancy rates, rental rates, and market values declined. 


Ralph Smalley, of Hambusch, Robinson & Co., did the annual audit of 
Crenshaw. As part of the audit, Smalley obtained financial statements for all 


of the partnerships in which Crenshaw was the geqeral partner. He traced 
amounts back to the original rane BRAGPek Oe icenRaARcex 


amounts agreed with partnership records. Smalley also determined that 
they were mathematically accurate. The purpose of doing these tests 
was to determine that the partnership assets, at original cost, exceeded 
liabilities, including the mortgage on the property and loans from investors. 
Under the law, Crenshaw, as general partner, was liable for any deficiency. 


Every year, Smalley concluded that there were no significant deficiencies in partnership net assets for which Crenshaw 
would be liable. What Smalley failed to recognize, however, was that current market prices had declined significantly 
because cash flows were lower than those projected in the original partnership offering documents. As a result, he 
failed to perform tests of the impairment of the asset values. In fact, Crenshaw went bankrupt in 2010, and 





LEARNING OBJECTIVES 


After studying this chapter, 
you should be able to 





aa 


7-1 


7-3 


7-5 


7-6 


7-7 


Contrast audit evidence with 
evidence used by other 
professions. 


Identify the four audit evidence 
decisions that are needed to 
create an audit program. 


Specify the characteristics that 
determine the persuasiveness 
of evidence. 


Identify and apply the eight 
types of evidence used in 
auditing. 

Understand the purposes of 
audit documentation. 


Prepare organized audit 
documentation. 


Describe how technology 
affects audit evidence and audit 
documentation. 





Hambusch, Robinson & Co. was named in a suit to recover damages filed by the bankruptcy trustee. 





he foundation of any audit is the evidence obtained and evaluated by the auditor. The auditor must have the 
knowledge and skill to accumulate sufficient appropriate evidence on every audit to meet the standards of the 
profession. As described in this opening story, Ralph Smalley learned the effect of not accumulating the appropriate 
evidence after being sued over his audit of Crenshaw Properties. This chapter deals with the types of evidence 
decisions auditors make, the evidence available to auditors, and the use of that evidence in performing audits and 


documenting the results. 


NATURE OF EVIDENCE 





Contrast audit evidence 
with evidence used by other 
professions. 





Audit Evidence 
Contrasted with 
Legal and 
Scientific Evidence 


Evidence was defined in Chapter 1 as any information used by the auditor to determine 
whether the information being audited is stated in accordance with the established 
criteria. The information varies greatly in the extent to which it persuades the auditor 
whether financial statements are fairly stated. Evidence includes information that is 
highly persuasive, such as the auditor’s count of marketable securities, and less 
persuasive information, such as responses to questions of client employees. 


The use of evidence is not unique to auditors. Evidence is also used extensively by 
scientists, lawyers, and historians. For example, most people are familiar with legal 
dramas on television in which evidence is collected and used to argue for the guilt or 
innocence of a party charged with a crime. In legal cases, there are well-defined rules of 
evidence enforced by the judge for the protection of the innocent. In scientific experi- 
ments, researchers obtain evidence to test hypotheses using controlled experiments, 
such as a drug trial to test the effectiveness of a new medical treatment. Similarly, 
gathering evidence is a large part of what auditors do. Although these professionals rely 
on different types of evidence, and use evidence in different settings and in different 
ways, lawyers, scientists, and auditors all use evidence to help them draw conclusions. 

Tag ado PDF kehirharreercvidence from the perspectives of a 
scientist doing an experiment, an attorney prosecuting an accused thief, and an auditor 
of financial statements. There are six bases of comparison. Notice the similarities and 
differences among these three professions. 








Basis of 
Comparison 


Characteristics of Evidence for a Scientific Experiment, Legal Case, and Audit of Financial 
Statements 


Scientific Experiment 
Involving Testing a 
Medicine 


Audit of Financial 
Statements 


Legal Case Involving 
an Accused Thief 





Use of the evidence 


Determine whether statements 
are fairly presented 


Determine effects of 
using the medicine 


Decide guilt or innocence of 
accused 





Nature of evidence 
used 


Results of repeated 
experiments 


Direct evidence and testimony 
by witnesses and parties 
involved 


Various types of audit evidence 
generated by the auditor, 
third parties, and the client 





Party or parties 
evaluating evidence 


Scientist Jury and judge Auditor 





Certainty of conclusions 
from evidence 


Vary from uncertain to 
near certainty 


Requires guilt beyond a 
reasonable doubt 


High level of assurance 





Nature of conclusions 


Issue one of several alternative 
types of audit reports 


Recommend or not 
recommend use of 
medicine 


Innocence or guilt of party 





Typical consequences of 
incorrect conclusions 
from evidence 





Society uses ineffective 
or harmful medicine 


Guilty party is not penalized Statement users make incorrect 
or innocent party is found decisions and auditor may 
guilty be sued 
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AUDIT EVIDENCE DECISIONS 


A major decision facing every auditor is determining the appropriate types and amounts 
of evidence needed to be satisfied that the client’s financial statements are fairly stated. 
There are four decisions about what evidence to gather and how much of it to 





Identify the four audit 
evidence decisions that are 
accumulate: needed to create an audit 


1. Which audit procedures to use pice en: 


2. What sample size to select for a given procedure 
3. Which items to select from the population 
4. When to perform the procedures 





An audit procedure is the detailed instruction that explains the audit evidence to be Audit Procedures 
obtained during the audit. It is common to spell out these procedures in sufficiently 
specific terms so an auditor may follow these instructions during the audit. For 
example, the following is an audit procedure for the verification of cash disbursements: 


» Examine the cash disbursements journal in the accounting system and compare 
the payee, name, amount, and date with online information provided by the 
bank about checks processed for the account. 


Once an audit procedure is selected, auditors can vary the sample size from one to all Sample Size 
the items in the population being tested. In an audit procedure to verify cash 

disbursements, suppose 6,600 checks are recorded in the cash disbursements journal. 

The auditor might select a sample size of 50 checks for comparison with the cash 

disbursements journal. The decision of how many items to test must be made by the 

auditor for each audit procedure. The sample size for any given procedure is likely to 

vary from audit to audit. 


After determining the sample size Jy got pPPD#F're Fnhatra@esrecide Items to Select 


which items in the population to test. If thé auditor decides, for example, to select 50 
cancelled checks from a population of 6,600 for comparison with the cash disburse- 
ments journal, several different methods can be used to select the specific checks to be 
examined. The auditor can (1) select a week and examine the first 50 checks, (2) select 
the 50 checks with the largest amounts, (3) select the checks randomly, or (4) select 
those checks that the auditor thinks are most likely to be in error. Or, a combination of 
these methods can be used. 


An audit of financial statements usually covers a period such as a year. Normally an Timing 
audit is not completed until several weeks or months after the end of the period. The 
timing of audit procedures can therefore vary from early in the accounting period to 
long after it has ended. In part, the timing decision is affected by when the client needs 
the audit to be completed. In the audit of financial statements, the client normally 
wants the audit completed 1 to 3 months after year-end. The SEC currently requires 
that all public companies file audited financial statements with the SEC within 60 to 90 
days of the company’s fiscal year-end, depending on the company’s size. However, 
timing is also influenced by when the auditor believes the audit evidence will be most 
effective and when audit staff is available. For example, auditors often prefer to do 
counts of inventory as close to the balance sheet date as possible. 

Audit procedures often incorporate sample size, items to select, and timing into the 
procedure. The following is a modification of the audit procedure previously used to 
include all four audit evidence decisions. (Italics identify the timing, items to select, 
and sample size decisions.) 


* Obtain the October cash disbursements journal and compare the payee name, 
amount, and date on the cancelled check with the cash disbursements journal 
for a randomly selected sample of 40 check numbers. 
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Audit Program 


The list of audit procedures for an audit area or an entire audit is called an audit 
program. The audit program always includes a list of the audit procedures, and it usually 
includes sample sizes, items to select, and the timing of the tests. Normally, there is an 
audit program, including several audit procedures, for each component of the audit. 
Therefore, there will be an audit program for accounts receivable, one for sales, and so 
on. (To see an example of an audit program that includes audit procedures, sample size, 
items to select, and timing, turn to page 421 and see Table 13-4. The right side of the 
audit program also includes the balance-related audit objectives for each procedure, 
which were discussed in Chapter 6.) 

Many auditors use electronic audit software packages to generate audit programs. 
These software programs help the auditor address risks and other audit planning 
considerations and select appropriate audit procedures. 


PERSUASIVENESS OF EVIDENCE 





Specify the characteristics 
that determine the 
persuasiveness of evidence. 





Appropriateness 


Audit standards require the auditor to accumulate sufficient appropriate evidence to 
support the opinion issued. Because of the nature of audit evidence and the cost 
considerations of doing an audit, it is unlikely that the auditor will be completely 
convinced that the opinion is correct. However, the auditor must be persuaded that the 
opinion is correct with a high level of assurance. By combining all evidence from the 
entire audit, the auditor is able to decide when he or she is persuaded to issue an audit 
report. The two determinants of the persuasiveness of evidence are appropriateness 
and sufficiency. 


Appropriateness of evidence is a measure of the quality of evidence, meaning its 
relevayce and reliabi udit objectives for classes of transactions, account 
baland Apage..BOR. Enhance ANEEE sidered highly appropriate, it is a 
great help in persuading the auditor that financial statements are fairly stated. 

Note that appropriateness of evidence deals only with the audit procedures 
selected. Appropriateness cannot be improved by selecting a larger sample size or 


different population items. It can be improved only by selecting audit procedures that 
are more relevant or provide more reliable evidence. 


Relevance of Evidence Evidence must pertain to or be relevant to the audit objective 
that the auditor is testing before it can be appropriate. For example, assume that the 
auditor is concerned that a client is failing to bill customers for shipments (completeness 
transaction objective). If the auditor selects a sample of duplicate sales invoices and 
traces each to related shipping documents, the evidence is not relevant for the complete- 
ness objective and therefore is not appropriate evidence for that objective. A relevant 
procedure is to trace a sample of shipping documents to related duplicate sales invoices 
to determine whether each shipment was billed. The second audit procedure is relevant 
because the shipment of goods is the normal criterion used for determining whether a 
sale has occurred and should have been billed. By tracing from shipping documents to 
duplicate sales invoices, the auditor can determine whether shipments have been billed to 
customers. In the first procedure, when the auditor traces from duplicate sales invoices to 
shipping documents, it is impossible to find unbilled shipments. 

Relevance can be considered only in terms of specific audit objectives, because 
evidence may be relevant for one audit objective but not for a different one. In the 
previous shipping example, when the auditor traced from the duplicate sales invoices to 
related shipping documents, the evidence was relevant for the occurrence transaction 
objective. Most evidence is relevant for more than one, but not all, audit objectives. 


Reliability of Evidence Reliability of evidence refers to the degree to which 
evidence can be believable or worthy of trust. Like relevance, if evidence is considered 
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reliable it is a great help in persuading the auditor that financial statements are fairly 
stated. For example, if an auditor counts inventory, that evidence is more reliable than 
if management gives the auditor its own count amounts. 

Reliability, and therefore appropriateness, depends on the following six character- 
istics of reliable evidence: 


1. Independence of provider. Evidence obtained from a source outside the entity is 
more reliable than that obtained from within. Communications from banks, 
attorneys, or customers is generally considered more reliable than answers 
obtained from inquiries of the client. Similarly, documents that originate from 
outside the client’s organization, such as an insurance policy, are considered 
more reliable than are those that originate within the company and have never 
left the client’s organization, such as a purchase requisition. 

2. Effectiveness of client’s internal controls. When a client’s internal controls are 
effective, evidence obtained is more reliable than when they are weak. For 
example, if internal controls over sales and billing are effective, the auditor can 
obtain more reliable evidence from sales invoices and shipping documents 
than if the controls were inadequate. 

3. Auditor’s direct knowledge. Evidence obtained directly by the auditor through 
physical examination, observation, recalculation, and inspection is more reliable 
than information obtained indirectly. For example, if the auditor calculates the 
gross margin as a percentage of sales and compares it with previous periods, the 
evidence is more reliable than if the auditor relies on the calculations of the 
controller. 

4. Qualifications of individuals providing the information. Although the source 
of information is independent, the evidence will not be reliable unless the 
individual providing it is qualified to do so. Therefore, communications from 
attorneys and bank confirmations are typically more highly regarded than 
accounts receivable confirnaAkDaGOn DE na&nhancer busi- 
ness world. Also, evidence obtained directly by the auditor may not be reliable 
if the auditor lacks the qualifications to evaluate the evidence. For example, 
examining an inventory of diamonds by an auditor not trained to distinguish 
between diamonds and glass is not reliable evidence for the existence of 
diamonds. 

5. Degree of objectivity. Objective evidence is more reliable than evidence that 
requires considerable judgment to determine whether it is correct. Examples 
of objective evidence include confirmation of accounts receivable and bank 
balances, the physical count of securities and cash, and adding (footing) a list 
of accounts payable to determine whether it agrees with the balance in the 
general ledger. Examples of subjective evidence include a letter written by a 
client’s attorney discussing the likely outcome of outstanding lawsuits against 
the client, observation of obsolescence of inventory during physical exami- 
nation, and inquiries of the credit manager about the collectibility of 
noncurrent accounts receivable. When the reliability of subjective evidence is 
being evaluated, it is essential for auditors to assess the qualifications of the 
person providing the evidence. 

6. Timeliness. The timeliness of audit evidence can refer either to when it is 
accumulated or to the period covered by the audit. Evidence is usually more 
reliable for balance sheet accounts when it is obtained as close to the balance 
sheet date as possible. For example, the auditor’s count of marketable securities 
on the balance sheet date is more reliable than a count 2 months earlier. For 
income statement accounts, evidence is more reliable if there is a sample from 
the entire period under audit, such as a random sample of sales transactions 
for the entire year, rather than from only a part of the period, such as a sample 
limited to only the first 6 months. 
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Sufficiency 


Combined Effect 


DRAFT vs. FINAL: 
A BIG DIFFERENCE 


The quantity of evidence obtained determines its sufficiency. Sufficiency of evidence is 
measured primarily by the sample size the auditor selects. For a given audit procedure, 
the evidence obtained from a sample of 100 is ordinarily more sufficient than from a 
sample of 50. 

Several factors determine the appropriate sample size in audits. The two most 
important ones are the auditor’s expectation of misstatements and the effectiveness of 
the client’s internal controls. To illustrate, assume in the audit of Jones Computer Parts 
Co. that the auditor concludes that there is a high likelihood of obsolete inventory 
because of the nature of the client’s industry. The auditor will sample more inventory 
items for obsolescence in this audit than one where the likelihood of obsolescence is 
low. Similarly, if the auditor concludes that a client has effective rather than ineffective 
internal controls over recording fixed assets, a smaller sample size in the audit of 
acquisitions of fixed assets may be warranted. 

In addition to sample size, the individual items tested affect the sufficiency of 
evidence. Samples containing population items with large dollar values, items with a 
high likelihood of misstatement, and items that are representative of the population are 
usually considered sufficient. In contrast, most auditors usually consider samples 
insufficient that contain only the largest dollar items from the population unless these 
items make up a large portion of the total population amount. 


The persuasiveness of evidence can be evaluated only after considering the combination 
of appropriateness and sufficiency, including the effects of the factors influencing 
appropriateness and sufficiency. A large sample of evidence provided by an independent 
party is not persuasive unless it is relevant to the audit objective being tested. A large 
sample of evidence that is relevant but not objective is also not persuasive. Similarly, a 
small sample of only one or two pieces of highly appropriate evidence also typically 
lacks persuasiveness. When determining the persuasiveness of evidence, the auditor 
must APA “SDF “enhaneerenss and sufficiency, including all 
factorSi ig then have been nvet. 

Direct relationships among the four evidence decisions and the two qualities that 
determine the persuasiveness of evidence are shown in Table 7-2. To illustrate these 
relationships, assume an auditor is verifying inventory that is a major item in the finan- 
cial statements. Auditing standards require that the auditor be reasonably persuaded 
that inventory is not materially misstated. The auditor must therefore obtain a sufficient 





Star Technologies, Inc., a manufacturer of scientific 
computers, entered into a joint venture arrange- 
ment to loan funds to Glen Culler & Associates, a 
supercomputer developer, for the development of 
a new computer called the Culler 8. The loan 
repayment terms restricted Glen Culler’s use of 
the funds to research and development on the 
Culler 8. 

Star Technology reported its advance of funds 
to Glen Culler as a note receivable on its balance 
sheet. Star Technology's auditors obtained a draft 
of the loan agreement and used that as the 
primary audit evidence to support the accounting 
treatment. The auditors, however, failed to obtain 
the final executed loan agreement. Unfortunately, 
there were big differences between the draft and 
final versions of the agreement that materially 
impacted the substance of the transaction. Instead 
of supporting the inclusion of the advanced funds 
as a receivable on Star Technology's balance 
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sheet, the terms of the final executed agreement 
supported treatment of the loaned funds as 
research and development expense to be reported 
on the income statement. 

The audit firm learned about its oversight 
when its national office received an anonymous 
memo alleging the audit failure. The audit firm's 
follow-up on the matter ultimately led to an SEC 
investigation. The SEC eventually charged the 
audit firm partner for failure to obtain sufficient 
appropriate evidence and for failing to exercise 
due professional care. As a result of the partner's 
negligence, the SEC barred him from working in 
any capacity with a public company for a period of 
five years, among other penalties imposed by the 
SEC and the audit firm. 


Source: Accounting and Auditing Enforcement 
Release No. 455, Commerce Clearing House, Inc., 
Chicago. 








: 
TABLE 7-2 Relationships Among Evidence Decisions and Persuasiveness 








Audit Evidence Decisions Qualities Affecting Persuasiveness of Evidence 
Audit procedures and timing Appropriateness 

Relevance 

Reliability 


Independence of provider 
Effectiveness of internal controls 
Auditor's direct knowledge 
Qualifications of provider 
Objectivity of evidence 
Timeliness 
When procedures are performed 
Portion of period being audited 





Sample size and items to select Sufficiency 
Adequate sample size 
Selection of proper population items 











amount of relevant and reliable evidence about inventory. This means deciding which 
procedures to use for auditing inventory, as well as determining the sample size and 
items to select from the population to satisfy the sufficiency requirement. The combi- 
nation of these four evidence decisions must result in sufficiently persuasive evidence to 
satisfy the auditor that inventory is materially correct. The audit program section for 
inventory will reflect these decisions. In practice, the auditor applies the four evidence 
decisions to specific audit objectives in deciding sufficient appropriate evidence. 


In making decisions about evidence for a given audit, both persuasiveness and cost 
must be considered. It is rare when gnly gne type p pe salet- vet at verifying 
information. The persuasiveness Apage: 12) ati Skidered 
before selecting the best type or types of evidence. The auditor’s goal is to obtain a 
sufficient amount of appropriate evidence at the lowest possible total cost. However, 


cost is never an adequate justification for omitting a necessary procedure or not 
gathering an adequate sample size. 


Persuasiveness 
and Cost 


TYPES OF AUDIT EVIDENCE 


OBJECTIVE 7-4 


In deciding which audit procedures to use, the auditor can choose from eight broad 
categories of evidence, which are called types of evidence. Every audit procedure obtains 
one or more of the following types of evidence: 


1. Physical examination 
Confirmation 
Documentation 
Analytical procedures 
Inquiries of the client 
Recalculation 
Reperformance 
Observation 


Coy. Se oe te 


Figure 7-1 (p. 180) shows the relationships among auditing standards, types of 
evidence, and the four evidence decisions. Auditing standards provide general guidance 
in three categories, including evidence accumulation. The types of evidence are broad 
categories of the evidence that can be accumulated. Audit procedures include the four 
evidence decisions and provide specific instructions for the accumulation of evidence. 





Identify and apply the eight 
types of evidence used in 
auditing. 
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Physical Examination 


Confirmation 





Relationships Among Auditing Standards, Types of Evidence, and ) 
the Four Audit Evidence Decisions 


Broad guidelines 
concerning auditor 
qualifications and 
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accumulation, 
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Physical examination 
Confirmation 
Documentation 
Analytical procedures 
Inquiries of client 
Recalculation 
Reperformance 
Observation 


Broad categories of 
evidence available for 
the auditor's 
accumulation 


Types of 
evidence 








Specific instructions 
ites for the accumulation 
of types of evidence 
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procedures 
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AUDIT 
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Physical examination is the inspection or count by the auditor of a tangible asset. This 
type of evidence is most often associated with inventory and cash, but it is also appli- 
cable to the verification of securities, notes receivable, and tangible fixed assets. There is 
a distinction in auditing between the physical examination of assets, such as market- 
able securities and cash, and the examination of documents, such as cancelled checks 
and sales documents. If the object being examined, such as a sales invoice, has no 
inherent value, the evidence is called documentation. For example, before a check is 
signed, it is a document; after it is signed, it becomes an asset; and when it is cancelled, 
it becomes a document again. For correct auditing terminology, physical examination 
of the check can occur only while the check is an asset. 

Physical examination is a direct means of verifying that an asset actually exists 
(existence objective), and to a lesser extent whether existing assets are recorded 
(completeness objective). It is considered one of the most reliable and useful types of 
audit evidence. Generally, physical examination is an objective means of ascertaining 
both the quantity and the description of the asset. In some cases, it is also a useful 
method for evaluating an asset’s condition or quality. However, physical examination is 
not sufficient evidence to verify that existing assets are owned by the client (rights and 
obligations objective), and in many cases the auditor is not qualified to judge 
qualitative factors such as obsolescence or authenticity (realizable value objective). 
Also, proper valuation for financial statement purposes usually cannot be determined 
by physical examination (accuracy objective). 


Confirmation describes the receipt of a direct written response from a third party 
verifying the accuracy of information that was requested by the auditor. The response may 


180 Part 2 / THE AUDIT PROCESS 


be in electronic or paper form. The request is made to the client, and the client asks the 
third party to respond directly to the auditor. Because confirmations come from sources 
independent of the client, they are a highly regarded and often-used type of evidence. 
However, confirmations are relatively costly to obtain and may cause some inconvenience 
to those asked to supply them. Therefore, they are not used in every instance in which 
they are applicable. 

Auditors decide whether or not to use confirmations depending on the reliability 
needs of the situation as well as the alternative evidence available. Traditionally, con- 
firmations are seldom used in the audit of fixed asset additions because these can be 
verified adequately by documentation and physical examination. Similarly, confirma- 
tions are ordinarily not used to verify individual transactions between organizations, 
such as sales transactions, because the auditor can use documents for that purpose. 
Naturally, there are exceptions. Assume the auditor determines that there are two 
extraordinarily large sales transactions recorded 3 days before year-end. Confirmation of 
these two transactions may be appropriate. 

When practical and reasonable, U.S. auditing standards require the confirmation 
of a sample of accounts receivable. This requirement exists because accounts receivable 
usually represent a significant balance on the financial statements, and confirmations 
are a highly reliable type of evidence. Confirmation of accounts receivable is not 
required by international auditing standards, and is one example of differences between 
U.S. and international auditing standards. Confirmation of accounts receivable is 
discussed further in Chapter 16. 

Although confirmation is not required under U.S. GAAS for any account other 
than accounts receivable, this type of evidence is useful in verifying many types of 
information. The major types of information that are often confirmed, along with the 
source of the confirmation, are indicated in Table 7-3. 
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TABLE 7-3 Information Often Confirmed 
Information Source 
Assets 
Cash in bank Bank 
Marketable securities Investment custodian 
Accounts receivable Customer 
Notes receivable Maker 
Owned inventory out on consignment Consignee 
Inventory held in public warehouses Public warehouse 
Cash surrender value of life insurance Insurance company 
Liabilities 
Accounts payable Creditor 
Notes payable Lender 
Advances from customers Customer 
Mortgages payable Mortgagor 
Bonds payable Bondholder 
Owners’ Equity 
Shares outstanding Registrar and transfer agent 
Other Information 
Insurance coverage Insurance company 
Contingent liabilities Bank, lender, and client's legal counsel 
Bond indenture agreements Bondholder 
Collateral held by creditors Creditor 
S = 
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ELECTRONIC 
CONFIRMATIONS 


Documentation 


Confirmations have traditionally been mailed in 
paper form, but several factors have helped pro- 
mote the use of electronic confirmations of bank 
balances and other information. Interpretation 1 
of AU 330 clarified that confirmation requests 
may be transmitted and received electronically. In 
2008, Bank of America announced that it would 
only respond to bank confirmation requests sub- 
mitted electronically through a designated third- 


party service provider. The third party provides a 
secure environment for transmitting the confirma- 
tion to authenticated confirmation respondents, 
reducing the risk of interception and response 
time. 


Sources: 1. Interpretation No. 1 of AU 330, “Use 

of Electronic Confirmations” (www.aicpa.org); 

2. Guidance for Dealing with Electronic Confirmations, 
November 13, 2008 (www.journalofaccountancy.com). 





To be considered reliable evidence, confirmations must be controlled by the auditor 
from the time they are prepared until they are returned. If the client controls the 
preparation of the confirmation, does the mailing, or receives the responses, the auditor 
has lost control and with it independence; thus reducing the reliability of the evidence. 
Auditors often attempt to authenticate the identity of the confirmation respondent, 
especially for facsimile or electronic confirmation responses. 


Documentation is the auditor’s inspection of the client’s documents and records to sub- 
stantiate the information that is, or should be, included in the financial statements. The 
documents examined by the auditor are the records used by the client to provide 
information for conducting its business in an organized manner, and may be in paper 
form, electronic form, or other media. Because each transaction in the client’s 
organization is normally supported by at least one document, a large volume of this 
type of evidence is usually available. For example, the client often retains a customer 
order, a shipping document, and a duplicate sales invoice for each sales transaction. 
These same documents are useful evidence for the auditor to verify the accuracy of the 
client’s records for sales transactions. Documentation is widely used as evidence in 
audit AAA Os ukDFeadinhiam@e Hatively low cost. Sometimes, it is the 
only reasonable type of evidence available. 

Documents can be conveniently classified as internal and external. An internal docu- 
ment has been prepared and used within the client’s organization and is retained without 
ever going to an outside party. Internal documents include duplicate sales invoices, 
employees’ time reports, and inventory receiving reports. An external document has been 
handled by someone outside the client’s organization who is a party to the transaction 
being documented, but which are either currently held by the client or readily accessible. 
In some cases, external documents originate outside the client’s organization and end up 
in the hands of the client. Examples of external documents include vendors’ invoices, 
cancelled notes payable, and insurance policies. Some documents, such as cancelled 
checks, originate with the client, go to an outsider, and are finally returned to the client. 

The primary determinant of the auditor’s willingness to accept a document as 
reliable evidence is whether it is internal or external and, when internal, whether it was 
created and processed under conditions of effective internal control. Internal documents 
created and processed under conditions of weak internal control may not constitute 
reliable evidence. Original documents are considered more reliable than photocopies 
or facsimiles. Although auditors should consider the reliability of documentation, they 
rarely verify the authenticity of documentation. Auditors are not expected to be trained 
or be experts in document authentication. 

Because external documents have been in the hands of both the client and another 
party to the transaction, there is some indication that both members are in agreement 
about the information and the conditions stated on the document. Therefore, external 
documents are considered more reliable evidence than internal ones. Some external 
documents, such as title to land, insurance policies, indenture agreements, and contracts, 
have exceptional reliability because they are almost always prepared with considerable 
care and often have been reviewed by attorneys or other qualified experts. 
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When auditors use documentation to support recorded transactions or amounts, 
the process is often called vouching. To vouch recorded acquisition transactions, the 
auditor might, for example, verify entries in the acquisitions journal by examining 
supporting vendors’ invoices and receiving reports and thereby satisfy the occurrence 
objective. If the auditor traces from receiving reports to the acquisitions journal to 
satisfy the completeness objective, however, it is not appropriate to call it vouching. 
This latter process is called tracing. 


Analytical procedures use comparisons and relationships to assess whether account 
balances or other data appear reasonable compared to the auditor’s expectations. For 
example, an auditor may compare the gross margin percent in the current year with the 
preceding year’s. Analytical procedures are used extensively in practice, and are 
required during the planning and completion phases on all audits. We introduce the 
purposes of analytical procedures here and discuss the different types of analytical 
procedures more extensively in Chapter 8. 


Understand the Client’s Industry and Business Auditors must obtain knowledge 
about a client’s industry and business as a part of planning an audit. By conducting 
analytical procedures in which the current year’s unaudited information is compared 
with prior years’ audited information or industry data, changes are highlighted. These 
changes can represent important trends or specific events, all of which will influence 
audit planning. For example, a decline in gross margin percentages over time may 
indicate increasing competition in the company’s market area and the need to consider 
inventory pricing more carefully during the audit. Similarly, an increase in the balance 
in fixed assets may indicate a significant acquisition that must be reviewed. 


Assess the Entity’s Ability to Continue as a Going Concern Analytical procedures 
are often a useful indicator for determining whether the client company has financial 
problems. Certain analytical procedures can help Pp assess the likelihood of 
failure. For example, if a higher-th RADOati +e BARARGE Forth is 
combined with a lower-than-average ratio of profits to total assets, a relatively high risk 
of financial failure may be indicated. Not only will such conditions affect the audit plan, 


they may indicate that substantial doubt exists about the entity’s ability to continue as a 
going concern, which, as discussed in Chapter 3, requires a report modification. 


Indicate the Presence of Possible Misstatements in the Financial Statements 
Significant unexpected differences between the current year’s unaudited financial data 
and other data used in comparisons are commonly called unusual fluctuations. 
Unusual fluctuations occur when significant differences are not expected but do exist, or 
when significant differences are expected but do not exist. In either case, the presence of 
an accounting misstatement is one possible reason for the unusual fluctuation. If the 
unusual fluctuation is large, the auditor must determine the reason and be satisfied that 
the cause is a valid economic event and not a misstatement. For example, in comparing 
the ratio of the allowance for uncollectible accounts receivable to gross accounts receiv- 
able with that of the previous year, suppose that the ratio has decreased while, at the same 
time, accounts receivable turnover also decreased. The combination of these two pieces 
of information indicates a possible understatement of the allowance. This aspect of 
analytical procedures is often called “attention directing” because it results in more 
detailed procedures in the specific audit areas where misstatements might be found. 


Reduce Detailed Audit Tests When an analytical procedure reveals no unusual 
fluctuations, this implies the possibility of a material misstatement is minimized. In 
such cases, the analytical procedure constitutes substantive evidence in support of the 
fair statement of the related account balances, and it is possible to perform fewer 
detailed tests in connection with those accounts. In other cases, certain audit pro- 
cedures can be eliminated, sample sizes can be reduced, or the timing of the procedures 
can be moved farther away from the balance sheet date. 


Analytical Procedures 
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Inquiries of the Client 


Recalculation 


Reperformance 


Observation 


Appropriateness of 
Types of Evidence 


Inquiry is the obtaining of written or oral information from the client in response to 
questions from the auditor. Although considerable evidence is obtained from the client 
through inquiry, it usually cannot be regarded as conclusive because it is not from an 
independent source and may be biased in the client’s favor. Therefore, when the auditor 
obtains evidence through inquiry, it is normally necessary to obtain corroborating 
evidence through other procedures. (Corroborating evidence is additional evidence to 
support the original evidence.) As an illustration, when the auditor wants to obtain 
information about the client’s method of recording and controlling accounting 
transactions, the auditor usually begins by asking the client how the internal controls 
operate. Later, the auditor performs audit tests using documentation and observation 
to determine whether the transactions are recorded (completeness objective) and 
authorized (occurrence objective) in the manner stated. 


Recalculation involves rechecking a sample of calculations made by the client. 
Rechecking client calculations consists of testing the client’s arithmetical accuracy and 
includes such procedures as extending sales invoices and inventory, adding journals 
and subsidiary records, and checking the calculation of depreciation expense and 
prepaid expenses. A considerable portion of auditors’ recalculation is done by computer- 
assisted audit software. 


Reperformance is the auditor’s independent tests of client accounting procedures or 
controls that were originally done as part of the entity’s accounting and internal control 
system. Whereas recalculation involves rechecking a computation, reperformance 
involves checking other procedures. For example, the auditor may compare the price on 
an invoice to an approved price list, or may reperform the aging of accounts receivable. 
Another type of reperformance is for the auditor to recheck transfers of information by 
tracing information included in more than one place to verify that it is recorded at the 
same amount each time. For example, the auditor normally makes limited tests to 
ascerteePIagie ine onktn A@RGAHal has been included for the proper 
customer and at the correct amount in the subsidiary accounts receivable records and 
is accurately summarized in the general ledger. 


Observation is the use of the senses to assess client activities. Throughout the engage- 
ment with a client, auditors have many opportunities to use their senses—sight, 
hearing, touch, and smell—to evaluate a wide range of items. The auditor may tour the 
plant to obtain a general impression of the client’s facilities, or watch individuals 
perform accounting tasks to determine whether the person assigned a responsibility is 
performing it properly. Observation is rarely sufficient by itself because of the risk of 
client personnel changing their behavior because of the auditor’s presence. They may 
perform their responsibilities in accordance with company policy but resume normal 
activities once the auditor is not in sight. Therefore, it is necessary to follow up initial 
impressions with other kinds of corroborative evidence. Nevertheless, observation is 
useful in most parts of the audit. 


As discussed earlier in this chapter, the characteristics for determining the appropriate- 
ness of evidence are relevance and reliability. Table 7-4 includes the eight types of 
evidence related to five of the six criteria that determine the reliability of evidence. 
Note that two of the characteristics that determine the appropriateness of evidence— 
relevance and timeliness—are not included in Table 7-4. Each of the eight types of 
evidence included in the table has the potential to be both relevant and timely, 
depending on its source and when the evidence is obtained. Several other observations 
are apparent from studying Table 7-4. 
* First, the effectiveness of a client’s internal controls has significant influence on 
the reliability of most types of evidence. Obviously, internal documentation 
from a company with effective internal control is more reliable because the 
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Appropriateness of Types of Evidence 
































Criteria to Determine Appropriateness 
Effectiveness of 
Independence Client's Internal Auditor's Direct Qualifications Objectivity 
Type of Evidence of Provider Controls Knowledge of Provider of Evidence 
Physical examination High (auditor does) Varies High Normally high High 
(auditor does) 
Confirmation High Not applicable Low Varies—usually high High 
Documentation Varies—external more Varies Low Varies High 
independent than 
internal 
Analytical procedures High/low (auditor does/ _— Varies Low Normally high Varies—usually low 
client responds) (auditor does/ 
client responds) 
Inquiries of client Low (client provides) Not applicable Low Varies Varies—low to high 
Recalculation High (auditor does) Varies High High (auditor does) High 
Reperformance High (auditor does) Varies High High (auditor does) High 
Observation High (auditor does) Varies High Normally high Medium 
(auditor does) 











documents are more likely to be accurate. Conversely, analytical procedures will 
not be reliable evidence if the controls that produced the data provide inac- 
curate information. 

* Second, both physical cxamARAagA PRE i BAAR ighly 
reliable if the internal controls are effective, but their use differs considerably. 
This effectively illustrates that two completely different types of evidence can be 
equally reliable. 

* Third, a specific type of evidence is rarely sufficient by itself to provide appro- 
priate evidence to satisfy any audit objective. 


The two most expensive types of evidence are physical examination and confirmation. 
Physical examination is costly because it normally requires the auditor’s presence when 
the client is counting the asset, often on the balance sheet date. For example, physical 
examination of inventory can result in several auditors traveling to scattered geo- 
graphical locations. Confirmation is costly because the auditor must follow careful 
procedures in the confirmation preparation, mailing or electronic transmittal, receipt, 
and in the follow-up of nonresponses and exceptions. 

Documentation, analytical procedures, and reperformance are moderately costly. If 
client personnel provide documents and electronic files for the auditor and organize 
them for convenient use, documentation usually has a fairly low cost. When auditors 
must find those documents themselves, however, documentation can be extremely costly. 
Even under ideal circumstances, information and data on documents are sometimes 
complex and require interpretation and analysis. It is usually time-consuming for an 
auditor to read and evaluate a client’s contracts, lease agreements, and minutes of the 
board of directors meetings. Because analytical procedures are considerably less 
expensive than confirmations and physical examination, most auditors prefer to replace 
tests of details with analytical procedures when possible. For example, it may be far less 
expensive to calculate and review sales and accounts receivable ratios than to confirm 
accounts receivable. If it is possible to reduce the use of confirmations by performing 
analytical procedures, considerable cost savings can be achieved. But analytical procedures 


Cost of 
Types of Evidence 
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Types of Evidence and Four Evidence Decisions for a Balance-Related Audit Objective for 
Inventory* 








Evidence Decisions 




















Type of Evidence Audit Procedure Sample Size Items to Select Timing 

Observation Observe client's personnel counting All count teams Not applicable Balance sheet date 
inventory to determine whether they 
are properly following instructions 

Physical examination Count a sample of inventory and 120 items 40 items with large Balance sheet date 
compare quantity and description dollar value, plus 
to client's counts 80 randomly selected 

Documentation Compare quantity on client's perpetual 70 items 30 items with large Balance sheet date 
records to quantity on client's counts dollar value, plus 

L 40 randomly selected 
4 





*Balance-related audit objective: Inventory quantities on the client's perpetual records agree with items physically on hand. 


require the auditor to decide which analytical procedures to use, make the calculations, 
and evaluate the results. Doing so often takes considerable time. The cost of reperfor- 
mance tests depends on the nature of the procedure being tested. Comparatively 
simple tests such as reperforming the comparison of invoices to price lists are likely to 
take minimal time. However, reperforming procedures such as the client’s bank recon- 
ciliation are likely to take considerable time. 

The three least-expensive types of evidence are observation, inquiries of the client, 
and recalculation. Observation is normally done concurrently with other audit pro- 
cedures. Auditors can easily observe whether client personnel are following appropriate 
inventory counting procedures at the same time they count a sample of inventory 
(physiApagoiPDRvubnhaneenone extensively on every audit and 
normally have a low cost, although certain inquiries may be costly, such as obtaining 
written statements from the client documenting discussions throughout the audit. 
Recalculation is usually low cost because it involves simple calculations and tracing 
that can be done at the auditor’s convenience. Often, the auditor’s computer software 
is used to perform many of these tests. 


Application of Table 7-5 shows an application of three types of evidence to the four evidence decisions 
Types of Evidence for one balance-related audit objective—inventory quantities on the client’s perpetual 
to the Four records agree with items physically on hand. Take a moment to turn back to Table 6-4 
Evidence Decisions (p. 160) and examine column 3. These are the balance-related audit objectives for the 


audit of inventory for Hillsburg Hardware Co. The overall objective is to obtain 
persuasive evidence at minimum cost to verify that inventory is materially correct. The 
auditor must therefore decide: 


* Which audit procedures to use to satisfy each balance-related audit objective 
* What the sample size should be for each procedure 

* Which items from the population to include in the sample 

* When to perform each procedure 


For the objective “inventory quantities on the client’s perpetual records agree with 
items physically on hand,” the auditor selected the three types of evidence included in 
Table 7-5. The auditor decided that the other types of evidence studied in this chapter 
were not relevant or necessary for this objective. Only one audit procedure is included 
for each type of evidence, and illustrative decisions for sample size, items to select, and 
timing are shown for each procedure. 


Terms Used in As stated earlier, audit procedures are the detailed steps, usually written in the form of 
Audit Procedures instructions, for the accumulation of the eight types of audit evidence. They should be 
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sufficiently clear to enable all members of the audit team to understand what is to be 


done. 


Several terms commonly used to describe audit procedures are defined in Table 
7-6. To illustrate each term, an audit procedure and associated type of evidence are also 






































shown. 
: : ») 
TABLE 7-6 Terms, Audit Procedures, and Types of Evidence 
Term and Definition Illustrative Audit Procedure Type of Evidence 
Examine—A reasonably detailed study of a Examine a sample of vendors’ invoices to determine Documentation 
document or record to determine specific whether the goods or services received are 
facts about it. reasonable and of the type normally used by the 
client's business. 
Scan—A less-detailed examination of a Scan the sales journal, looking for large and unusual Analytical procedures 
document or record to determine whether transactions. 
there is something unusual warranting 
further investigation. 
Read—An examination of written information Read the minutes of a board of directors meeting and Documentation 
to determine facts pertinent to the audit. summarize all information that is pertinent to the 
financial statements in an audit file. 
Compute-A calculation done by the auditor Compute inventory turnover ratios and compare with Analytical procedures 
independent of the client. those of previous years as a test of inventory 
obsolescence. 
Recompute—A calculation done to determine Recompute the unit sales price times the number of Recalculation 
whether a client's calculation is correct. units for a sample of duplicate sales invoices and 
compare the totals with the calculations. 
Foot—Addition of a column of numbers to Foot the sales journal for a 1-month period and Recalculation 
determine whether the total is the same compare all totals with the general ledger. 
as the client's. 
Trace—An instruction normally associated Trace a sample of sales transactions from sales Documentation 
with documentation or reperformance. invoices to the sales journal, and compare customer 
The instruction should state what the name, date, and the total dollar value of the sale. 
auditor is tracing and where it is being Trace postings from the sales journal to the general Reperformance 
traced from and to. Often, an audit ledger accounts. 
procedure that includes the term trace 
will also include a second instruction, 
such as compare or recalculate. 
Compare—A comparison of information in Select a sample of sales invoices and compare the Documentation 
two different locations. The instruction unit selling price as stated on the invoice to the list 
should state which information is being of unit selling prices authorized by management. 
compared in as much detail as practical. 
Count—A determination of assets on hand Count a sample of 100 inventory items and compare Physical examination 
at a given time. This term should be quantity and description to client's counts. 
associated only with the type of evidence 
defined as physical examination. 
Observe—The act of observation should be Observe whether the two inventory count teams Observation 
associated with the type of evidence independently count and record inventory counts. 
defined as observation. 
Inquire—The act of inquiry should be Inquire of management whether there is any obsolete Inquiries of client 
associated with the type of evidence inventory on hand at the balance sheet date. 
defined as inquiry. 
Vouch—The use of documents to verify Vouch a sample of recorded acquisition transactions Documentation 
recorded transactions or amounts. to vendors’ invoices and receiving reports. 
3 <4 
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AUDIT DOCUMENTATION 





Understand the purposes 
of audit documentation. 





Purposes of 
Audit Documentation 


Ownership of 
Audit Files 


Auditing standards state that audit documentation is the principal record of auditing 
procedures applied, evidence obtained, and conclusions reached by the auditor in the 
engagement. Audit documentation should include all the information the auditor 
considers necessary to adequately conduct the audit and to provide support for the 
audit report. Audit documentation may also be referred to as working papers, although 
audit documentation is often maintained in computerized files. 


The overall objective of audit documentation is to aid the auditor in providing reason- 
able assurance that an adequate audit was conducted in accordance with auditing 
standards. More specifically, audit documentation, as it pertains to the current year’s 
audit, provides: 


A Basis for Planning the Audit If the auditor is to plan an audit adequately, the 
necessary reference information must be available in the audit files. The files may 
include such diverse planning information as descriptive information about internal 
control, a time budget for individual audit areas, the audit program, and the results of 
the preceding year’s audit. 


A Record of the Evidence Accumulated and the Results of the Tests Audit 
documentation is the primary means of documenting that an adequate audit was 
conducted in accordance with auditing standards. If the need arises, the auditor must 
be able to demonstrate to regulatory agencies and courts that the audit was well 
planned and adequately supervised; the evidence accumulated was appropriate and 
sufficient; and the audit report was proper, considering the results of the audit. 

When audit procedures involve sampling of transactions or balances, the audit 
documentation should identify the items tested. The audit files should also document 
signifAPaAg@andRDE issHeTdaaa Eno address them, and the basis for the 
conclusions reached. For example, the auditor should document specific transactions 
at year-end to determine whether transactions were recorded in the proper period. If 
misstatements are detected during these cutoff tests, the auditor should document the 
additional procedures performed to determine the extent of cutoff misstatements, the 
conclusion as to whether the account balances affected are fairly stated, and whether 
any audit adjustments should be proposed. 


Data for Determining the Proper Type of Audit Report Audit documentation 
provides an important source of information to assist the auditor in deciding whether 
sufficient appropriate evidence was accumulated to justify the audit report in a given set 
of circumstances. The data in the files are equally useful for evaluating whether the 
financial statements are fairly stated, given the audit evidence. 


A Basis for Review by Supervisors and Partners The audit files are the primary 
frame of reference used by supervisory personnel to review the work of assistants. The 
careful review by supervisors also provides evidence that the audit was properly supervised. 


In addition to the purposes directly related to the audit report, the audit files often 
serve as the basis for preparing tax returns, filings with the SEC, and other reports. 
They are also a source of information for issuing communications to management and 
those charged with governance, such as the audit committee, concerning various matters 
such as internal control deficiencies or operational recommendations. Audit files are 
also a useful frame of reference for training personnel and as an aid in planning and 
coordinating subsequent audits. 


Audit documentation prepared during the engagement, including schedules prepared 
by the client for the auditor, is the property of the auditor. The only time anyone else, 
including the client, has a legal right to examine the files is when they are subpoenaed 
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Jury studies conducted by a professional liability 
insurance company in California show jurors con- 
sider CPAs experts in documentation. Therefore, 
when practitioners are faced with a liability suit 
and have fallen short of that expectation, they are 
likely to be judged negligent. On the other hand, 
even an informal note documenting a brief 


THE BURDEN 
OF PROOF 





telephone conversation can sway a jury in the 
CPA's favor. Legally, the burden of proof rests with 
the plaintiff, but as a practical matter, the burden 
to document falls on the CPA. 

Source: Excerpted from an article by Ric Rosario, 


“Making Documentation Pay Off,” Journal of 
Accountancy (February 1995), p. 70. 





by a court as legal evidence. At the completion of the engagement, audit files are 
retained on the CPA’s premises for future reference and to comply with auditing 
standards related to document retention. 


The need to maintain a confidential relationship with the client is expressed in Rule 
301 of the Code of Professional Conduct, which states 


* A member shall not disclose any confidential information obtained in the 
course of a professional engagement except with the consent of the client. 


During the course of the audit, auditors obtain a considerable amount of informa- 
tion of a confidential nature, including officers’ salaries, product pricing and advertising 
plans, and product cost data. If auditors divulged this information to outsiders or to 
client employees who have been denied access, their relationship with management 
would be seriously strained. Furthermore, having access to the audit files would give 
employees an opportunity to alter the files. For these reasons, care must be taken to 
safeguard the audit files at all times. 


Auditing standards require that records for audits of private companies be retained for 
a minimum of five years. The RAGS regu ET {public companies 
to prepare and maintain audit files a ort R rel Hanseee in 
sufficient detail to support the auditor’s conclusions, for a period of not less than seven 
years. The law makes the knowing and willful destruction of audit documentation 
within the seven-year period a criminal offense subject to financial fines and imprison- 
ment up to ten years. 


SEC rules require public company auditors to maintain the following documen- 
tation: 


* Working papers or other documents that form the basis for the audit of the 
company’s annual financial statements or review of the company’s quarterly 
financial statements 

* Memos, correspondence, communications, other documents and records, in- 
cluding electronic records, related to the audit or review 


These rules significantly increase the audit documentation that must be retained for 
audits of public companies. For example, auditors of public companies are required to 
retain e-mail correspondence that contains information meeting the preceding criteria. 


Each CPA firm establishes its own approach to preparing and organizing audit files, 
and the beginning auditor must adopt the firm’s approach. This text emphasizes general 
concepts common to all audit documentation. 

Figure 7-2 (p. 190) illustrates the contents and organization of a typical set of audit 
files. They contain virtually everything involved in the audit. There is logic to the type 
of audit documentation prepared for an audit and the way it is arranged in the files, 
though different firms may follow somewhat different approaches. In the figure, the 
audit files start with general information, such as corporate data in the permanent files, 
and end with the financial statements and audit report. In between are the audit files 
supporting the auditor’s tests. 


Confidentiality of 
Audit Files 


Requirements 
for Retention of 
Audit Documentation 


Contents and 
Organization 


OBJECTIVE 7-6 


Prepare organized audit 
documentation. 
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led Audit File Contents and Organization ) 
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Permanent files contain data of a historical or continuing nature pertinent to the 
current audit. These files provide a convenient source of information about the audit 
that is of continuing interest from year to year. The permanent files typically include 
the following: 


* Extracts or copies of such company documents of continuing importance as the 


articles of incorporation, bylaws, bond indentures, and contracts. The contracts 
may include pension plans, leases, stock options, and so on. Each of these 
documents is significant to the auditor for as many years as it is in effect. 


* Analyses from previous years of accounts that have continuing importance to the 


auditor. These include accounts such as long-term debt, stockholders’ equity 
accounts, goodwill, and fixed assets. Having this information in the permanent 
files enables the auditor to concentrate on analyzing only the changes in the 
current year’s balance while retaining the results of previous years’ audits in a 
form accessible for review. 

Information related to understanding internal control and assessing control risk. 
This includes organization charts, flowcharts, questionnaires, and other internal 
control information, including identification of controls and weaknesses in the 
system. These records are used as a starting point for documenting the auditor’s 
understanding of the control system, since aspects of the systems are often 
unchanged from year to year. 

The results of analytical procedures from previous years’ audits. Among these data 
are ratios and percentages computed by the auditor and the total balance or the 
balance by month for selected accounts. This information is useful in helping 
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the auditor decide whether there are unusual changes in the current year’s 
account balances that should be investigated more extensively. 


Documenting analytical procedures, understanding of internal control, and 
assessing control risk are included in the current period audit files rather than in the 
permanent file by many CPA firms. 


The current files include all audit documentation applicable to the year under audit. 
There is one set of permanent files for the client and a set of current files for each year’s 
audit. The following are types of information often included in the current file: 


Audit Program Auditing standards require a written audit program for every audit. 
The audit program is ordinarily maintained in a separate file to improve the coordina- 
tion and integration of all parts of the audit, although some firms also include a copy 
of the audit program with each audit section’s audit documentation. As the audit 
progresses, each auditor initials or electronically signs the program for the audit 
procedures performed and indicates the date of completion. The inclusion in the audit 
files of a well-designed audit program completed in a conscientious manner is 
evidence of a high-quality audit. 


General Information Some audit files include current period information of a 
general nature rather than evidence designed to support specific financial statement 
amounts. This includes such items as audit planning memos, abstracts or copies of 
minutes of the board of directors meetings, abstracts of contracts or agreements not 
included in the permanent files, notes on discussions with the client, supervisors’ 
review comments, and general conclusions. 


Working Trial Balance Because the basis for preparing the financial statements is 
the general ledger, the amounts included in that record are the focal point of the audit. 
As early as possible after the balance sheet date, the auditor obtains or prepares a listing 
of the general ledger accounts anjh: ago PDF Enhancer is the 
working trial balance. Software programs ehable the auditor to download the client’s 
ending general ledger balances into a working trial balance file. 

The technique used by many firms is to have the auditor’s working trial balance in 
the same format as the financial statements. Each line item on the trial balance is 
supported by a lead schedule, containing the detailed accounts from the general ledger 
making up the line item total. Each detailed account on the lead schedule is, in turn, 
supported by proper schedules supporting the audit work performed and the 
conclusions reached. For example, the relationship between cash as it is stated on the 
financial statements, the working trial balance, the lead schedule for cash, and the 
supporting audit documentation is presented in Figure 7-3 (p. 192). As indicated, cash 
on the financial statements is the same as on the working trial balance and the total of 
the detail on the cash lead schedule. Initially, amounts for the lead schedule were taken 
from the general ledger. The audit work performed resulted in an adjustment to cash 
that will be shown in the detail schedules and is reflected on the lead schedule, the 
working trial balance, and the financial statements. 


Adjusting and Reclassification Entries When the auditor discovers material 
misstatements in the accounting records, the financial statements must be corrected. 
For example, if the client failed to properly reduce inventory for obsolete raw materials, 
the auditor can propose an adjusting entry to reflect the realizable value of the inventory. 
Even though adjusting entries discovered in the audit are often prepared by the auditor, 
they must be approved by the client because management has primary responsibility for 
the fair presentation of the statements. Figure 7-3 illustrates an adjustment of the 
general cash account for $90 (thousand). 

Reclassification entries are frequently made in the statements to present accounting 
information properly, even when the general ledger balances are correct. A common 
example is the reclassification for financial statement purposes of material credit 


Current Files 
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balances in accounts receivable to accounts payable. Because the balance in accounts 
receivable in the general ledger reflects the accounts receivable properly from the point 
of view of operating the company on a day-to-day basis, the reclassification entry is not 
included in the client’s general ledger. 

Only those adjusting and reclassification entries that significantly affect the fair 
presentation of financial statements must be recorded. Auditors decide when a 
misstatement should be adjusted based on materiality. At the same time, auditors must 
keep in mind that several immaterial misstatements that are not adjusted could, when 
combined, result in a material overall misstatement. It is common for auditors to 
summarize all entries that have not been recorded in a separate audit schedule as a 
means of assessing their cumulative effect. 


Supporting Schedules The largest portion of audit documentation includes the 
detailed supporting schedules prepared by the client or the auditors in support of 
specific amounts on the financial statements. Auditors must choose the proper type of 
schedule for a given aspect of the audit in order to document the adequacy of the audit 
and to fulfill the other objectives of audit documentation. Here are the major types of 
supporting schedules: 


* Analysis. An analysis is designed to show the activity in a general ledger account 
during the entire period under audit, tying together the beginning and ending 
balances. This type of schedule is normally used for accounts such as marketable 
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securities; notes receivable; allowance for doubtful accounts; property, plant, 
and equipment; long-term debt; and all equity accounts. The common charac- 
teristic of these accounts is the significance of the activity in the account during 
the year. In most cases, the analysis has cross-references to other audit files. 

* Trial balance or list. This type of schedule consists of the details that make up a 
year-end balance of a general ledger account. It differs from an analysis in that it 
includes only those items making up the end-of-the-period balance. Common 
examples include trial balances or lists in support of trade accounts receivable, 
trade accounts payable, repair and maintenance expense, legal expense, and 
miscellaneous income. An example is included in Figure 7-4. 

* Reconciliation of amounts. A reconciliation supports a specific amount and is 
normally expected to tie the amount recorded in the client’s records to another 
source of information. Examples include the reconciliation of cash balances with 
bank statements, the reconciliation of subsidiary accounts receivable balances 
with confirmations from customers, and the reconciliation of accounts payable 
balances with vendors’ statements. See the bank reconciliation example on page 
738. 

* Tests of reasonableness. A test of reasonableness schedule, as the name implies, 
contains information that enables the auditor to evaluate whether the client’s 


FIGURE 7-4 Common Characteristics of Proper Audit Documentation 
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Clipboard & Font ry Alignment & Number G Styles Cells Fditing 
-@ fe 
Client name —» Renaldo Machine Co. Schedule: C-1 ~<— Audit file reference 
Audit area —» Notes Receivable—Customers Preparer: J.B. ~<— Initials of preparer 
Balance sheet date —» 11/30/11 Date: 12/23/11 ~— Date prepared 
Face Accrued 
Interest Issue Maturity Amount Interest 
Customer's Name Rate Date Date 11-30-11 11-30-11 
Graham Metal Works 12% 10/04/11 12/03/11 x 150,000 Pp 2,850.00 @ 
Lopez Hardware Co. 14% 11/15/11 01/07/12 x 89,000 Pp SON @ 
Boise Hinge 11% 10/09/11 12/08/11 x 200,000 Pp SATIS @ 
Eastam Mfg. Co. 15% 11/10/11 01/02/12 x 72,000 Pp 600.00 @ 
Toledo Fabricators 14% 11/20/11 01/12/12 x 125,000 Pp 486.11 @ 
Manor Appliance Co. 13% 10/21/11 12/20/11 x 56,000 Pp 808.89 @ 
Commercial Copper 12% 10/30/11 12/29/11 x 170,000 Pp 1,756.67 @ 
862,000 10,198.62 


Cross-reference to f, t/b f, t/b 
Tick i general ledger trial balance 


x Agreed face amount, interest rate, issue and maturity dates to note receivable 
document. 


p Positive confirmation received. No material exceptions noted in face amount, 
issue and maturity dates, interest rate, and accrued interest (w/p C-2). Explanation of 

@ Recalculated accrued interest. No exceptions noted. audit procedures 

performed 

f Footed. 





t/b Traced and agreed to trial balance. 


Conclusion: Notes receivable balance at 11/30/11 appears fairly stated. 
The collectibility of all notes was discussed with the controller. <— Auditor's conclusion 
Per our conversation, all appear to be collectible. In my opinion, 
no loss provision is necessary. J.B. 
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WILL IT STAND UP 
IN COURT? 


Rhonda McMillan had been the in-charge auditor 
on the audit of Blaine Construction Company in 
2006. Now she is sitting here, in 2012, in a room 
full of attorneys who are asking her questions 
about the 2006 audit. Blaine was sold to another 
company in 2007 at a purchase price that was 
based primarily on the 2006 audited financial 
statements. Several of the large construction 
contracts showed a profit in 2006 using the 
percentage of completion method, but they 
ultimately resulted in large losses for the buyer. 
Because Rhonda’s firm audited the 2006 financial 
statements, the buyer is trying to make the case 
that Rhonda’s firm failed in their audit of contract 
costs and revenues. 

The buyer's attorney is taking Rhonda's 
deposition and is asking her about the audit work 


RHONDA I'm not sure, | forgot to date this 
one. But it must have been about 
the second week in March, because 
that’s when we did the field work. 


ATTORNEY Now I'd like to turn your attention 
to this tick mark next to the Baldwin 
contract. You see where it shows 
Baldwin, and then the red sort of 
cross-like mark? 


RHONDA Yes. 


ATTORNEY In the explanation for that tick mark 
it says: “Discussed status of job with 
Elton Burgess. Job is going according 
to schedule and he believes that the 
expected profit will be earned.” Now 
my question is, Ms. McMillan, what 


exactly was the nature and content 
of your discussion with Mr. Burgess? 


RHONDA Other than what is in the explanation 
to this tick mark, | have no idea. 
| mean, this all took place over 5 
years ago. | only worked on the 
engagement that 1 year, and | can 
hardly even remember that. 


she did on contracts. Referring to the audit files, 
his examination goes something like this: 
ATTORNEY Do you recognize this exhibit, and if 
you do, would you please identify it 
for us? 
RHONDA Yes, this is the summary of contracts 
in progress at the end of 2006. 
ATTORNEY Did you prepare this schedule? 
RHONDA | believe the client prepared it, 
but | audited it. My initials are 
right here in the upper right-hand 
corner. 
ATTORNEY When did you do this audit work? 


Rhonda’s work was not adequately documented, 
and what was there indicated that her testing 
relied almost exclusively on management inquiry 
without any required corroboration. Her audit firm 
was required to pay a significant settlement for 
damages to the buyer. 





balance appears to include a misstatement considering the circumstances in the 
engagement. Frequently, auditors test depreciation expense, the provision for 
federal income taxes, and the allowance for doubtful accounts using tests of 
reasonableness. These tests are primarily analytical procedures. 

* Summary of procedures. Another type of schedule summarizes the results of a 
specific audit procedure. A summary schedule documents the extent of testing, 
the misstatements found, and the auditor’s conclusion based on the testing. 
Examples are the summary of the results of accounts receivable confirmations 
and the summary of inventory observations. 

* Examination of supporting documents. A number of special-purpose schedules 
are designed to show detailed tests performed, such documents examined during 
tests of controls and substantive tests of transactions. These schedules show no 
totals, and they do not tie in to the general ledger because their purpose is 
document the tests performed and the results found. However, the schedules 
must state a positive or negative conclusion about the objective of the test. 

* Informational. This type of schedule contains information as opposed to audit 
evidence. These schedules include information for tax returns and SEC Form 
10-K and data such as time budgets and the client’s working hours, which are 
helpful in administration of the engagement. 

* Outside documentation. Much of the content of the audit files consists of outside 
documentation gathered by auditors, such as confirmation replies and copies of 
client agreements. Although not “schedules” in the usual sense, they are indexed 
and filed. Audit procedures are indicated on them in the same manner as on other 
schedules. 
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Read the insert on the preceding page about Rhonda McMillan and imagine yourself in Preparation of 
her position several years after completing an audit. The proper preparation of Audit Documentation 
schedules to document the audit evidence accumulated, the results found, and the 

conclusions reached is an important part of the audit. The documentation should be 

prepared in sufficient detail to provide an experienced auditor with no connection to 

the audit a clear understanding of the work performed, the evidence obtained and its 

source, and the conclusions reached. Although the design depends on the objectives 

involved, audit documentation should possess certain characteristics: 


* Each audit file should be properly identified with such information as the 
client’s name, the period covered, a description of the contents, the initials of the 
preparer, the date of preparation, and an index code. 

* Audit documentation should be indexed and cross-referenced to aid in 
organizing and filing. One type of indexing is illustrated in Figure 7-3 (p. 192). 
The lead schedule for cash has been indexed as A-1, and the individual general 
ledger accounts making up the total cash on the financial statements are indexed 
as A-2 through A-4. The final indexing is for the schedules supporting A-3 and 
A-4, 

* Completed audit documentation must clearly indicate the audit work performed. 
This is accomplished in three ways: by a written statement in the form of a memo- 
randum, by initialing the audit procedures in the audit program, and by notations 
directly on the schedules. Notations on schedules are accomplished by the use of 
tick marks, which are symbols adjacent to the detail on the body of the schedule. 
These notations must be clearly explained at the bottom of the schedule. 

* Audit documentation should include sufficient information to fulfill the objec- 
tives for which it was designed. To properly prepare audit documentation, the 
auditor must know his or her goals. For example, if a schedule is designed to list 
the detail and show the verification of support of a balance sheet account, such as 
prepaid insurance, it is essentiAPAGOctakD Ee s<MRanGe Lith the 
trial balance. 

* The conclusions that were reached about the segment of the audit under con- 
sideration should be plainly stated. 


The common characteristics of proper audit documentation preparation are 
indicated in Figure 7-4 (p. 193). 


Audit evidence is often available only in electronic form, and auditors must evaluate how Effect of Technology 
this affects their ability to gather sufficient appropriate evidence. In certain instances, on Audit Evidence and 
electronic evidence may exist only at a point in time. That evidence may not be retrievable Audit Documentation 
later if files are changed and if the client lacks backup files. Therefore, auditors must 
consider the availability of electronic evidence early in the audit and plan their 
evidence gathering accordingly. 





. : ; . : Describe how technology 
When evidence can be examined only in machine-readable form, auditors use Aficcsaudieen denceand 


computers to read and examine evidence. Commercial audit software programs, such audit documentation. 





as ACL and Interactive Data Extraction and Analysis (IDEA) software, are designed 
specifically for use by auditors. These programs are typically Windows-based and can 
easily be operated on the auditor’s desktop or notebook computer. The auditor obtains 
copies of client databases or master files and uses the software to perform a variety of 
tests of the client’s electronic data. These audit software packages are relatively easy to 
use, even by auditors with little IT training, and can be applied to a wide variety of 
clients with minimal customization. Auditors may also use spreadsheet software to 
perform audit tests. 

Auditors often use engagement management software to organize and analyze 
audit documentation. Using audit management software, an auditor can prepare a trial 
balance, lead schedules, supporting audit documentation, and financial statements, as 
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well as perform ratio analysis. The software also facilitates tracking audit progress by 
indicating the performance and review status of each audit area. Tick marks and other 
explanations, such as reviewer notes, can be entered directly into computerized files. In 
addition, data can be imported and exported to other applications, so auditors may 
download a client’s general ledger or export tax information to a commercial tax 
preparation package. Auditors also use local area networks and groupshare software 
programs to access audit documentation simultaneously from remote locations. 


SUMMARY 


An important part of every audit is determining the proper types and amounts of audit 
evidence to gather. Auditors use eight types of evidence in an audit. The persuasiveness of 
the evidence depends on both its appropriateness and sufficiency. The appropriateness of 
audit evidence is determined by its relevance in meeting audit objectives and its reliability. 

Audit documentation is an essential part of every audit for effectively planning the 
audit, providing a record of the evidence accumulated and the results of the tests, deciding 
the proper type of audit report, and reviewing the work of assistants. CPA firms establish 
their own policies and approaches to audit documentation to make sure that these 
objectives are met. High-quality CPA firms make sure that audit documentation is properly 


prepared and is sufficient for the circumstances in the audit. 


ESSENTIAL TERMS 


Analytical procedures—use of compari- 
sons and relationships to assess whether 
account balances or other_data_appear 


rasconmpago PDF Enhanc 


Appropriateness of evidence—a measure 
of the quality of evidence; appropriate 
evidence is relevant and reliable in 
meeting audit objectives for classes of 
transactions, account balances, and 
related disclosures. 


Audit documentation—the principal 
record of auditing procedures applied, 
evidence obtained, and conclusions 
reached by the auditor in the engagement 


Audit procedure—detailed instruction for 
the collection of a type of audit evidence 


Audit program—list of audit procedures 
for an audit area or an entire audit; the 
audit program always includes audit 
procedures and may also include sample 
sizes, items to select, and timing of the tests 


Confirmation—the auditor’s receipt of a 
direct written or electronic response from 
a third party verifying the accuracy of 
information requested 


Current files—all audit files applicable to 
the year under audit 


Documentation—the auditor’s inspection 
of the client’s documents and records to 
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substantiate the information that is or 
should be included in the financial state- 
ments 


CF nal document—a document, such 


as a vendor’s invoice, that has been used 
by an outside party to the transaction 
being documented and that the client 
now has or can easily obtain 


Inquiry—the obtaining of written or oral 
information from the client in response 
to specific questions during the audit 


Internal document—a document, such as 
an employee time report, that is prepared 
and used within the client’s organization 


Lead schedule—an audit schedule that 
contains the detailed accounts from the 
general ledger making up a line item total 
in the working trial balance 


Observation—the use of the senses to 
assess client activities 


Permanent files—auditors’ files that 
contain data of a historical or continuing 
nature pertinent to the current audit such 
as copies of articles of incorporation, 
bylaws, bond indentures, and contracts 


Persuasiveness of evidence—the degree 
to which the auditor is convinced that the 
evidence supports the audit opinion; the 
two determinants of persuasiveness are 


the appropriateness and sufficiency of the 
evidence 


Physical examination—the auditor’s in- 
spection or count of a tangible asset 


Recalculation—the rechecking of a sample 
of the computations made by the client, 
including mathematical accuracy of indi- 
vidual transactions and amounts and the 
adding of journals and subsidiary records 


Reliability of evidence—the extent to which 
evidence is believable or worthy of trust; 
evidence is reliable when it is obtained (1) 
from an independent provider, (2) from a 
client with effective internal controls, (3) 
from the auditor’s direct knowledge, (4) 
from qualified providers such as law firms 
and banks, (5) from objective sources, 
and (6) in a timely manner 


Reperformance—the auditor’s independent 
tests of client accounting procedures or 
controls that were originally done as part 


of the entity’s accounting and internal 
control system 


Sufficiency of evidence—the quantity of 
evidence; proper sample size 


Supporting schedules—detailed schedules 
prepared by the client or the auditor in 
support of specific amounts on the finan- 
cial statements 


Tick marks—symbols used on an audit 
schedule that provide additional informa- 
tion or details of audit procedures performed 


Unusual fluctuations—significant unex- 
pected differences indicated by analytical 
procedures between the current year’s 
unaudited financial data and other data 
used in comparisons 

Vouching—the use of documentation to 
support recorded transactions or amounts 
Working trial balance—a listing of the 
general ledger accounts and their year- 
end balances 


REVIEW QUESTIONS 


7-1 (Objective 7-1) Discuss the similarities and differences between evidence in a legal case 
and evidence in an audit of financial statements. 


7-2 (Objective 7-2) List the four maj okpPagoiiPDE nBnhance egy audit. 
7-3 (Objective 7-2) Describe what is meant by an audit procedure. Why is it important for 
audit procedures to be carefully worded? 


7-4 (Objective 7-2) Describe what is meant by an audit program for accounts receivable. 
What four things should be included in an audit program? 


7-5 (Objective 7-3) Explain why the auditor can be persuaded only with a reasonable level 
of assurance, rather than convinced, that the financial statements are correct. 


7-6 (Objective 7-3) Identify the two factors that determine the persuasiveness of evidence. 
How are these two factors related to audit procedures, sample size, items to select, and 
timing? 

7-7 (Objective 7-3) Identify the six characteristics that determine the reliability of evidence. 
For each characteristic, provide one example of a type of evidence that is likely to be reliable. 


7-8 (Objective 7-4) List the eight types of audit evidence included in this chapter and give 
two examples of each. 


7-9 (Objective 7-4) What are the characteristics of a confirmation? Distinguish between a 
confirmation and external documentation. 


7-10 (Objective 7-4) Distinguish between internal documentation and external docu- 
mentation as audit evidence and give three examples of each. 


7-11 (Objective 7-4) Explain the importance of analytical procedures as evidence in 
determining the fair presentation of the financial statements. 


7-12 (Objective 7-4) Identify the most important reasons for performing analytical procedures. 


7-13 (Objective 7-4) Your client, Harper Company, has a contractual commitment as a part 
of a bond indenture to maintain a current ratio of 2.0. If the ratio falls below that level on 
the balance sheet date, the entire bond becomes payable immediately. In the current year, 
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the client’s financial statements show that the ratio has dropped from 2.6 to 2.05 over the 
past year. How should this situation affect your audit plan? 


7-14 (Objective 7-4) Distinguish between attention-directing analytical procedures and 
those intended to eliminate or reduce detailed substantive procedures. 


7-15 (Objective 7-5) List the purposes of audit documentation and explain why each 
purpose is important. 


7-16 (Objectives 7-5, 7-6) For how long does the Sarbanes—Oxley Act require auditors of 
public companies to retain audit documentation? 


7-17 (Objective 7-6) Explain why it is important for audit documentation to include each 
of the following: identification of the name of the client, period covered, description of the 
contents, initials of the preparer, date of the preparation, and an index code. 


7-18 (Objective 7-6) Define what is meant by a permanent file, and list several types of 
information typically included. Why does the auditor not include the contents of the 
permanent file with the current year’s audit file? 


7-19 (Objective 7-6) Distinguish between the following types of current period sup- 
porting schedules and state the purpose of each: analysis, trial balance, and tests of 
reasonableness. 


7-20 (Objective 7-6) Why is it essential that the auditor not leave questions or exceptions in 
the audit documentation without an adequate explanation? 


7-21 (Objective 7-6) Define what is meant by a tick mark. What is its purpose? 


7-22 (Objective 7-5) Who owns the audit files? Under what circumstances can they be used 
by other people? 


7-23 (Objective 7-7) How does the auditor read and evaluate information that is available 


only MPAyGS PDF" Enhancer 


7-24 (Objective 7-7) Explain the purposes and benefits of audit documentation software. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


7-25 (Objectives 7-3, 7-4) The following questions concern persuasiveness of evidence. 
Choose the best response. 


a. Which of the following types of documentary evidence should the auditor consider to 

be the most reliable? 

(1) A sales invoice issued by the client and supported by a delivery receipt from an 
outside trucker. 

(2) Confirmation of an account payable balance mailed by and returned directly to 
the auditor. 

(3) A check, issued by the company and bearing the payee’s endorsement, that is 
included with the bank statements mailed directly to the auditor. 

(4) An audit schedule prepared by the client’s controller and reviewed by the client’s 
treasurer. 


b. Which of the following statements concerning audit evidence is true? 

(1) To be appropriate, audit evidence should be either persuasive or relevant, but 
need not be reliable. 

(2) The measure of the quantity and quality of audit evidence lies in the auditor’s 
judgment. 

(3) The difficulty and expense of obtaining audit evidence concerning an account 
balance is a valid basis for omitting the test. 

(4) A client’s accounting records can be sufficient audit evidence to support the 
financial statements. 
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c. 


Audit evidence can come in different forms with different degrees of persuasiveness. 
Which of the following is the least persuasive type of evidence? 

(1) Vendor’s invoice 

(2) Bank statement obtained from the client 

(3) Computations made by the auditor 

(4) Prenumbered sales invoices 


. Which of the following presumptions is correct about the reliability of audit evidence? 


(1) Information obtained indirectly from outside sources is the most reliable audit 
evidence. 

(2) To be reliable, audit evidence should be convincing rather than merely persuasive. 

(3) Reliability of audit evidence refers to the amount of corroborative evidence obtained. 

(4) Effective internal control provides more assurance about the reliability of audit 
evidence. 


7-26 (Objectives 7-5, 7-6) The following questions concern audit documentation. Choose 
the best response. 


a. 


DISCUSSION QUESTIONS AND PROBLEMS 


Which of the following is not a primary purpose of audit documentation? 
(1) To coordinate the audit. 

(2) To assist in preparation of the audit report. 

(3) To support the financial statements. 

(4) To provide evidence of the audit work performed. 


. During an audit engagement, pertinent data are compiled and included in the audit 


files. The audit files primarily are considered to be 

(1) aclient-owned record of conclusions reached by the auditors who performed the 
engagement. 

(2) evidence supporting financial statements. 

(3) support for the auditor’s representations as to compliance with auditing standards. 


(4) arecord to be used as a bsg GbR DE “myAAancer 


. Although the quantity, type, and content of audit documentation will vary with the 


circumstances, audit documentation generally will include the 

(1) copies of those client records examined by the auditor during the course of the 
engagement. 

(2) evaluation of the efficiency and competence of the audit staff assistants by the 
partner responsible for the audit. 

(3) auditor’s comments concerning the efficiency and competence of client manage- 
ment personnel. 

(4) auditing procedures followed and the testing performed in obtaining audit 
evidence. 


. The permanent file of an auditor’s working papers most likely would include copies of 


the 

(1) lead schedule. 
(2) attorney’s letters. 
(3) bank statements. 
(4) debt agreements. 


7-27 (Objective 7-4) The following are examples of documentation typically obtained by 
auditors: 


1. 


2 
3 
4 


Vendors’ invoices 
General ledger files 
Bank statements 
Cancelled payroll checks 
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Go ON: oF 


9: 
10. 
11. 
12. 
13: 
14, 
15. 
16. 
17. 
18. 


Required a. 


b. 


Payroll time records 

Purchase requisitions 

Receiving reports (documents prepared when merchandise is received) 
Minutes of the board of directors 

Remittance advices 

Signed W-4s (Employee’s Withholding Exemption Certificates) 
Signed lease agreements 

Duplicate copies of bills of lading 

Subsidiary accounts receivable records 

Cancelled notes payable 

Duplicate sales invoices 

Articles of incorporation 

Title insurance policies for real estate 

Notes receivable 


Classify each of the preceding items according to type of documentation: (1) internal 
or (2) external. 


Explain why external evidence is more reliable than internal evidence. 


7-28 (Objective 7-4) The following are examples of audit procedures: 


iF 


as 


10. 


11. 
12. 


13. 
14. 
15. 
16. 
17. 


18. 


Review the accounts receivable with the credit manager to evaluate their collecti- 
bility. 

Compare a duplicate sales invoice with the sales journal for customer name and 
amount. 

Add the sales journal entries to determine whether they were correctly totaled. 
Count inventory items and record the amount in the audit files. 

Obtain a letter from the client’s attorney addressed to the CPA firm stating that the 


attorney is not aware a ER ah ing lawsuits. 
A PAGO AB) AGS Entity on an inventory listing to test 


whether it is accurate. 

Obtain a letter from an insurance company to the CPA firm stating the amount of 
the fire insurance coverage on buildings and equipment. 

Examine an insurance policy stating the amount of the fire insurance coverage on 
buildings and equipment. 

Calculate the ratio of cost of goods sold to sales as a test of overall reasonableness of 
gross margin relative to the preceding year. 

Obtain information about internal control by requesting the client to fill out a 
questionnaire. 

Trace the total in the cash disbursements journal to the general ledger. 

Watch employees count inventory to determine whether company procedures are 
being followed. 

Examine a piece of equipment to make sure that a major acquisition was actually 
received and is in operation. 

Calculate the ratio of sales commission expense to sales as a test of sales commis- 
sions. 

Examine corporate minutes to determine the authorization of the issue of bonds. 
Obtain a letter from management stating that there are no unrecorded liabilities. 
Review the total of repairs and maintenance for each month to determine whether 
any month’s total was unusually large. 

Obtain a written statement from a bank stating that the client has $15,671 on deposit 
and liabilities of $500,000 on a demand note. 


Required Classify each of the preceding items according to the eight types of audit evidence: 
(1) physical examination, (2) confirmation, (3) documentation, (4) analytical procedures, 
(5) inquiries of the client, (6) recalculation, (7) reperformance, and (8) observation. 
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7-29 (Objective 7-4) List two examples of audit evidence the auditor can use in support of 


each of the following: 


a. 


moana 


Recorded amount of entries in the acquisitions journal 


. Physical existence of inventory 
. Accuracy of accounts receivable 
. Ownership of fixed assets 

. Liability for accounts payable 

. Obsolescence of inventory 


g. 


Existence of petty cash 


7-30 (Objective 7-4) Eight different types of evidence were discussed. The following 
questions concern the reliability of that evidence: 


a. 


b. 


Explain why confirmations are normally more reliable evidence than inquiries of the 
client. 

Describe a situation in which confirmation will be considered highly reliable and 
another in which it will not be reliable. 


. Under what circumstances is the physical observation of inventory considered 


relatively unreliable evidence? 


. Explain why recalculation tests are highly reliable but of relatively limited use. 
. Give three examples of relatively reliable documentation and three examples of less 


reliable documentation. What characteristics distinguish the two? 


. Give several examples in which the qualifications of the respondent or the quali- 


fications of the auditor affect the reliability of the evidence. 


. Explain why analytical procedures are important evidence even though they are 


relatively unreliable by themselves. 


7-31 (Objective 7-4) As auditor of the Star Manufacturing Company, you have obtained 





Required 


a. A trial balance taken from the \ApaygoPDF bei pharnee r 
Dr. (Cr.) 
Cash in bank $ 87,000 
Trade accounts receivable 345,000 
Notes receivable 125,000 
Inventories 317,000 
Land 66,000 
Buildings, net 350,000 
Furniture, fixtures, and equipment, net 325,000 
Trade accounts payable (235,000) 
Mortgages payable (400,000) 
Capital stock (300,000) 
Retained earnings (510,000) 
Sales (3,130,000) 
Cost of sales 2,300,000 
General and administrative expenses 622,000 
Legal and professional fees 3,000 
Interest expense 35,000 





b. There are no inventories consigned either in or out. 


c. All notes receivable are due from outsiders and held by Star. 


Which accounts should be confirmed with outside sources? Briefly describe from whom _ Required 
they should be confirmed and the information that should be confirmed. Organize your 


answer in the following format:* 
From Whom 
Account Name Confirmed 


Information to Be 
Confirmed 





*AICPA adapted. 
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7-32 (Objective 7-4) The following are various audit procedures performed to satisfy specific 
transaction-related audit objectives as discussed in Chapter 6. The general transaction-related 
audit objectives from Chapter 6 are also included. 
Audit Procedures 
1. Trace from receiving reports to vendors’ invoices and entries in the acquisitions 
journal. 
2. Add the sales journal for the month of July and trace amounts to the general ledger. 
3. Examine expense voucher packages and related vendors’ invoices for approval of 
expense account classification. 
4. Observe opening of cash receipts to determine that cash receipts are promptly 
deposited and recorded. 
5. Ask the accounts payable clerk about procedures for verifying prices, quantities and 
extensions on vendors’ invoices. 
6. Vouch entries in sales journal to sales invoices and related shipping documents. 
General Transaction-Related Audit Objectives 


Occurrence Posting and summarization 
Completeness Classification 
Accuracy Timing 

Required a. Identify the type of audit evidence used for each audit procedure. 


b. Identify the general transaction-related audit objective or objectives satisfied by each 
audit procedure. 


7-33 (Objective 7-4) The following audit procedures were performed in the audit of inven- 
tory to satisfy specific balance-related audit objectives as discussed in Chapter 6. The audit 
procedures assume that the auditor has obtained the inventory count sheets that list the client’s 
inventory. The general balance-related audit objectives from Chapter 6 are also included. 
Audit Procedures 
1. Test extend unit prices times quantity on the inventory list, test foot the list, and 
Apago oRDE: cer 
2. Trace selected quantities from the inventory list to the physical inventory to make 
sure that it exists and the quantities are the same. 

. Question operating personnel about the possibility of obsolete or slow-moving inventory. 

4. Select a sample of quantities of inventory in the factory warehouse and trace each item 
to the inventory count sheets to determine if it has been included and if the quantity 
and description are correct. 

5. Compare the quantities on hand and unit prices on this year’s inventory count sheets 
with those in the preceding year as a test for large differences. 

6. Examine sales invoices and contracts with customers to determine whether any goods 
are out on consignment with customers. Similarly, examine vendors’ invoices and 
contracts with vendors to determine whether any goods on the inventory listing are 
owned by vendors. 

7. Send letters directly to third parties who hold the client’s inventory and request that 
they respond directly to the auditors. 


1S) 


General Balance-Related Audit Objectives 


Existence Cutoff 

Completeness Detail tie-in 

Accuracy Realizable value 

Classification Rights and obligations 
Required a. Identify the type of audit evidence used for each audit procedure. 


b. Identify the general balance-related audit objective or objectives satisfied by each 
audit procedure. 


7-34 (Objectives 7-3, 7-4) The following are nine situations, each containing two means of 
accumulating evidence: 


1. Confirm receivables with consumers versus confirming accounts receivable with 
business organizations. 
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2. Physically examine 3-inch steel plates versus examining electronic parts. 

3. Examine duplicate sales invoices when several competent people are checking each 
other’s work versus examining documents prepared by a competent person on a 
one-person staff. 

4, Physically examine inventory of parts for the number of units on hand versus 
examining them for the likelihood of inventory being obsolete. 

5. Discuss the likelihood and amount of loss in a lawsuit against the client with client’s 
in-house legal counsel versus discussion with the CPA firm’s own legal counsel. 

6. Confirm the oil and gas reserves with a geologist specializing in oil and gas versus 
confirming a bank balance. 

7. Confirm a bank balance versus examining the client’s bank statements. 

8. Physically count the client’s inventory held by an independent party versus con- 
firming the count with an independent party. 

9. Obtain a physical inventory count from the company president versus physically 
counting the client’s inventory. 


a. Identify the six factors that determine the reliability of evidence. Required 


b. For each of the nine situations, state whether the first or second type of evidence is 
more reliable. 


c. For each situation, state which of the six factors affected the reliability of the evidence. 


7-35 (Objective 7-4) Following are 10 audit procedures with words missing and a list of 
several terms commonly used in audit procedures. 


Audit Procedures 

1. the unit selling price times quantity on the duplicate sales invoice and 
compare the total to the amount on the duplicate sales invoice. 

2. whether the accounts receivable bookkeeper is prohibited from handling 
cash. 

3, the ratio of cost of goods sold to sales and compare the ratio to previous years. 

4, the sales journal and —Apago° PpERaRAhancer 

5. the sales journal, looking for Targe and unusual transactions requiring 
investigation. 

6. of management whether all accounting employees are required to take annual 
vacations. 

7. all marketable securities as of the balance sheet date to determine whether 
they equal the total on the client’s list. 

8. the balance in the bank account directly with the East State Bank. 

9: a sample of duplicate sales invoices to determine if the controller’s approval is 
included and each duplicate sales invoice to the sales journal for agreement of 
name and amount. 

10. the agreement between Johnson Wholesale Company and the client to 
determine whether the shipment is a sale or a consignment. 





Terms 
a. Examine e. Recompute i. Count 
b. Scan f. Foot j. Observe 
c. Read g. Trace k. Inquire 
d. Compute h. Compare l. Confirm 


a. For each of the 12 blanks in procedures 1 through 10, identify the most appropriate Required 
term. No term can be used more than once. 


b. For each of the procedures | through 10, identify the type of evidence that is being used. 


7-36 (Objective 7-4) Analytical procedures consist of evaluations of financial information 
made by a study of plausible relationships among both financial and nonfinancial data. 
They range from simple comparisons to the use of complex models involving many 
relationships and elements of data. They involve comparisons of recorded amounts, or 
ratios developed from recorded amounts, to expectations developed by the auditors. 


a. Describe the broad purposes of analytical procedures. Required 
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r 
Vandervoort Company Schedule N-1 Date 
A/C # 110—Notes Receivable Prepared by JD 1-21-12 
12-31-11 Approved by PP 2-15-12 
MARTIN- 
APEX CO. AJAX, INC. J.J. CO. P. SMITH PETERSON TENT CO. 
Date made 6/15/10 11/21/10 11/1/10 7/26/11 5/12/10 9/3/11 
Date due 6/15/12 Demand $ 200/mo. $1,000/mo. Demand $400/mo. 
Paid to date None Paid 12/31/11 9/30/11 Paid 11/30/11 
Face amount $5;000 x $3559! x $ 135180 x $ 25,000 x $2100 = $ 125000 x 
Interest rate 5% 5% 5% 5% 5% 6% 
Value of security None None $ 24,000 $ 50,000 None $ 10,000 
Note Receivable: 
12/31/10 bal. $4,000 py $3,591 py $ 12,780 py $ 0 $2,100 py $ 0 
Additions 25,000 12,000 
Payments (1,000) x $(3,591) x (2,400) x (5,000) x (2,100) x (1,600) x 
12/31/11 bal. $3,000 $ 0 $ 10,380 $ 20,000 $ 0 $ 10,400 TOTALS 
Current $3,000 = $ 2,400 $ 12,000 = $ 4,800 $22,200 tb 
Long-term = = 7,980 8,000 = 5,600 21,580 tb 
Hee nel 00 ee ee eee 
Interest Receivable: 
12/31/10 bal. $ 104 py $ O py $ 24 py $ 0 $ 0 py §$ 0 $ 128 
Interest earned WS) x OZ ex ih x 468 x 105 x 16255 x: 1,589 # 
Interest received 0 (102) x (601) x (200) x (105) x (108) x (1,116) 
12/31/11 bal. $ 279 $ 0 $ 0 $ 268 $ 0 $ 54 $ 601 a/r 
x = Tested 
py = Agrees with prior year’s audit schedules. 
tb = Agrees with working trial balance. 
# = Agrees with miscellaneous income analysis in operations w/p. 
l a/r = Agrees with A/R lead schedule. 
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b. When are analytical procedures required during an audit? Explain why auditors use 
analytical procedures extensively in all parts of the audit. 


c. Describe the factors that influence the extent to which an auditor will use the results of 
analytical procedures to reduce detailed tests in meeting audit objectives.* 


7-37 (Objectives 7-5, 7-6) You are the in-charge on the audit of Vandervoort Company and 
are to review the audit schedule shown above. 
Required a. List the deficiencies in the audit schedule. 
b. For each deficiency, state how the audit schedule could be improved. 


c. Prepare an improved audit schedule, using an electronic spreadsheet software program. 
Include an indication of the audit work done as well as the analysis of the client data 
(instructor’s option). 


CASES 


7-38 (Objective 7-4) Grande Stores is a large discount catalog department store chain. 
The company has recently expanded from 6 to 43 stores by borrowing from several large 
financial institutions and from a public offering of common stock. A recent investigation 


*AICPA adapted. 
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has disclosed that Grande materially overstated net income. This was accomplished by 
understating accounts payable and recording fictitious supplier credits that further reduced 
accounts payable. An SEC investigation was critical of the evidence gathered by Grande’s 
audit firm, Montgomery & Ross, in testing accounts payable and the supplier credits. 

The following is a description of some of the fictitious supplier credits and unrecorded 
amounts in accounts payable, as well as the audit procedures. 


1. McClure Advertising Credits—Grande had arrangements with some vendors to share 
the cost of advertising the vendor’s product. The arrangements were usually agreed to 
in advance by the vendor and supported by evidence of the placing of the ad. Grande 
created a 114-page list of approximately 1,100 vendors, supporting advertising credits of 
$300,000. Grande’s auditors selected a sample of 4 of the 1,100 items for direct confir- 
mation. One item was confirmed by telephone, one traced to cash receipts, one to a 
vendor credit memo for part of the amount and cash receipts for the rest, and one to a 
vendor credit memo. Two of the amounts confirmed differed from the amount on the 
list, but the auditors did not seek an explanation for the differences because the amounts 
were not material. 

The rest of the credits were tested by selecting 20 items (one or two from each page 
of the list). Twelve of the items were supported by examining the ads placed, and 
eight were supported by Grande debit memos charging the vendors for the promo- 
tional allowances. 

. Springbrook Credits—Grande created 28 fictitious credit memos totaling $257,000 
from Springbrook Distributors, the main supplier of health and beauty aids to 
Grande. Grande’s controller initially told the auditor that the credits were for returned 
goods, then said they were a volume discount, and finally stated they were a payment 
so that Grande would continue to use Springbrook as a supplier. One of the Montgomery 
& Ross staff auditors concluded that a $257,000 payment to retain Grande’s business 
was too large to make economic sense. 

The credit memos indicated that the credits were for damaged merchandise, 
volume rebates, and advertising PAGO ThE DEirEnhancewnation 
of the credits. In response, Jon Steiner, the president of Grande Stores, placed a call to 
Mort Seagal, the president of Springbrook, and handed the phone to the staff 
auditor. In fact, the call had been placed to an officer of Grande. The Grande officer, 
posing as Seagal, orally confirmed the credits. Grande refused to allow Montgomery 
& Ross to obtain written confirmations supporting the credits. Although the staff 
auditor doubted the validity of the credits, the audit partner, Mark Franklin, accepted 
the credits based on the credit memoranda, telephone confirmation of the credits, 
and oral representations of Grande officers. 

. Ridolfi Credits—$130,000 in credits based on 35 credit memoranda from Ridolfi, Inc., 
were purportedly for the return of overstocked goods from several Grande stores. A 
Montgomery & Ross staff auditor noted the size of the credit and that the credit memos 
were dated subsequent to year-end. He further noticed that a sentence on the credit 
memos from Ridolfi had been obliterated by a felt-tip marker. When held to the light, 
the accountant could read that the marked-out sentence read, “Do not post until 
merchandise received.” The staff auditor thereafter called Harold Ridolfi, treasurer of 
Ridolfi, Inc., and was informed that the $130,000 in goods had not been returned and 
the money was not owed to Grande by Ridolfi. Steiner advised Franklin, the audit 
partner, that he had talked to Harold Ridolfi, who claimed he had been misunder- 
stood by the staff auditor. Steiner told Franklin not to have anyone call Ridolfi to 
verify the amount because of pending litigation between Grande and Ridolfi, Inc. 

. Accounts Payable Accrual—Montgomery & Ross assigned a senior with experience in 
the retail area to audit accounts payable. Although Grande had poor internal control, 
Montgomery & Ross selected a sample of 50 for confirmation of the several thousand 
vendors who did business with Grande. Twenty-seven responses were received, and 21 
were reconciled to Grande’s records. These tests indicated an unrecorded liability of 
approximately $290,000 when projected to the population of accounts payable. 
However, the investigation disclosed that Grande’s president made telephone calls to 


N 


1S) 


eS 


Chapter 7 / AUDIT EVIDENCE 


205 


206 


Required 


Required 


some suppliers who had received confirmation requests from Montgomery & Ross 
and told them how to respond to the request. 

Montgomery & Ross also performed a purchases cutoff test by vouching accounts 
payable invoices received for nine weeks after year-end. The purpose of this test was to 
identify invoices received after year-end that should have been recorded in accounts payable. 
Thirty percent of the sample ($160,000) was found to relate to the prior year, indicating 
a potential unrecorded liability of approximately $500,000. The audit firm and Grande 
eventually agreed on an adjustment to increase accounts payable by $260,000. 


Identify deficiencies in the sufficiency and appropriateness of the evidence gathered in the 
audit of accounts payable of Grande Stores. 


7-39 (Objectives 7-5, 7-6) The long-term debt schedule on page 207 (indexed K-1) was 
prepared by client personnel and audited by AA, an audit assistant, during the calendar 
year 2011 audit of American Widgets, Inc., a continuing audit client. The engagement 
supervisor is reviewing the audit documentation thoroughly. 


Identify the deficiencies in the audit schedule that the engagement supervisor should 
discover.* 


ACL PROBLEM 


| 


7-40 (Objective 7-4) This problem requires the use of ACL software, which is included in the 
CD attached to the text. Information about installing and using ACL and solving this problem 
can be found in Appendix, pages 838-842. You should read all of the reference material 
preceding instructions about “Quick Sort” before locating the appropriate command to 
answer questions a-f. For this problem, use the file labeled “Payroll” in the “Payroll_Analysis” 
subfolder under tables in Sample_Project. The suggested command or other source of infor- 
mationneeded to oP F enhanc is included at the end of each question. 
of 


ap ANGEHs in the file. (Read the bottom of the 


Payroll file screen.) 


a. 


b. Determine the largest and smallest payroll transaction (gross pay) for the month of 
September. (Quick Sort) 


c. Determine gross pay for September. (Total) 

d. Determine and print gross pay by department. (Summarize) 

e. Recalculate net pay for each payroll transaction for September and compare it to the 
amount included in the file. (Filter) 

f. Determine if there are any gaps or duplicates in the check (cheque) numbers. If there 
are gaps or duplicates, what is your concern? (Gaps and Duplicates) 


INTERNET PROBLEM 7-1: USE OF AUDIT SOFTWARE 





FOR FRAUD DETECTION AND CONTINUOUS AUDITING 


Required 


The use of audit software has increased dramatically in recent years. Software is now used to 
fulfill administrative functions in the audit environment, document audit work, and conduct 
data analysis. This problem requires students to visit the ACL web site (www.acl.com) to 
learn how auditors use ACL to address issues of fraud detection and continuous auditing. 
a. Read about ACL’s solution for fraud detection. What are some of the benefits of ACL 
for fraud detection? 
b. What is continuous monitoring? How might a company use ACL to comply with 
requirements related to internal control over financial reporting? 


*AICPA adapted. 
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American Widgets, Inc. 


Long-Term Debt 














Interest Costs from Long-Term Debt 


Interest expense for year 
Average loan balance outstanding 


Five-Year Maturities (for disclosure purposes) 


December 31, 2011 
Interest Balance 2011 2011 Balance Interest 
Lender Rate Payment Terms Collateral 12/31/10 Borrowings Reductions 12/31/11 paid to 
® First 12% Interest only on 25th _ Inventories $ 50,000 ¥ $300,000 A $100,000 @ $ 250,000 CX 12/25/11 
Commercial of month, principal 1/31/11 6/30/11 
Bank due in full 1/1/15; 
no prepayment 
penalty 
® Lender's Prime _ Interest only on last 2nd Mortgage 100,000 V 50,000 A = 200,000 C 12/31/11 
Capital plus 1% day of month, princi- on Park St. 2/29/11 
Corp. pal due in full 3/5/13. Building 
® Gigantic 12% $5,000 principal 1st Mortgage 720,000 ¥ = 60,000 © 660,000 C 12/5/11 
Building & plus interest dueon _ on Park St. 
Loan Assoc. 5th of month, duein Building 
full 12/31/22 
® J. Lott, 0% Due in full 12/31/14 | Unsecured 300,000 V _— 100,000 N 200,000 C — 
majority 12/31/11 
stockholder 
$1,170,000 V $350,000 $260,000 $1,310,000 T/B 
F E 18 E 
Tick Mark Legend 
F Readded, foots correctly 
iG Confirmed without exception, W/P K-2 
xs Confirmed with exception, W/P K-3 
NR Does not recompute correctly 
A Agreed to loan agreement, validated bank deposit ticket, and board of directors authorization, Year-end 
W/P W-7 
iS) Agreed to cancelled checks and lender’s monthly statements 
N Agreed to cash disbursements journal and cancelled check dated 12/31/11, clearing 1/8/12 
T/B Traced to working trial balance 
V Agreed to 12/31/10 audit files 
® Agreed interest rate, term, and collateral to copy of note and loan agreement 
@ Agreed to cancelled check and board of directors authorization, W/P W-7 


Overall Conclusions 


Long-term debt, accrued interest payable, and interest expense are correct and complete at 12/31/11 


























Index K-1 
Initials Date 

Prepared by AA 3/22/12 
Approved by 

Accrued 

Interest 

Payable 

12/31/11 Comments 

$2,500 NR Dividend of $80,000 paid 


9/2/11 (W/P N-3) violates 
a provision of the debt 
agreement, which thereby 
permits lender to demand 
immediate payment; 
lender has refused to waive 
this violation 


— Prime rate was 8% to 
9% during the year 





5,642 R Reclassification entry for 
current portion proposed 
(See RJE-3) 

— Borrowed additional 
$100,000 from J. Lott 
on 1/7/12 
$8,142 T/B 
F 


$ 281,333 T/B 
$1,406,667 R 


12S) $ 60,000 
12/31/13 260,000 
12/31/14 260,000 
12/31/15 310,000 
12/31/16 60,000 
Thereafter 360,000 
$1,310,000 
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AUDIT PLANNING AND 
ANALYTICAL PROCEDURES 








After studying this chapter, 

The Fall Of Enron: you should he able to : 
Did Anyone Understand Their Business? Ba 

- iscuss why adequate audit 
The bankruptcy of Enron Corporation, at one time the nation’s largest planning is essential. 
energy wholesaling company, represents the biggest corporate collapse in 8-2 Make client acceptance 
American history. Despite being listed as No. 7 on the Fortune 500 list decisions and perform initial 
with a market capitalization of $75 billion before its collapse, the melt- clrel Teo 
down of Enron was rapid. The fall began in October 2001 when Enron 8-3 Gain an understanding of the 
officials reported a shocking $618 million quarterly loss related to GIES EUSIIESS Ci HRESDy 
allegedly mysterious and hidden related party partnerships with company 8-4 Assess client business risk. 
insiders. Then, in early November 2001, company officials were forced to 8-5 Perform preliminary analytical 
admit that they had falsely claimed almost $600 million in earnings dating procedures. 
back to 1997, requiring the restatement of four years of audited financial 8-6 State the purposes of analytical 
statements. By the end of 2001, the company was in bankruptcy. procedures and the timing of 

each purpose. 

Enron was created in 1985 out of a merger of two gas pipelines, and was 8-7 Select the most appropriate 
a pioneer in trading natural gas and electricity in the newly deregulated analytical procedure from 
utilities markets. In its earlier years, Enron madejits money frqm hard among the five major types. 
assets like pipelines. However, by thele@# Fe | soblatRadYE ESL 2-8 compute common financial 
earnings came from a more vague business known as “wholesale energy ratios. 


b 4 





operations and services.” Enron had built new markets, such as trading of 
weather securities. In early 2001, speculation about Enron’s business 
dealings began to surface. One highly regarded investment banker publicly stated that no one could explain how 
Enron actually made money. 


In the wake of the collapse, many wonder how these issues could go undetected for so long. Many point to Enron's 
incredibly complicated business structure and related vague and confusing financial statements. “What we are 
looking at here is an example of superbly complex financial reports. They didn’t have to lie. All they had to do was to 
obfuscate it with sheer complexity,” noted John Dingell, U.S. Congressman from Michigan. Others even allege that 
the men running the company never even understood their business concept because it was too complicated. 


Apparently, the complexity and uncertainty surrounding Enron’s business and financial statements fooled their 
auditors, too. Enron’s auditor faced a flurry of attacks, class action lawsuits, and a criminal indictment that ultimately 
led to the firm's demise. In December 2001 congressional testimony, the audit firm’s CEO admitted that the firm’s 
professional judgment “turned out to be wrong” and that they mistakenly let Enron keep the related entities separate 
when they should have been consolidated. 


The Enron disaster continues to provide many lessons for the auditing profession. One to be underscored for auditors 
is the paramount importance of understanding the company’s business and industry to identify significant business 
risks that increase the risk of material misstatements in the financial statements. Without that understanding, it will 
be almost impossible to identify the next Enron. 


Source: Adapted from Bethany McLean, “Why Enron Went Bust,” Fortune (December 24, 2001), pp. 58-68. 


A s the chapter story illustrates, Enron’s complex and confusing business structure helped disguise material mis- 
statements in Enron financial statements for several years. Gaining an understanding of the client’s business and 
industry is one of the most important steps in audit planning. This chapter explains audit planning in detail, in- 
cluding gaining an understanding of the client’s business and industry, assessing client business risk, and performing 
preliminary analytical procedures. 


OBJECTIVE 8-1 The first generally accepted auditing standard of field work requires adequate planning. 


Discuss why adequate audit 
planning is essential. The auditor must adequately plan the work and must properly supervise any assistants. 


There are three main reasons why the auditor should properly plan engagements: to 
enable the auditor to obtain sufficient appropriate evidence for the circumstances, to help 
keep audit costs reasonable, and to avoid misunderstandings with the client. Obtaining 
sufficient appropriate evidence is essential if the CPA firm is to minimize legal liability 
and maintain a good reputation in the business community. Keeping costs reasonable 
helps the firm remain competitive. Avoiding misunderstandings with the client is 
necessary for good client relations and for facilitating high-quality work at reasonable 
cost. Suppose that the auditor informs the client that the audit will be completed before 
June 30 but is unable to finish it until August because of inadequate scheduling of staff. 
The client is likely to be upset with the CPA firm and may even sue for breach of contract. 


boneea Planning an Audit and Designing an Audit Approach ) 


Accept client and perform 
initial audit planning 


Understand the client's 
business and industry 


Assess client business risk 


Perform preliminary 
analytical procedures 


Set materiality and 
assess acceptable audit 
risk and inherent risk 


Understand internal control 
and assess control risk 
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Gather information to 
assess fraud risks 


Develop overall audit 
plan and audit program 
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Figure 8-1 presents the eight major parts of audit planning. Each of the first seven 
parts is intended to help the auditor develop the last part, an effective and efficient 
overall audit plan and audit program. The first four parts of the planning phase of an 
audit are studied in this chapter. The last four are studied separately in later chapters. 

Before beginning our discussion, we briefly introduce two risk terms: acceptable 
audit risk and inherent risk. These two risks significantly influence the conduct and cost 
of audits. Much of the early planning of audits deals with obtaining information to 
help auditors assess these risks. 

Acceptable audit risk is a measure of how willing the auditor is to accept that the 
financial statements may be materially misstated after the audit is completed and an 
unqualified opinion has been issued. When the auditor decides on a lower acceptable 
audit risk, it means that the auditor wants to be more certain that the financial state- 
ments are not materially misstated. Zero risk is certainty, and a 100 percent risk is 
complete uncertainty. 

Inherent risk is a measure of the auditor’s assessment of the likelihood that there 
are material misstatements in an account balance before considering the effectiveness 
of internal control. If, for example, the auditor concludes that there is a high likelihood 
of material misstatement in accounts receivable due to changing economic conditions, 
the auditor concludes that inherent risk for accounts receivable is high. 

Assessing acceptable audit risk and inherent risk is an important part of audit 
planning because it helps determine the amount of evidence that will need to be 
accumulated and staff assigned to the engagement. For example, if inherent risk for 
inventory is high because of complex valuation issues, more evidence will be accumu- 
lated in the audit of inventory, and more experienced staff will be assigned to perform 
testing in this area. 


ACCEPT CLIENT AND PERFORM INITIAL AUDIT PLANNING 








Initial audit planning involves four things, all of which should be done early in the audit: OBJECTIVE 8-2 
1. The auditor decides whether to accept a new client or continue serving an Make client acceptance 
existing one. This determination is typically made by an experienced auditor decisions and perform initial 
who is in a position to make important decisions. The auditor wants to make __| audit planning. 
this decision early, before incurring any significant costs that cannot be 
recovered. 


2. The auditor identifies why the client wants or needs an audit. This information 
is likely to affect the remaining parts of the planning process. 

3. To avoid misunderstandings, the auditor obtains an understanding with the 
client about the terms of the engagement. 

4. The auditor develops an overall strategy for the audit, including engagement 
staffing and any required audit specialists. 


Even though obtaining and retaining clients is not easy in a competitive profession such Client Acceptance 
as public accounting, a CPA firm must use care in deciding which clients are accept- and Continuance 
able. The firm’s legal and professional responsibilities are such that clients who lack 

integrity or argue constantly about the proper conduct of the audit and fees can cause 

more problems than they are worth. Some CPA firms now refuse any clients in certain 

high-risk industries, such as software technology companies, health, and casualty 

insurance companies, and may even discontinue auditing existing companies in those 

industries. Some smaller CPA firms will not do audits of publicly held clients because 

of the risk of litigation or because of costs associated with registering the audit firm 

with the PCAOB. Stated in terms of acceptable audit risk, an auditor is unlikely to 

accept a new client or continue serving an existing client if acceptable audit risk is 

below the risk threshold the firm is willing to accept. 
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New Client Investigation Before accepting a new client, most CPA firms investigate 
the company to determine its acceptability. They do this by examining, to the extent 
possible, the prospective client’s standing in the business community, financial 
stability, and relations with its previous CPA firm. For example, many CPA firms use 
considerable caution in accepting new clients in newly formed, rapidly growing 
businesses. Many of these businesses fail financially and expose the CPA firm to 
significant potential liability. The CPA firm must also determine that it has the 
competency, such as industry knowledge, to accept the engagement and that the firm 
can satisfy all independence requirements. 

For prospective clients that have previously been audited by another CPA firm, the 
new (successor) auditor is required by auditing standards to communicate with the 
predecessor auditor. The purpose of the requirement is to help the successor auditor 
evaluate whether to accept the engagement. The communication may, for example, 
inform the successor auditor that the client lacks integrity or that there have been 
disputes over accounting principles, audit procedures, or fees. 

The burden of initiating the communication rests with the successor auditor, but the 
predecessor auditor is required to respond to the request for information. However, the con- 
fidentiality requirement in the Code of Professional Conduct requires that the predecessor 
auditor obtain permission from the client before the communication can be made. In the 
event of unusual circumstances such as legal problems or disputes between the client and 
the predecessor, the predecessor’s response can be limited to stating that no information 
will be provided. If a client will not permit the communication or the predecessor will 
not provide a comprehensive response, the successor should seriously consider the desir- 
ability of accepting a prospective engagement, without considerable other investigation. 

Even when a prospective client has been audited by another CPA firm, a successor 
may make other investigations by gathering information from local attorneys, other 
CPAs, banks, and other businesses. In some cases, the auditor may even hire a pro- 
PSO Rpago°o PDE Erhancer the reputation and background of 
key menitbers Of management. Such extensive investigation is appropriate when there 
has been no previous auditor, when a predecessor auditor will not provide the desired 
information, or if any indication of problems arises from the communication. 


Continuing Clients Many CPA firms evaluate existing clients annually to determine 
whether there are reasons for not continuing to do the audit. Previous conflicts over 
the appropriate scope of the audit, the type of opinion to issue, unpaid fees, or other 
matters may cause the auditor to discontinue association. The auditor may also drop a 
client after determining the client lacks integrity. 

Even if none of the previously discussed conditions exist, the CPA firm may decide 
not to continue doing audits for a client because of excessive risk. For example, a CPA 
firm might decide that considerable risk of a regulatory conflict exists between a 
governmental agency and a client, which could result in financial failure of the client 
and ultimately lawsuits against the CPA firm. Even if the engagement is profitable, the 
long-term risk may exceed the short-term benefits of doing the audit. 

Investigating new clients and reevaluating existing ones is an essential part of 
deciding acceptable audit risk. For example, assume a potential client operates in a 
reasonably risky industry, that its management has a reputation of integrity, but is also 
known to take aggressive financial risks. If the CPA firm decides that acceptable audit 
risk is extremely low, it may choose not to accept the engagement. If the CPA firm 
concludes that acceptable audit risk is low but the client is still acceptable, the firm may 
accept the engagement but increase the fee proposed to the client. Audits with a low 
acceptable audit risk will normally result in higher audit costs, which should be 
reflected in higher audit fees. 


Identify Client's 
Reasons for Audit 


Two major factors affecting acceptable audit risk are the likely statement users and 
their intended uses of the statements. The auditor is likely to accumulate more 
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evidence when the statements are to be used extensively, as is often the case for publicly 
held companies, those with extensive indebtedness, and companies that are to be sold 
in the near future. 

The most likely uses of the statements can be determined from previous experience 
with the client and discussions with management. Throughout the engagement, the 
auditor may get additional information about why the client is having an audit and the 
likely uses of the financial statements. This information may affect the auditor’s 
acceptable audit risk. 


A clear understanding of the terms of the engagement should exist between the client 
and the CPA firm. Auditing standards require that auditors document their under- 
standing with the client in an engagement letter, including the engagement’s 
objectives, the responsibilities of the auditor and management, and the engagement’s 
limitations. For public companies, the audit committee is responsible for hiring the 
auditor as required by the Sarbanes—Oxley Act. The engagement letter is typically 
signed by management for private companies. An example of an engagement letter for 
the audit of a private company is provided in Figure 8-2 (p. 214). 

The engagement letter may also include an agreement to provide other services 
such as tax returns or management consulting allowed under the Code of Professional 
Conduct and regulatory requirements. It should also state any restrictions to be 
imposed on the auditor’s work, deadlines for completing the audit, assistance to be 
provided by the client’s personnel in obtaining records and documents, and schedules 
to be prepared for the auditor. It often includes an agreement on fees. The engagement 
letter also serves the purpose of informing the client that the auditor cannot guarantee 
that all acts of fraud will be discovered. 

Engagement letter information is important in planning the audit principally 
because it affects the timing of the tests and the total amount of time the audit and 
other services will take. For example,if the deadli 40) brajttigg the audit report is 
soon after the balance sheet date, a Abad nie Bhe Bahan before 
the end of the year. If unexpected circumstances arise or if client assistance is not 
available, arrangements must be made to extend the amount of time for the engage- 
ment. Client-imposed restrictions on the audit can affect the procedures performed 
and possibly even the type of audit opinion issued. 


After understanding the client’s reasons for the audit, the auditor should develop a 
preliminary audit strategy. This strategy considers the nature of the client’s business 
and industry, including areas where there is greater risk of significant misstatements. 


Obtain an 
Understanding 
with the Client 


Develop Overall 
Audit Strategy 





ALL THAT Gold! Just as the discovery of gold at Sutter's Mill 
started the 1849 gold rush in California, the 
GLITTERS announcement of a major gold discovery in 
ISN’T GOLD Indonesia in 1993 sent Bre-X Minerals, Ltd., shares 


soaring on the Toronto stock exchange. The 
discovery was billed as the “gold discovery of the 
century,” and fights emerged over who had the 
tights to mine the gold. 

A thorough understanding of core operations at 
businesses such as Bre-X Minerals is critical when 
CPAs evaluate whether they can effectively serve as 
auditor. In situations like Bre-X that involve unique 
and complex operations, the auditor often must 
rely on the evaluation of specialists to understand 
the value of assets such as gold and other extrac- 
tive minerals. Without this kind of knowledge, the 
auditor may face enormous risks. 


While plenty of intrique surrounded the Bre-X 
gold find, it turned out to be a hoax. Fire destroyed 
all the geologist’s records of the find, and the 
exploration manager mysteriously plunged from 
a helicopter in an alleged suicide just before the 
announcement that the gold discovery appeared 
to be a fraud. Allegedly, the gold samples had been 
“salted” with gold, and the samples had been 
destroyed, preventing independent verification. 

A separate, independent analysis of the discovery 
by another company indicated insignificant 
amounts of gold, resulting in a 90 percent decline 
in the value of Bre-X shares. 


Source: Adapted from William C. Symonds and 
Michael Shari, “After Bre-X, the Glow is Gone,” 
BusinessWeek (April 14, 1997), pp. 38-39. 
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Engagement Letter 





HILYER AND RIDDLE, CPAs 
Macon, Georgia 31212 
June 14, 2011 
Mr. Chuck Milsaps, President 
Babb Clothing Co. 
4604 Oakley St. 
Macon, Georgia 31212 


Dear Mr. Milsaps: 


This will confirm our understanding of the arrangements for our audit of the financial 
statements of Babb Clothing Co. for the year ending December 31, 2011. 

We will audit the company’s financial statements for the year ending December 31, 2011, for 
the purpose of expressing an opinion on the fairness with which they present, in all material 
respects, the financial position, results of operations, and cash flows in conformity with account- 
ing principles generally accepted in the United States of America. 

We will conduct our audit in accordance with auditing standards generally accepted in the 
United States of America. Those standards require that we obtain reasonable, rather than 
absolute, assurance that the financial statements are free of material misstatement, whether caused 
by error or fraud. Accordingly, a material misstatement may remain undetected. Also, an audit is not 
designed to detect error or fraud that is immaterial to the financial statements; therefore, the 
audit will not necessarily detect misstatements less than this materiality level that might exist 
because of error, fraudulent financial reporting, or misappropriation of assets. If, for any reason, 
we are unable to complete the audit or are unable to form or have not formed an opinion, we may 
decline to express an opinion or decline to issue a report as a result of the engagement. 

Although an audit includes obtaining an understanding of internal control sufficient to plan 
the audit and to determine the nature, timing, and extent of audit procedures to be performed, it 
is not designed to provide assurance on internal control or to identify significant deficiencies. 
However, we are responsible for ensuring that the audit committee is aware of any significant 
deficiencies that come to our attention. 

The financial statements are the responsibility of the company’s management. Management 
is also responsible for (1) establishing and maintaining effective internal control over financial reports, 
(2) identifying and ensuring the company complies with the laws and regulations applicable to its 
activities, (3) making all financial records and related information available to us, and (4) provid- 
ing to us at the conclusion of the engagement a representation letter that, among other things, 
will confirm management's responsibility for the preparation of the financial statements in confor- 
mity with accounting principles generally accepted in the United States of America, the availability 
of financial records and related data, the completeness and availability of all minutes of the board 
and committee meetings, and to the best of its knowledge and belief, the absence of fraud involv- 
ing management or those employees who have a significant role in the entity's internal control. 

The timing of our audit and the assistance to be supplied by your personnel, including the 
preparation of schedules and analyses of accounts, are described on a separate attachment. 
Timely completion of this work will facilitate the completion of our audit. 

As part of our engagement for the year ending December 31, 2011, we will also prepare the 
federal and state income tax returns for Babb Clothing Co. 

Our fees will be billed as work progresses and are based on the amount of time required at 
various levels of responsibility, plus actual out-of-pocket expenses. Invoices are payable upon 
presentation. We will notify you immediately of any circumstances we encounter that could 
significantly affect our initial estimate of total fees of $135,000. 

If this letter correctly expresses your understanding, please sign the enclosed copy and 
return it to us. We appreciate the opportunity to serve you. 


Accepted: Yours very truly: 


Alan Hit, ef 
By: Chuck Milsaps Alan Hilyer 


Date: 6-21-11 Partner 
he ___ y 











The auditor also considers other factors such as the number of client locations and the 
past effectiveness of client controls in developing a preliminary approach to the audit. 
The planned strategy helps the auditor determine the resources required for the 
engagement, including engagement staffing. 
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Select Staff for Engagement The auditor must assign the appropriate staff to the 
engagement to meet generally accepted auditing standards and to promote audit 
efficiency. The first general standard states the following: 


The auditor must have adequate technical training and proficiency to perform the audit. 


Staff must therefore be assigned with that standard in mind, and those assigned to 
the engagement must be knowledgeable about the client’s industry. Larger audit engage- 
ments are likely to require one or more partners and staff at several experience levels. 
Individuals in multiple offices of the firm may be included, including offices outside 
the United States, if the client has operations in numerous locations around the world. 
Specialists in such technical areas as statistical sampling, business valuation, and 
computer risk assessment may also be assigned. On smaller audits, only one or two 
staff members may be needed. 

A major consideration of staffing is the need for continuity from year to year. 
Continuity helps the CPA firm maintain familiarity with the technical requirements and 
closer interpersonal relations with client personnel. An inexperienced staff assistant is 
likely to become the most experienced nonpartner on the engagement within a few years. 

Consider a computer manufacturing client with extensive inventory of computers 
and computer parts where inherent risk for inventory has been assessed as high. It is 
essential for the staff person doing the inventory portion of the audit to be experienced 
in auditing inventory. The auditor should also have a good understanding of the 
computer manufacturing industry. The CPA firm may decide to engage a specialist if 
no one within the firm is qualified to evaluate whether the inventory is obsolete. 


Evaluate Need for Outside Specialists As the story involving the gold claim at Bre- 
X illustrates, if the audit requires specialized knowledge, it may be necessary to consult 
a specialist. Auditing standards esta pagouiPDe. ean ACK and 
reviewing their work. Examples include using a diamond expert in evaluating the 
replacement cost of diamonds and an actuary for determining the appropriateness of 
the recorded value of insurance loss reserves. Another common use of specialists is 
consulting with attorneys on the legal interpretation of contracts and titles or business 
valuation experts on fair value accounting treatments. 

The auditor must have a sufficient understanding of the client’s business to 
recognize whether a specialist is needed. The auditor needs to evaluate the specialist’s 
professional qualifications and understand the objectives and scope of the specialist’s 
work. The auditor should also consider the specialist’s relationship to the client, 
including circumstances that might impair the specialist’s objectivity. The use of a 
specialist does not affect the auditor’s responsibility for the audit and the audit report 
should not refer to the specialist unless the specialist’s report results in a modification 
of the audit opinion. 


UNDERSTAND THE CLIENT'S BUSINESS AND INDUSTRY 


A thorough understanding of the client’s business and industry and knowledge about OBJECTIVE 8-3 

the company’s operations are essential for the auditor to conduct an adequate audit. Gain an mdeseadnec 

The second standard of field work states: ae clcniebisnesc and 
industry. 











The auditor must obtain a sufficient understanding of the entity and its environment, including its 
internal control, to assess the risk of material misstatement of the financial statements whether due 
to error or fraud, and to design the nature, timing, and extent of further audit procedures. 
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Industry and 
External Environment 


The nature of the client’s business and industry affects client business risk and the 
risk of material misstatements in the financial statements. (Client business risk is the 
risk that the client will fail to meet its objectives. It is discussed further later in the 
chapter.) In recent years, several factors have increased the importance of understanding 
the client’s business and industry: 


* Recent significant declines in economic conditions around the world are likely 
to significantly increase a client’s business risks. Auditors need to understand the 
nature of the client’s business to understand the impact of major economic 
downturns on the client’s financial statements and ability to continue as a going 
concern. 

* Information technology connects client companies with major customers and 
suppliers. As a result, auditors need greater knowledge about major customers 
and suppliers and related risks. 

* Clients have expanded operations globally, often through joint ventures or 
strategic alliances. 

* Information technology affects internal client processes, improving the quality 
and timeliness of accounting information. 

* The increased importance of human capital and other intangible assets has 
increased accounting complexity and the importance of management judgments 
and estimates. 

* Many clients may have invested in complex financial instruments, such as col- 
lateralized debt obligations or unusual mortgage backed securities, which may 
have declined in value, require complex accounting treatments, and often involve 
unknown counterparties who may create unexpected financial risks for the 
client. 


Auditors consider these factors using a strategic systems approach to under- 
standing the 50 Bp i ete re 8-3 provides an overview of the approach to 
inde RAG? cl AP) -aae hang 


EENext, we will discuss several aspects 
of this approach. 


The three primary reasons for obtaining a good understanding of the client’s industry 
and external environment are: 


1. Risks associated with specific industries may affect the auditor’s assessment of 
client business risk and acceptable audit risk—and may even influence auditors 
against accepting engagements in riskier industries, such as the financial 
services and health insurance industries. 

2. Many inherent risks are common to all clients in certain industries. Famil- 
iarity with those risks aids the auditor in assessing their relevance to the 





ECONOMIC 
VOLATILITY MAY 
IMPACT BUSINESS 
RISKS FOR YEARS 


The 2008 credit squeeze resulting from invest- 
ments in sub-prime mortgage backed securities 
and the subsequent failure of major banking 
institutions including Bear Stearns, Lehman 
Brothers, and Washington Mutual, led to Wall 
Street's biggest crisis since the Great Depression. 
Just prior to the crisis, the Dow Jones Industrial 
Average reached an all-time high of 14,164 in 
October 2007 only to plummet to 6,547 by March 
2009, creating an impact that was felt around the 
globe. 

While action by the Federal Reserve and 
Congress in 2009 helped to stabilize the economy, 
the debt crisis in Greece and other European 
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nations in 2010 continued to create volatility in 
stock and bond markets around the world. 
Investors remain concerned that the economy 
might worsen, thereby significantly decreasing 
profit outlooks for most sectors of the economy. 
Most experts believe the crisis will take years 
to overcome. Auditor knowledge of a client's 
business will be especially important as they 
consider the impact of economic declines on a 
client's core business operations and strategies. 
Sources: 1. “Credit Crisis—The Essentials,” The New 
York Times, (May 17, 2010); 2. “The Dow 2000- 
2009,” The Dow Jones Learning Center 
(www.djaverages.com). 
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client. Examples include potential inventory obsolescence in the fashion 
clothing industry, accounts receivable collection inherent risk in the consumer 
loan industry, and reserve AS BQO PDP mAnanebepance 
industry. 

3. Many industries have unique accounting requirements that the auditor must 
understand to evaluate whether the client’s financial statements are in accordance 
with accounting standards. For example, if the auditor is doing an audit of a city 
government, the auditor must understand governmental accounting and 
auditing requirements. Unique accounting requirements exist for construction 
companies, railroads, not-for-profit organizations, financial institutions, and 
many other organizations. 


Many auditor litigation cases (like those described in Chapter 5) result from the 
auditor’s failure to fully understand the nature of transactions in the client’s industry, 
similar to what occurred in the Enron case discussed in the opening vignette to this 
chapter. The auditor must also understand the client’s external environment, including 
such things as wide volatility in economic conditions, extent of competition, and 
regulatory requirements. For example, auditors of utility companies need more than 
an understanding of the industry’s unique regulatory accounting requirements. They 
must also know how recent deregulation in this industry has increased competition 
and how fluctuations in energy prices impact firm operations. To develop effective 
audit plans, auditors of all companies must have the expertise to assess external 
environment risks. 


The auditor should understand factors such as major sources of revenue, key customers 
and suppliers, sources of financing, and information about related parties that may indi- 
cate areas of increased client business risk. For example, many technology firms are 
dependent on one or a few products that may become obsolete due to new technologies 
or stronger competitors. Dependence on a few major customers may result in material 
losses from bad debts or obsolete inventory. 
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Tour Client Facilities and Operations A tour of the client’s facilities is helpful in 
obtaining a better understanding of the client’s business operations because it provides 
an opportunity to observe operations firsthand and to meet key personnel. By viewing 
the physical facilities, the auditor can assess physical safeguards over assets and 
interpret accounting data related to assets such as inventory in process and factory 
equipment. With such first-hand knowledge, the auditor is better able to identify 
inherent risks, such as unused equipment or potentially unsalable inventory. Discus- 
sions with nonaccounting employees during the tour and throughout the audit also 
help the auditor learn more about the client’s business to aid in assessing inherent risk. 


Identify Related Parties Transactions with related parties are important to auditors 
because accounting standards require that they be disclosed in the financial statements if 
they are material. A related party is defined in auditing standards as an affiliated 
company, a principal owner of the client company, or any other party with which the 
client deals, where one of the parties can influence the management or operating 
policies of the other. A related party transaction is any transaction between the client 
and a related party. Common examples include sales or purchase transactions between a 
parent company and its subsidiary, exchanges of equipment between two companies 
owned by the same person, and loans to officers. A less common example is the exercise 
of significant management influence on an audit client by its most important customer. 

A transaction with a related party is not an arm’s-length transaction. Therefore, 
there is a risk that they may not be valued at the same amount as a transaction with an 
independent third party. For example, a company may be able to purchase inventory 
from a related company at more favorable terms than from an outside vendor. Most 
auditors assess inherent risk as high for related parties and related party transactions, 
both because of the accounting disclosure requirements, the lack of independence 
between the parties involved in the transactions, and the opportunities they may 
provide to engage in fraudulent financial reporting. 

pApageiiRhF ,Bnhancer be disclosed, all related parties need 
to be identified and included in the auditor’s permanent files early in the engagement. (The 
disclosure requirements include the nature of the related party relationship; a descrip- 
tion of transactions, including dollar amounts; and amounts due from and to related 
parties.) Having all related parties included in the permanent audit files, and making 
sure all auditors on the team know who the related parties are, helps auditors identify 
undisclosed related party transactions as they do the audit. Common ways of identi- 
fying related parties include inquiry of management, review of SEC filings, and 
examining stockholders’ listings to identify principal stockholders. 

Because of the lack of independence between related parties, the Sarbanes—Oxley 
Act prohibits related party transactions that involve personal loans to any director or 
executive officer of a public company. Banks and other financial institutions, however, 
are permitted to make normal loans, such as residential mortgages, to their directors 
and officers using market rates. 


Because management establishes a company’s strategies and business processes, an 
auditor should assess management’s philosophy and operating style and its ability to 
identify and respond to risk, as these significantly influence the risk of material misstate- 
ments in the financial statements. Research commissioned by the Committee of 
Sponsoring Organizations of the Treadway Commission (COSO), Fraudulent Financial 
Reporting 1998-2007, found that in over 340 instances of fraudulent financial reporting 
investigated by the SEC the chief exeutive officer (CEO) or chief financial officer (CFO) 
was named as being involved in perpetrating the fraud, representing almost 90 percent 
of the cases. 

A firm’s governance includes its organizational structure, as well as the activities of 
the board of directors and the audit committee. An effective board of directors helps 
ensure that the company takes only appropriate risks, while the audit committee, 
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through oversight of financial reporting, can reduce the likelihood of overly aggressive 
accounting. To gain an understanding the client’s governance system, the auditor should 
understand how the board and audit committee exercise oversight, including con- 
sideration of the company’s code of ethics and evaluation of the corporate minutes. 


Code of Ethics Companies frequently communicate the entity’s values and ethical 
standards through policy statements and codes of conduct. In response to requirements 
in the Sarbanes—Oxley Act, the SEC requires each public company to disclose whether it 
has adopted a code of ethics that applies to senior management, including the CEO, CFO, 
and principal accounting officer or controller. A company that has not adopted such a 
code must disclose this fact and explain why it has not done so. The SEC also requires 
companies to promptly disclose amendments and waivers to the code of ethics for any of 
those officers. Auditors should gain knowledge of the company’s code of ethics and 
examine any changes and waivers of the code of conduct that have implications about 
the governance system and related integrity and ethical values of senior management. 


Minutes of Meetings The corporate minutes are the official record of the meetings 
of the board of directors and stockholders. They include key authorizations and sum- 
maries of the most important topics discussed at these meetings and the decisions made 
by the directors and stockholders. Common authorizations in the minutes include 
compensation of officers, new contracts and agreements, acquisitions of property, loans, 
and dividend payments. Examples of other information relevant to the audit include 
discussions about litigation, a pending issue of stock, or a potential merger. 

The auditor should read the minutes to obtain authorizations and other infor- 
mation that is relevant to performing the audit. This information should be included 
in the audit files by making an abstract of the minutes or by obtaining a copy and 
underlining significant portions. Before the audit is completed, the auditor must 
follow-up on this information to be sure that management has complied with actions 
taken by the stockholders and the AAS Pe DE Feet tetel guiporited 
compensation of officers should be traeed' teach individual oficer’s payrolfrecord as 
a test of whether the correct total compensation was paid. Similarly, the auditor should 
compare the authorizations of loans with notes payable to make certain that these 
liabilities are recorded and key terms disclosed. Litigation, pending stock issues, and 
merger information may need to be included in footnotes. Auditors often supplement 
their review of minutes with inquiries of the audit committee or full board about their 
awareness of events that might affect financial reporting. 


Strategies are approaches followed by the entity to achieve organizational objectives. 
Auditors should understand client objectives related to: 


1. Reliability of financial reporting 
2. Effectiveness and efficiency of operations 
3. Compliance with laws and regulations 


Despite management’s best efforts, business risks arise that threaten manage- 
ment’s ability to achieve its objectives. As a result, knowledge of client objectives and 
strategies helps the auditor to assess client business risk and inherent risk in the 
financial statements. For example, product quality can have a significant impact on 
the financial statements through lost sales and through warranty and product liability 
claims. Toyota Inc. suffered significant losses arising from business risks when 
production problems involving gas pedals and brakes in several of its most popular 
vehicles triggered significant declines in sales and stockholder value. 

As part of understanding the client’s objectives related to compliance with laws and 
regulations, the auditor should become familiar with the terms of client contracts and 
other legal obligations. These can include such diverse items as long-term notes and 
bonds payable, stock options, pension plans, contracts with vendors for future delivery of 
supplies, government contracts for completion and delivery of manufactured products, 
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royalty agreements, union contracts, and leases. Most contracts are of primary interest in 
individual parts of the audit and, in practice, receive special attention during the 
different phases of the detailed tests. For example, the provisions of a pension plan will 
receive substantial emphasis as a part of the audit of the unfunded liability for pensions. 
The auditor should review and abstract the documents early in the engagement to gain a 
better perspective of the organization and to better assess inherent risks. Later, these 
documents can be examined more carefully as a part of the tests of individual audit areas. 


A client’s performance measurement system includes key performance indicators that 
management uses to measure progress toward its objectives. These indicators go beyond 
financial statement figures, such as sales and net income, to include measures tailored to 
the client and its objectives. Such key performance indicators may include market share, 
sales per employee, unit sales growth, unique visitors to a Web site, same-store sales, 
sales by country, and sales per square foot for a retailer. 

Inherent risk of financial statement misstatements may be increased if the client 
has set unreasonable objectives or if the performance measurement system encourages 
aggressive accounting. For example, a company’s objective may be to obtain the leading 
market share of industry sales. If management and salespeople are compensated based 
on achieving this goal, there is increased incentive to record sales before they have been 
earned or record sales for nonexistent transactions. In such a situation, the auditor is 
likely to increase assessed inherent risk and the extent of testing for the occurrence 
transaction-related audit objective for sales. 

Performance measurement includes ratio analysis and benchmarking against key 
competitors. As part of understanding the client’s business, the auditor should perform 
ratio analysis or review the client’s calculations of key performance ratios. Performing 
preliminary analytical procedures is the fourth step in the planning process and is 
discussed later in this chapter. 
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ASSESS CLIENT BUSINESS RISK 





OBJECTIVE 8-4 


Assess client business risk. 





The auditor uses knowledge gained from the understanding of the client’s business and 
industry to assess client business risk, the risk that the client will fail to achieve its 
objectives. Client business risk can arise from any of the factors affecting the client and 
its environment, such as significant declines in the economy that threaten the client’s 
cash flows, new technology eroding a client’s competitive advantage, or a client failing 
to execute its strategies as well as its competitors. 

The auditor’s primary concern is the risk of material misstatements in the financial 
statements due to client business risk. For example, companies often make strategic 
acquisitions or mergers that depend on successfully combining the operations of two 
or more companies. If the planned synergies do not develop, the fixed assets and 
goodwill recorded in the acquisition may be impaired, affecting the fair presentation in 
the financial statements. 

Figure 8-4 summarizes the relationship among the client’s business and industry, 
client business risk, and the auditor’s assessment of the risk of material financial 
statement misstatements. The auditor’s assessment of client business risk considers the 
client’s industry and other external factors, as well as the client’s business strategies, 
processes and other internal factors. The auditor also considers management controls 
that may mitigate business risk, such as effective risk assessment practices and corporate 
governance. Remaining risk after considering the effectiveness of top management 
controls is sometimes called residual risk. After evaluating client business risk, the 
auditor can then assess the risk of material misstatement in the financial statements, 
and then apply the audit risk model to determine the appropriate extent of audit 
evidence. Use of the audit risk model is discussed in Chapter 9. 
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FIGURE 8-4 Understanding the Client's Business and Industry, Client Business ) 
Risk, and Risk of Material Misstatement 
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Management is a primary source for identifying client business risks. In public 
companies, management should conduct thorough evaluations of relevant client 
business risks that affect financial reporting to be able to certify quarterly and annual 
financial statements, and to evaluate the effectiveness of disclosure controls and pro- 
cedures required by the Sarbanes—Oxley Act. Boards of directors and senior executives 
increasingly implement an enterprise-wide approach to risk management as described 
in the shaded box on this page. 

Sarbanes—Oxley requires mnkpagorPRDEt iinhandeéirlosure 
controls and procedures to ensure that material information about business risks are 
communicated to management and disclosed to external stakeholders, such as investors. 
These procedures cover a broader range of information than is covered by an issuer’s 
internal controls for financial reporting. The procedures should capture information 
that is relevant to assess the need to disclose developments and risks that pertain to the 
company’s business. For example, if a subsidiary engages in significant hedging 
activities, controls should exist so that top management is informed of and discloses 
this information. Inquiries of management about client business risks it has identified, 
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BROADER FOCUS Expectations that boards and audit committees are Many organizations are adopting enterprise risk 
effectively overseeing an organization's risk manage- management (ERM) as a way to effectively manage 
ON RISK ment processes are at all time highs. As the volume the complex portfolio of risks that exist across an 
OVERSIGHT and complexity of risks increase due to highly organization. Instead of relying on a traditional, 
volatile economic conditions, globalization, emerging “silo-based” strategy, where each area of the 
technologies, and complex business transactions, organization manages its own risk, ERM adopts a 
key stakeholders are putting pressure on boards and broader top-down view of risks that integrates and 
senior executives to strengthen their approach to coordinates risk oversight across the entire enterprise. 
tisk management. For example, the New York Stock An effectively implemented ERM process should 
Exchange Final Governance Rules require the audit provide auditors important information about the 
committee to discuss management's guidelines and client's most significant business risk exposures. 
policies for risk oversight. Standard & Poor's ; 
evaluates an entity's enterprise-wide risk Sources: Adapted from 1. Proxy Disclosure Enhance- 
: Tito ie : ments, Securities and Exchange Commission, 
management as part of its credit rating analysis Washington, DC (December 16, 2009); 2. Standard 
procedures. Effective March 1, 2010, the SEC & Poor's to Apply Enterprise Risk Analysis to 
requires the board of directors to provide Corporate Ratings, Standard & Poor's, New York 
disclosures in proxy statements to stockholders that (May 7, 2008); 3. Final Governance Rules, New York 
describe the board's involvement in risk oversight. Stock Exchange (November 4, 2003). 
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in advance of certifying quarterly and annual financial statements, may provide a 
significant source of information for auditors about client business risks affecting 
financial reporting. 

The Sarbanes—Oxley Act also requires management to certify that it has informed 
the auditor and audit committee of any significant deficiencies in internal control, 
including material weaknesses. Such information enables auditors to better evaluate 
how internal controls may affect the likelihood of material misstatements in financial 
statements. 


PERFORM PRELIMINARY ANALYTICAL PROCEDURES 


OBJECTIVE 8-5 Auditors perform preliminary analytical procedures to better understand the client’s 
perorniere nina business and to assess client business risk. One such procedure compares client ratios 
analytical procedures. to industry or competitor benchmarks to provide an indication of the company’s 








performance. Such preliminary tests can reveal unusual changes in ratios compared to 
prior years, or to industry averages, and help the auditor identify areas with increased 
risk of misstatements that require further attention during the audit. 

The Hillsburg Hardware Co. example is used to illustrate the use of preliminary 
analytical procedures as part of audit planning. This is followed by a summary of the 
audit planning process, and further discussion of the use of analytical procedures 
throughout the audit. 

Table 8-1 presents key financial ratios for Hillsburg Hardware Co., along with 
comparative industry information that auditors might consider during audit planning. 
These ratios are based on the Hillsburg Hardware Co. financial statements. (See the 
glossy insert in this textbook.) Hillsburg’s Annual Report to Shareholders described 
the company as a wholesale distributor of hardware equipment to independent, 
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TABLE 8-1 Examples of Planning Analytical Procedures 
Hillsburg Industry Hillsburg Industry 

Selected Ratios 12/31/11 12/31/11 12/31/10 12/31/10 
Short-Term Debt-Paying Ability 
Cash ratio 0.06 0.22 0.06 0.20 
Quick ratio 1.57 3.10 1.45 3.00 
Current ratio 3.86 5.20 4.04 5.10 
Liquidity Activity Ratios 
Accounts receivable turnover 7.59 12.15 7.61 12.25 
Days to collect accounts receivable 48.09 30.04 47.96 29.80 
Inventory turnover 3.36 5.20 3.02 4.90 
Days to sell inventory 108.63 70.19 120.86 74.49 
Ability to Meet Long-Term Obligations 
Debt to equity 7S Zo 1.98 2.53 
Times interest earned 3.06 5.50 3.29 5.60 
Profitability Ratios 
Gross profit percent 27.85 31.00 27.10 32.00 
Profit margin 0.05 0.07 0.05 0.08 
Return on assets 0.09 0.09 0.08 0.09 
Return on common equity 0.26 0.37 0.24 0.35 

& = 
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high-quality hardware stores in the midwestern United States. The company is a niche 
provider in the overall hardware industry, which is dominated by national chains like 
Home Depot and Lowe’s. Hillsburg’s auditors identified potential increased compe- 
tition from national chains as a specific client business risk. Hillsburg’s market 
consists of smaller, independent hardware stores. Increased competition could affect 
the sales and profitability of these customers, likely affecting Hillsburg’s sales and the 
value of assets such as accounts receivable and inventory. An auditor might use ratio 
information to identify areas where Hillsburg faces increased risk of material mis- 
statements. 

The profitability measures indicate that Hillsburg is performing fairly well, despite 
the increased competition from larger national chains. Although lower than the 
industry averages, the liquidity measures indicate that the company is in good financial 
condition, and the leverage ratios indicate additional borrowing capacity. Because 
Hillsburg’s market consists of smaller, independent hardware stores, the company 
holds more inventory and takes longer to collect receivables than the industry average. 

In identifying areas of specific risk, the auditor is likely to focus on the liquidity 
activity ratios. Inventory turnover has improved but is still lower than the industry 
average. Accounts receivable turnover has declined slightly and is lower than the 
industry average. The collectibility of accounts receivable and inventory obsolescence 
are likely to be assessed as high inherent risks and will therefore likely warrant addi- 
tional attention in the current year’s audit. These areas likely received additional 
attention during the prior year’s audit as well. 
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SUMMARY OF THE PARTS OF AUDIT PLANNING 


A major purpose of audit planningis to gain an pH “e of the client’s busi- 
ness and industry, which is used to aga ab iF, nhancer. and 
the risk of material misstatements in the financial statements. Figure 8-5 (p. 224) 
summarizes the four major parts of audit planning discussed in this section and the 
key components of each part, with a brief illustration of how a CPA firm applied each 
component to a continuing client, Hillsburg Hardware Co. 

There are four additional parts of audit planning that are discussed in subsequent 
chapters. The four subsequent parts are: 


* Set materiality and assess acceptable audit risk and inherent risk (Chapter 9) 
* Understand internal control and assess control risk (Chapter 10) 

* Gather information to assess fraud risks (Chapter 11) 

* Develop an overall audit plan and audit program (Chapter 13) 


ANALYTICAL PROCEDURES 


Analytical procedures are one of the eight types of evidence introduced in Chapter 7. 
Because of the increased emphasis on analytical procedures in professional practice, 
this section moves beyond the preliminary analytical procedures discussed earlier in 
this chapter to discuss the uses of analytical procedures throughout the audit. 
Analytical procedures are defined by auditing standards as evaluations of 
financial information made by a study of plausible relationships among financial and 
nonfinancial data ... involving comparisons of recorded amounts ... to expectations 
developed by the auditor. This definition is more formal than the description of 
analytical procedures used in Chapter 7, but both say essentially the same thing. 
Analytical procedures use comparisons and relationships to assess whether account 
balances or other data appear reasonable relative to the auditor’s expectations. 


OBJECTIVE 8-6 





State the purposes of 
analytical procedures and 
the timing of each purpose. 
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Key Parts of Planning: Accept Client and Perform Initial Planning, Understand the Client's 
Business and Industry, Assess Client Business Risk, and Perform Preliminary Analytical 
Procedures Applied to Hillsburg Hardware Co. 
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MAJOR PART 








SUBPARTS OF 
PLANNING APPLICATION TO HILLSBURG HARDWARE CO. 
New client Hillsburg is a continuing audit client. No circumstances 
acceptance were identified in the continuation review to cause 


and continuance 


discontinuance. 














Identify client's 
reasons for audit 





There are two primary reasons. Company is publicly 
traded and audit is required by bank due to large notes 
payable outstanding. 





Obtain an 
understanding 
with the client 





Obtained an engagement letter before starting field 
work. 











Staff the 
engagement 





Partner—Joe Anthony 

Manager-—Leslie Franklin 

Senior—Fran Moore 

Assistant—Mitch Bray and one person to be named later 
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Understand client's 
industry and external 
environment 





Anthony and Franklin subscribe to industry publications. 
Moore reviewed industry data and reports in several 
databases and online sources. 








Understand client's 
operations, strategies, 
and performance 
system 





See Figure 8-3 (p. 217). Moore discussed with CEO and 
CFO, read minutes, and reviewed other key reports and 
performance indicators. 
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business risk 





Moore used her understanding of the client and 
industry to evaluate business risk. 
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Moore reviewed management and governance controls 
and their effect on business risk. 

















Assess risk of 
material 
misstatements 











Moore used her assessment of client business risk and 
management controls to identify audit areas with 
increased risk of misstatement. 








Moore compared 12-31-11 unaudited balances to the 
prior year. She calculated key ratios and compared them 
with prior years and industry averages. All significant 
differences were identified for follow-up. 
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The emphasis in the definition of analytical procedures is on expectations developed by 
the auditor. For example, the auditor might compare current-year recorded commission 
expense to an expectation of commission expense based on total recorded sales 
multiplied by the average commission rate as a test of the overall reasonableness of 
recorded commissions. For this analytical procedure to be relevant and reliable, the 
auditor has likely concluded that recorded sales are correctly stated, all sales earn a 
commission, and that the average actual commission rate is readily determinable. 

Analytical procedures may be performed at any of three times during an engagement: 


1. Analytical procedures are required in the planning phase to assist in determining 
the nature, extent, and timing of audit procedures. This helps the auditor 
identify significant matters requiring special consideration later in the engage- 
ment. For example, the calculation of inventory turnover before inventory price 
tests are done may indicate the need for special care during those tests. Ana- 
lytical procedures done in the planning phase typically use data aggregated at a 
high level, and the sophistication, extent, and timing of the procedures vary 
among clients. For some clients, the comparison of prior-year and current-year 
account balances using the unaudited trial balance may be sufficient. For other 
clients, the procedures may involve extensive analysis of quarterly financial 
statements based on the auditor’s judgment. 

2. Analytical procedures are often done during the testing phase of the audit as a 
substantive test in support of account balances. These tests are often done in 
conjunction with other audit procedures. For example, the prepaid portion of 
each insurance policy might be compared with the same policy for the previous 
year as a part of doing tests of prepaid insurance. The assurance provided by 
analytical procedures depends on the predictability of the relationship, as well 
as the precision of the expectation and the reliability of the data used to develop 
the expectation. When analytical procedures are used during the testing phase 
of the audit, auditing standaApagohe RDE ton han ce Vorking 
papers the expectation and factors considered in its development. 

3. Analytical procedures are also required during the completion phase of the 
audit. Such tests serve as a final review for material misstatements or financial 
problems and help the auditor take a final “objective look” at the audited finan- 
cial statements. Typically, a senior partner with extensive knowledge of the 
client’s business conducts the analytical procedures during the final review of 
the audit files and financial statements to identify possible oversights in an 
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FIGURE 8-6 Timing and Purposes of Analytical Procedures 
Phase 

Purpose (Required) (Required) 

Planning Phase Testing Phase Completion Phase 
Understand the client's : 
business and industry Prmaty RUEB Oe 
Assess going concern Secondary purpose Secondary purpose 
Indicate possible misstatements Pri 5 d Pri 
(attention directing) rimary purpose econdary purpose rimary purpose 
Reduce detailed tests Secondary purpose Primary purpose 

\—___ 
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Figure 8-6 (p. 225) shows the purposes of analytical procedures during each of the 
three phases. The shaded boxes indicate when a purpose is applicable in each phase. 
More than one purpose may be indicated. Notice how analytical procedures are done 
during the planning phase for all four purposes, while procedures during the other two 
phases are used primarily to determine appropriate audit evidence and to reach 
conclusions about the fair presentation of financial statements. 


FIVE TYPES OF ANALYTICAL PROCEDURES 


OBJECTIVE 8-7 





Select the most appropriate 
analytical procedure from 


among the five major types. 





Compare 
Client and 
Industry Data 


The usefulness of analytical procedures as audit evidence depends significantly on the 
auditor developing an expectation of what a recorded account balance or ratio should 
be, regardless of the type of analytical procedures used. Auditors develop an expec- 
tation of an account balance or ratio by considering information from prior periods, 
industry trends, client-prepared budgeted expectations, and nonfinancial information. 
The auditor typically compares the client’s balances and ratios with expected balances 
and ratios using one or more of the following types of analytical procedures. In each 
case, auditors compare client data with: 


Industry data 

Similar prior-period data 
Client-determined expected results 
Auditor-determined expected results 
Expected results using nonfinancial data 


Sn 


Suppose that you are doing an audit and obtain the following information about the 
client and the average company in the client’s industry: 
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2011 2010 2011 2010 
Inventory turnover 3.4 3:5 3.9 3.4 
Gross margin percent 26.3% 26.4% 27.3% 26.2% 





If we look only at client information for the two ratios shown, the company appears to 
be stable with no apparent indication of difficulties. However, if we use industry data to 
develop expectations about the two ratios for 2011, we should expect both ratios for 
the client to increase. Although these two ratios by themselves may not indicate 
significant problems, this data illustrates how developing expectations using industry 
data may provide useful information about the client’s performance and potential 
misstatements. Perhaps the company has lost market share, its pricing has not been 
competitive, it has incurred abnormal costs, or perhaps it has obsolete items in inven- 
tory or made errors in recording purchases. The auditor needs to determine if either of 
the last two occurred to have reasonable assurance that the financial statements are not 
misstated. 

Dun & Bradstreet, Standard and Poor’s, and other analysts accumulate financial 
information for thousands of companies and compile the data for different lines of 
business. Many CPA firms purchase this industry information for use as a basis for 
developing expectations about financial ratios in their audits. 

The most important benefits of industry comparisons are to aid in understanding 
the client’s business and as an indication of the likelihood of financial failure. They are 
less likely to help auditors identify potential misstatements. Financial information 
collected by the Risk Management Association, for example, is primarily of a type that 
bankers and other credit analysts use in evaluating whether a company will be able to 
repay a loan. That same information is useful to auditors in assessing the relative 
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strength of the client’s capital structure, its borrowing capacity, and the likelihood of 
financial failure. 

However, a major weakness in using industry ratios for auditing is the difference 
between the nature of the client’s financial information and that of the firms making 
up the industry totals. Because the industry data are broad averages, the comparisons 
may not be meaningful. Often, the client’s line of business is not the same as the 
industry standards. In addition, different companies follow different accounting 
methods, and this affects the comparability of data. For example, if most companies in 
the industry use FIFO inventory valuation and straight-line depreciation and the audit 
client uses LIFO and double-declining-balance depreciation, comparisons may not be 
meaningful. This does not mean that industry comparisons should be avoided. Rather, 
it is an indication of the need for care in using industry data to develop expectations 
about financial relationships and in interpreting the results. One approach to overcome 
the limitations of industry averages is to compare the client to one or more benchmark 
firms in the industry. 


Suppose that the gross margin percentage for a company has been between 26 and 27 
percent for each of the past 4 years but has dropped to 23 percent in the current year. This 
decline in gross margin should be a concern to the auditor if a decline is not expected. 
The cause of the decline could be a change in economic conditions. But, it could also be 
caused by misstatements in the financial statements, such as sales or purchase cutoff 
errors, unrecorded sales, overstated accounts payable, or inventory costing errors. The 
decline in gross margin is likely to result in an increase in evidence in one or more of the 
accounts that affect gross margin. The auditor needs to determine the cause of the 
decline to be confident that the financial statements are not materially misstated. 

A wide variety of analytical procedures allow auditors to compare client data with 
similar data from one or more prior periods. Here are some common examples: 


Compare the Current Year’s “Apage thp pRhe Ryker Gene of 


the easiest ways to perform this test {8 to iMclude the preceding year’s adjusted trial 
balance results in a separate column of the current year’s trial balance spreadsheet. The 
auditor can easily compare the current year’s balance and previous year’s balance to 
decide, early in the audit, whether an account should receive more than the normal 
amount of attention because of a significant change in the balance. For example, if the 
auditor observes a substantial increase in supplies expense, the auditor should 
determine whether the cause was an increased use of supplies, an error in the account 
due to a misclassification, or a misstatement of supplies inventory. 


Compare the Detail of a Total Balance with Similar Detail for the Preceding 
Year If there have been no significant changes in the client’s operations in the current 
year, much of the detail making up the totals in the financial statements should also 
remain unchanged. By briefly comparing the detail of the current period with similar 
detail of the preceding period, auditors often isolate information that needs further 
examination. Comparison of details may take the form of details over time, such as 
comparing the monthly totals for the current year and preceding year for sales, repairs, 
and other accounts, or details at a point in time, such as comparing the details of loans 
payable at the end of the current year with the detail at the end of the preceding year. In 
each of these examples, the auditor should first develop an expectation of a change or 
lack thereof before making the comparison. 


Compute Ratios and Percent Relationships for Comparison with Previous 
Years Comparing totals or details with previous years has two shortcomings. First, it 
fails to consider growth or decline in business activity. Second, relationships of data to 
other data, such as sales to cost of goods sold, are ignored. Ratio and percent relation- 
ships overcome both shortcomings. For example, the gross margin is a common percent 
relationship used by auditors. 


Compare Client Data 
with Similar 
Prior-Period Data 


Chapter 8 / AUDIT PLANNING AND ANALYTICAL PROCEDURES 227 


Compare Client Data 
with Client-Determined 
Expected Results 





























> 
TABLE 8-2 Internal Comparisons and Relationships 
Ratio or Comparison Possible Misstatement 
Raw material turnover for a manufacturing Misstatement of inventory or cost of goods sold 
company or obsolescence of raw material inventory 
Sales commissions divided by net sales Misstatement of sales commissions 
Sales returns and allowances divided by Misclassified sales returns and allowances or 
gross sales unrecorded returns or allowances subsequent 
to year-end 
Bad debt expense divided by net sales Misstatement in the allowance for bad debts 
Each of the individual manufacturing expenses Significant misstatement of individual expenses 
as a percent of total manufacturing expense within a total 
& 4 





Table 8-2 includes a few ratios and internal comparisons to show the widespread 
use of ratio analysis. In all these cases, the comparisons should be made with calcula- 
tions made in previous years for the same client. Many of the ratios and percents used 
for comparison with previous years are the same ones used for comparison with 
industry data. For example, auditors often compare current year gross margin with 
industry averages, as well as margins for previous years. 

Numerous potential comparisons of current- and prior-period data extend beyond 
those normally available from industry data. For example, the percent of each expense 
category to total sales can be compared with that of previous years. Similarly, in a 
multiunit operation such as a retail chain, internal data comparisons for each unit can 
be made with previous periods. 

Auli Eve py 0 | # ) aareies for one or more years that 
displ fo) a 98) ee Heh ok) te ¢ as sales. Common-size financial state- 
ments allow for comparison between companies or for the same company over different 
time periods, revealing trends and providing insight into how different companies 
compare. Common-size income statement data for the past three years for Hillsburg 
Hardware are included in Figure 8-7. The auditor should calculate income statement 
account balances as a percent of sales when the level of sales has changed from the prior 
year—a likely occurrence in many businesses. Hillsburg’s sales have increased signi- 
ficantly over the prior year. Note that accounts such as cost of goods sold, as well as sales 
salaries and commissions have also increased significantly but are fairly consistent as a 
percent of sales, which we expect for these accounts. 

The auditor is likely to require further explanation and corroborating evidence for 
the changes in advertising, bad debt expense, and office repairs and maintenance. 


* Note that advertising expense has increased as a percent of sales. One possible 
explanation is the development of a new advertising campaign. 

* The dollar amount of bad debt expense has not changed significantly but has 
decreased as a percent of sales. The auditor needs to gather additional evidence 
to determine whether bad debt expense and the allowance for doubtful accounts 
are understated. 

* Repairs and maintenance expense has also increased. Fluctuations in this account 
are not unusual if the client has incurred unexpected repairs. The auditor should 
investigate major expenditures in this account to determine whether they 
include any amounts that should be capitalized as a fixed asset. 


Most companies prepare budgets for various aspects of their operations and financial 
results. Because budgets represent the client’s expectations for the period, auditors 
should investigate the most significant differences between budgeted and actual results, 
as these areas may contain potential misstatements. The absence of differences may 
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Hillsburg Hardware Common-Size Income Statement | 












































HILLSBURG HARDWARE CO. 
COMMON-SIZE INCOME STATEMENT 
Three Years Ending December 31, 2011 
2011 2010 2009 
(000) % of (000) % of (000) % of 
Preliminary Net Sales Audited _—_ Net Sales Audited _—_— Net Sales 
Sales $144,328 100.87 $132,421 100.91 $123,737 100.86 
Less: Returns and allowances 1,242 0.87 1,195 0.91 1,052 0.86 
Net sales 143,086 100.00 13226 100.00 122,685 100.00 
Cost of goods sold 103,241 7225) 94,876 72.30 88,724 T2252 
Gross profit 39,845 27.85 36,350 27.70 33,961 27.68 
Selling expense 
Salaries and commissions 7,139 5.41 7,044 5.37 6,598 5.38 
Sales payroll taxes 1,422 0.99 1,298 0.99 1,198 0.98 
Travel and entertainment 1,110 0.78 925 0.70 797 0.65 
Advertising 2,611 1.82 1,920 1.46 1,790 1.46 
Sales and promotional literature 322 0.22 425 0.32 488 0.40 
Sales meetings and training 925 0.65 781 0.60 767 0.62 
Miscellaneous sales expense 681 0.48 506 0.39 456 0.37 
Total selling expense 14,810 10.35 12,899 9.83 12,094 9.86 
Administration expense 
Executive and office salaries 5,524 3.86 Beil 3.98 5,103 4.16 
Administrative payroll taxes 682 0.48 655 0.50 633 0.52 
Travel and entertainment 562 0.39 595 0.45 542 0.44 
Computer maintenance and supplies 860 0.60 832 0.63 799 0.65 
Stationery and supplies 763 0.53 658 0.50 695 0.57 
Postage 244 On 251 0.19 236 0.19 
Telephone and fax 722 0.51 626 0.48 637 0.52 
Rent 312 0.22 312 0.24 312 O25 
Legal fees and retainers 383 0.27 321 0.25 283 0.23 
Auditing and related services 303 0.21 288 0.22 265 0.22 
Depreciation 1,452 1.01 1,443 1.10 1,505 125) 
Bad debt expense 37525 2252) 3,394 2259) 3,162 2.58 
Insurance 723 O51 760 0.58 785 0.64 
Office repairs and maintenance 844 0.59 538 0.41 458 0.37 
Miscellaneous office expense 644 0.45 621 0.47 653 0.53 
Miscellaneous general expense 324 0.23 242 0.18 275 0.22 
Total administrative expenses 17,665 12235 16,757 IPT 16,343 13232) 
Total selling and administrative expenses 32,475 22.70 29,656 22.60 28,437 23.18 
Earnings from operations 7,370 BS) 6,694 5.10 5,524 4.50 
Other income and expense 
Interest expense 2,409 1.68 2,035 1.55 2,173 erie 
Gain on sale of assets (720) (0.50) 0 0.00 0 0.00 
Earnings before income taxes 5,681 3.97 4,659 S155) 3,351 275) 
Income taxes 1,747 1.22 1,465 Lei? 1,072 0.87 
Net income $ 3,934 25S $ 3,194 2.43 $ 2,279 1.86 

















indicate that misstatements are unlikely. For example, audits of local, state, and federal 
governmental units commonly use this type of analytical procedure. 

When client data are compared with budgets, there are two special concerns. First, 
the auditor must evaluate whether the budgets were realistic plans. In some organizations, 
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Compare 

Client Data with 
Auditor-Determined 
Expected Results 


Compare 

Client Data with 
Expected Results Using 
Nonfinancial Data 


budgets are prepared with little thought or care and therefore are not helpful in 
developing auditor expectations. A discussion of budget procedures with client per- 
sonnel can provide insights about this concern. The second concern is the possibility 
that current financial information was changed by client personnel to conform to the 
budget. If that has occurred, the auditor will find no differences in comparing actual 
data with budgeted data, even if there are misstatements in the financial statements. 
Assessing control risk and detailed audit tests of actual data are usually done to mini- 
mize this concern. 


Another common comparison of client data with expected results occurs when the 
auditor calculates the expected balance for comparison with the actual balance. In this type 
of analytical procedure, the auditor makes an estimate of what an account balance 
should be by relating it to some other balance sheet or income statement account or 
accounts or by making a projection based on nonfinancial data or some historical trend. 

Figure 8-8 illustrates how the auditor may make an independent calculation of 
interest expense on notes payable by multiplying the average ending balances and 
interest rates for both short-term and long-term notes payable as a substantive test of 
the reasonableness of recorded interest expense. Notice how the auditor’s substantive 
analytical procedure begins with the development of the auditor’s expectation of 
interest expense for short-term notes payable and combines that with the auditor’s cal- 
culation of an estimated interest expense for long-term notes payable to arrive at the 
expected amount of total interest expense of $2,399,315. Because of the fluctuating 
nature of the short-term notes payable balance from month to month, the auditor’s 
calculation of a twelve month average balance and average interest rate generates a more 
precise estimate of expected interest expense. Less precision is needed for long-term 
notes payable given the constant rate of interest across the year and the stable nature of 
the balance outstanding. This bet: paper also effectively documents the auditor’s 
expec ipa ige is 5 PHP’ BY gstandards for substantive analytical procedures. 


Suppose pe ch are auditing a hotel. You may develop an expectation for total revenue 
from rooms by multiplying the number of rooms, the average daily rate for each room, 
and the average occupancy rate. You can then compare your estimate with recorded 
revenue as a test of the reasonableness of recorded revenue. The same approach can be 
applied to create estimates in other situations, such as tuition revenue at universities 
(average tuition multiplied by enrollment), factory payroll (total hours worked times 
the wage rate), and cost of materials sold (units sold times materials cost per unit). 

The major concern in using nonfinancial data, however, is the accuracy of the data. 
In the hotel example, you should not use an estimated calculation of hotel revenue as 
audit evidence unless you are satisfied with the reasonableness of the count of the 
number of rooms, average room rate, and average occupancy rate. Obviously, the 
accuracy of the occupancy rate is more difficult to evaluate than the other two items. 


COMMON FINANCIAL RATIOS 


OBJECTIVE 8-8 





Compute common financial 
ratios. 





Auditors’ analytical procedures often include the use of general financial ratios during 
planning and final review of the audited financial statements. These are useful for 
understanding recent events and the financial status of the business and for viewing the 
statements from the perspective of a user. The general financial analysis may be effec- 
tive for identifying possible problem areas, where the auditor may do additional 
analysis and audit testing, as well as business problem areas in which the auditor can 
provide other assistance. When using these ratios, auditors must be sure to make 
appropriate comparisons. The most important comparisons are to those of previous 
years for the company and to industry averages or similar companies for the same year. 
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FIGURE 8-8 
December 31, 2011 
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Hillsburg Hardware Overall Test of Interest Expense 
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Hillsburg Hardware Co. 
Overall Test of Interest Expense 
12/31/11 


Expectation of recorded interest expense: 


Short-term loans: 


Average Monthly Balance 
and Interest Rate 





Month Month end Balance Rate® 
Jan. $ 5,900,000 5.50% 
Feb. 6,368,000 5.50% 
Mar. 6,824,000 5.75% 
Apr. 7,536,000 5.75% 
May 5,208,000 5.25% 
June 3,748,000 5.50% 
July 2,800,000 5.25% 
Aug. 2,490,000 5.50% 
Sept. 2,092,000 5.25% 
Oct. 1,708,000 5.50% 
Nov. 5,062,000 5.75% 
Dec. 4,180,000 5.50% 
Total $53,916,000 66.00% 


@ - 
i eg la a 


Sort & Find & 
Formatting > as Table + Styles> | [EdFormaty 2 Filter Select - 
Cells Tditing 


Schedule_N-3 Date 
Prepared by TM _3/06/12 
Approved by JW 3/12/12 


(total + 12) $ 4,493,000 5.50% $ 247,115 
Long-term loans: 
Beginning balance $26,520,000 © 
Ending balance 24,120,000 
$50,640,000 8.50% © 

Average $25,320,000 8.50% 252200) 
Auditor expectation of interest expense 2,399,315 
Recorded interest expense per general ledger 2,408,642 ® 


Difference — over (under) expectation $ 9,327 


Conclusion: Interest expense appears fairly stated as recorded 
amount is within 9,327 (.4%) of expected amount. 


Tickmark Legend 


® Monthly balances obtained from general ledger for each month 

@ Estimated based on examination of several notes outstanding each month. 
© Agreed to prior year audit workpapers. 

@ Agrees with December 31, 2011 general ledger and working trial balance. 
© Agrees with permanent file schedule of long-term debt. 











Ratios and other analytical procedures are normally calculated using spreadsheets 
and other types of audit software, in which several years of client and industry data can 
be maintained for comparative purposes. Ratios can be linked to the trial balance so 
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Short-term 
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Liquidity 
Activity Ratios 


Ability to 
Meet Long-term 
Debt Obligations 


that calculations are automatically updated as adjusting entries are made to the client’s 
statements. For example, an adjustment to inventory and cost of goods sold affects a 
large number of ratios, including inventory turnover, the current ratio, gross margin, 
and other profitability measures. 

We next examine some widely used financial ratios. The following computations 
are based on the 2011 financial statements of Hillsburg Hardware Co., which appear in 
the glossy insert to the textbook. These ratios were prepared from the trial balance in 
Figure 6-4 on page 150. 


: cash + marketable securities 828 
Cash ratio = —— —OlOG 
current liabilities 13,216 








cash + marketable securities + 























Guckrater net accounts receivable 828 + 18,957 +945 157 
current liabilities 13,216 7 
Cunrentraie:= current assets 51,027 - 386 
current liabilities 13,216 ; 
% y 





Companies need a reasonable level of liquidity to pay their debts as they come due, 
and these three ratios measure liquidity. It is apparent by examining the three ratios 
that the cash ratio may be useful to evaluate the ability to pay debts immediately, 
whereas the current ratio requires the conversion of assets such as inventory and 
accounts receivable to cash before debts can be paid. The most important difference 
between the quick and current ratios is the inclusion of inventory in current assets for 
the current ratio. 














Accounts receivable _ net sales 183,086 =7.59 
turnover average gross receivables ((18,957 + 1,240) + (16,210 + 1,311))/2 ‘ 
Days to collect _ 365 days 365 days _ ag.09 days 
receivables accounts receivable turnover 759 
Inventory __ cost of goods sold 103,241 _ 3.36 
turnover “average inventory (29,865 + 31,600)/2 
Days to sell 365 days 365 days 
! = ee a ———— = 108.63 days 
Inventory inventory turnover 3.36 ; 











SE EE 


If a company does not have sufficient cash and cash-like items to meet its obliga- 
tions, the key to its debt-paying ability is the time it takes the company to convert less 
liquid current assets into cash. This is measured by the liquidity activity ratios. 

The activity ratios for accounts receivable and inventory are especially useful to 
auditors, who often use trends in the accounts receivable turnover ratio to assess the 
reasonableness of the allowance for uncollectible accounts. Auditors use trends in the 
inventory turnover ratio to identify potential inventory obsolescence. Average days to 
collect is a different way of looking at the average accounts receivable turnover data. 
The same is true of average days to sell compared to average inventory turnover. 








: total liabilities 13,216 + 25,688 
Debt to equity = ——_—_—_. ——— = LS 
total equity 22,463 
? : operating income 7,370 
Times interest earned = ———7—_—_ = 3.06 
interest expense 2,409 
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A company’s long-run solvency depends on the success of its operations and on its 
ability to raise capital for expansion, as well as its ability to make principal and interest 
payments. Two ratios are key measures creditors and investors use to assess a company’s 
ability to pay its debts. 

The debt-to-equity ratio shows the extent of the use of debt in financing a company. 
If the debt-to-equity ratio is too high, it may indicate that the company has used up its 
borrowing capacity and has no cushion for additional debt. If it is too low, it may mean 
that available leverage is not being used to the owners’ benefit. 

The ability to make interest payments depends on the company’s ability to 
generate positive cash flow from operations. The times interest earned ratio shows 
whether the company can comfortably make its interest payments, assuming that 
earnings trends are stable. 


A company’s ability to generate cash for payment of obligations, expansion, and 
dividends is heavily dependent on profitability. The most widely used profitability ratio 
is earnings per share. Auditors calculate additional ratios to provide further insights 
into operations. 

Gross profit percent shows the portion of sales available to cover all expenses and 
profit after deducting the cost of the product. Auditors find this ratio especially useful 
for assessing misstatements in sales, cost of goods sold, accounts receivable, and in- 
ventory. 

Profit margin is similar to gross profit margin but subtracts both cost of goods 
sold and operating expenses in making the calculations. This ratio enables auditors 
to assess potential misstatements in operating expenses and related balance sheet 
accounts. 


























: net income 3,934 
Earnings per share = : eae = 0.79 
average common shares outstanding 5,000 
, net sales — cost of goods sold 143,086 - 103,241 
Gross profit percent = 8 = 27.85% 
net sales 143,086 
; : operating income 7,370 
Profit margin = Cree news ———— = 0.05 
net sales 143,086 
income before taxes 5,681 
Return on assets = ———W¥————_ = 
average total assets (61,367 + 60,791)/2 
: income before taxes — preferred dividends 5,681 - 0 
CONMMMIO NIG CU a = 0.26 
average stockholders’ equity (22,463 + 20,429)/2 
= 4 





Return on assets and return on common equity are measures of overall profit- 
ability of a company. These ratios show a company’s ability to generate profit for each 
dollar of assets and equity. 


Profitability Ratios 


SUMMARY 


The first part of this chapter discussed audit planning, including understanding the client’s 
business and industry and performing preliminary analytical procedures to assess client 
business risk and the risk of material misstatements in the financial statements. Analytical 
procedures are the evaluation of recorded accounting information by computing ratios 
and developing other plausible relationships for comparison to expectations developed by 
the auditor. These analytical procedures are used in planning to understand the client’s 
business and industry and throughout the audit to identify possible misstatements, reduce 
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detailed tests, and to assess going-concern issues. The use of analytical procedures has 
increased because of their effectiveness at identifying possible misstatements at a low cost, 
and they are required in the planning and completion phases of the audit. 


Acceptable audit risk—a measure of how 
willing the auditor is to accept that the 
financial statements may be materially 
misstated after the audit is completed and 
an unqualified opinion has been issued 


Audit strategy—overall approach to the 
audit that considers the nature of the 
client, risk of significant misstatements, 
and other factors such as the number of 
client locations and past effectiveness of 
client controls 


Budgets—written records of the client’s 
expectations for the period; a comparison 
of budgets with actual results may indicate 
whether or not misstatements are likely 


Client business risk—the risk that the 
client will fail to achieve its objectives 
related to (1) reliability of financial 
reporting, (2) effectiveness and efficiency 
of operations, and (3) compliance with 
laws and regulations 


ESSENTIAL TERMS 


of dividends and the approval of con- 
tracts, are documented 


Engagement letter—an agreement between 
the CPA firm and the client as to the 
terms of the engagement for the conduct 
of the audit and related services 


Inherent risk—a measure of the auditor’s 
assessment of the likelihood that there are 
material misstatements in a segment before 
considering the effectiveness of internal 
control 


Initial audit planning—involves deciding 
whether to accept or continue doing the 
audit for the client, identifying the client’s 
reasons for the audit, obtaining an engage- 
ment letter, and developing an audit strategy 


Related party—affiliated company, prin- 
cipal owner of the client company, or any 
other party with which the client deals, 
where one of the parties can influence the 


CompAPAGQ: RD Fi NHAan Cemegement or operating policies of the 


of the meetings of a corporation’s board 
of directors and stockholders, in which 
corporate issues, such as the declaration 


other 


Related party transaction—any transac- 
tion between the client and a related party 


REVIEW QUESTIONS 


8-1 (Objective 8-1) What are the benefits derived from planning audits? 
8-2 (Objective 8-1) Identify the eight major steps in planning audits. 


8-3 (Objective 8-2) What are the responsibilities of the successor and predecessor auditors 


when a company is changing auditors? 


8-4 (Objective 8-2) What factors should an auditor consider prior to accepting an engage- 


ment? Explain. 


8-5 (Objective 8-2) What is the purpose of an engagement letter? What subjects should be 


covered in such a letter? 


8-6 (Objective 8-2) Who is considered the client when auditing public companies? 


8-7 (Objective 8-2) Which services must be preapproved by the audit committee of a 
public company? 

8-8 (Objective 8-3) Explain why auditors need an understanding of the client’s industry. 
What information sources are commonly used by auditors to learn about the client’s 
industry? 


8-9 (Objective 8-3) When a CPA has accepted an engagement from a new client who is a 
manufacturer, it is customary for the CPA to tour the client’s plant facilities. Discuss the 
ways in which the CPA’s observations made during the course of the plant tour will be of 
help in planning and conducting the audit. 
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8-10 (Objective 8-3) An auditor often tries to acquire background knowledge of the client’s 
industry as an aid to audit work. How does the acquisition of this knowledge aid the 
auditor in distinguishing between obsolete and current inventory? 


8-11 (Objective 8-3) Define what is meant by a related party. What are the auditor’s 
responsibilities for related parties and related party transactions? 


8-12 (Objective 8-3) Which types of loans to executives are permitted by the Sarbanes— 
Oxley Act? 


8-13 (Objective 8-3) In recent years the stock market experienced significant declines, 
unprecedented since the Great Depression. Why might it be important for you to consider 
current economic events as part of planning an audit? 


8-14 (Objective 8-3) For the audit of Radline Manufacturing Company, the audit partner 
asks you to carefully read the new mortgage contract with the First National Bank and 
abstract all pertinent information. List the information in a mortgage that is likely to be 
relevant to the auditor. 


8-15 (Objective 8-3) Identify two types of information in the client’s minutes of the board 
of directors meetings that are likely to be relevant to the auditor. Explain why it is impor- 
tant to read the minutes early in the engagement. 


8-16 (Objective 8-3) Identify the three categories of client objectives. Indicate how each 
objective may affect the auditor’s assessment of inherent risk and need for evidence 
accumulation. 


8-17 (Objective 8-3) What is the purpose of the client’s performance measurement system? 
How might that system be useful to the auditor? Give examples of key performance 
indicators for the following businesses: (1) a chain of retail clothing stores; (2) an Internet 
portal; (3) a hotel chain. 


8-18 (Objective 8-4) Define client business risk and describe several sources of client 


business risk. What is the auditor’s PriApAage” PD Felitipghapiesegs risk? 


8-19 (Objective 8-4) Describe top management controls and their relation to client busi- 
ness risk. Give examples of effective management and governance controls. 


8-20 (Objectives 8-5, 8-6) What are the purposes of preliminary analytical procedures? 
What types of comparisons are useful when performing preliminary analytical procedures? 


8-21 (Objective 8-6) When are analytical procedures required on an audit? What is the 
primary purpose of analytical procedures during the completion phase of the audit? 


8-22 (Objective 8-7) Gale Gordon, CPA, has found ratio and trend analysis relatively useless 
as a tool in conducting audits. For several engagements, he computed the industry ratios 
included in publications by Standard and Poor’s and compared them with industry standards. 
For most engagements, the client’s business was significantly different from the industry 
data in the publication and the client automatically explained away any discrepancies by 
attributing them to the unique nature of its operations. In cases in which the client had 
more than one branch in different industries, Gordon found the ratio analysis no help at all. 
How can Gordon improve the quality of his analytical procedures? 


8-23 (Objective 8-7) At the completion of every audit, Roger Morris, CPA, calculates a 
large number of ratios and trends for comparison with industry averages and prior-year 
calculations. He believes the calculations are worth the relatively small cost of doing them 
because they provide him with an excellent overview of the client’s operations. If the ratios 
are out of line, Morris discusses the reasons with the client and often makes suggestions on 
how to bring the ratio back in line in the future. In some cases, these discussions with 
management have been the basis for management consulting engagements. Discuss the 
major strengths and shortcomings in Morris’s use of ratio and trend analysis. 


8-24 (Objective 8-8) Name the four categories of financial ratios and give an example of a 
ratio in each category. What is the primary information provided by each financial ratio 
category? 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


8-25 (Objectives 8-1, 8-3) The following questions concern the planning of the engage- 
ment. Select the best response. 


a. Which of the following is an effective audit planning procedure that helps prevent 


misunderstandings and inefficient use of audit personnel? 

(1) Arrange to make copies, for inclusion in the audit files, of those client supporting 
documents examined by the auditor. 

(2) Arrange to provide the client with copies of the audit programs to be used during 
the audit. 

(3) Arrange a preliminary conference with the client to discuss audit objectives, fees, 
timing, and other information. 

(4) Arrange to have the auditor prepare and post any necessary adjusting or reclassi- 
fication entries prior to final closing. 


b. When auditing related party transactions, an auditor places primary emphasis on 


(1) confirming the existence of the related parties. 

(2) verifying the valuation of related party transactions. 

(3) evaluating the disclosure of the related party transactions. 
(4) ascertaining the rights and obligations of the related parties. 


c. Which of the following will most likely indicate the existence of related parties? 


(1) Writing down obsolete inventory prior to year end. 

(2) Failing to correct deficiencies in the client’s internal control. 
(3) An unexplained increase in gross margin. 

(4) Borrowing money at a rate significantly below the market rate. 


d. Which of the following is least likely to be included in the auditor’s engagement letter? 


(1) Details about the preliminary audit strategy. 


(A © of PD Bett nhange rt. 
(3) Statement that management is responsible for the financial statements. 
(4) Description of the level of assurance obtained when conducting the audit. 


8-26 (Objective 8-2) The following questions pertain to client acceptance. Choose the best 
response. 


a. In assessing whether to accept a client for an audit engagement, a CPA should consider 





Client Business Risk Acceptable Audit Risk 
(1) Yes Yes 
(2) Yes No 
(3) No Yes 
(4) No No 





. When approached to perform an audit for the first time, the CPA should make inquiries 


of the predecessor auditor. This is a necessary procedure because the predecessor may 
be able to provide the successor with information that will assist the successor in 
determining whether 

(1) the predecessor’s work should be used. 

(2) the company follows the policy of rotating its auditors. 

(3) in the predecessor’s opinion internal control of the company has been satisfactory. 
(4) the engagement should be accepted. 


c. A successor would most likely make specific inquiries of the predecessor auditor regarding 


(1) specialized accounting principles of the client’s industry. 
(2) the competency of the client’s internal audit staff. 

(3) the uncertainty inherent in applying sampling procedures. 
(4) disagreements with management as to auditing procedures. 
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8-27 (Objectives 8-5, 8-6, 8-7, 8-8) The following questions concern the use of analytical 
procedures during an audit. Select the best response. 


a. Analytical procedures used in planning an audit should focus on identifying 
(1) material weaknesses in internal control. 
(2) the predictability of financial data from individual transactions. 
(3) the various assertions that are embodied in the financial statements. 
(4) areas that may represent specific risks relevant to the audit. 


b. For all audits of financial statements made in accordance with auditing standards, the 
use of analytical procedures is required to some extent 





In the Asa In the 
Planning Stage Substantive Test Completion Stage 
(1) Yes No Yes 
(2) No Yes No 
(3) No Yes Yes 
(4) Yes No No 





c. Which of the following is least likely to be comparable between similar corporations 
in the same industry line of business? 
(1) Accounts receivable turnover 
(2) Earnings per share 
(3) Gross profit percent 
(4) Return on assets before interest and taxes 

d. Which of the following situations has the best chance of being detected when a CPA 
compares 2011 revenues and expenses with the prior year and investigates all changes 
exceeding a fixed percent? 
(1) An increase in property tax rates has not been recognized in the company’s 2011 


accrual. 
(2) The cashier began lapping aga PDE IE 
(3) Because of worsening ccond conditions, the Z011 Enhan ARs, tKeaMlectible 


accounts was inadequate. 
(4) The company changed its capitalization policy for small tools in 2011. 


DISCUSSION QUESTIONS AND PROBLEMS 


8-28 (Objectives 8-2, 8-3, 8-4, 8-5) The following are various activities an auditor does 
during audit planning. 

. Send an engagement letter to the client. 

. Tour the client’s plant and offices. 

. Compare key ratios for the company to industry competitors. 

. Review management’s risk management controls and procedures. 

. Review accounting principles unique to the client’s industry. 

. Determine the likely users of the financial statements. 

. Identify potential related parties that may require disclosure. 

8. Identify whether any specialists are required for the engagement. 


NDB WN re 


For each procedure, indicate which of the first four parts of audit planning the procedure Required 
primarily relates to: (1) accept client and perform initial audit planning; (2) understand the 

client’s business and industry; (3) assess client business risk; (4) perform preliminary 

analytical procedures. 


8-29 (Objective 8-3) In your audit of Canyon Outdoor Provision Company’s financial 
statements, the following transactions came to your attention: 


1. Canyon Outdoor’s operating lease for its main store is with York Properties, which is 
a real estate investment firm owned by Travis Smedes. Mr. Smedes is a member of 
Canyon Outdoor’s board of directors. 
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. One of Canyon Outdoor’s main suppliers for kayaks is Hessel Boating Company. 
Canyon Outdoor has purchased kayaks and canoes from Hessel for the last 25 years, 
under a long-term contract arrangement. 

. Short-term financing lines of credit are provided by Cameron Bank and Trust. 
Suzanne Strayhorn is the lending officer assigned to the Canyon Outdoor account. 
Suzanne is the wife of the largest investor of Canyon Outdoor. 

. Hillsborough Travel partners with Canyon Outdoor to provide hiking and rafting 
adventure vacations. The owner of Hillsborough Travel lives in the same neighbor- 
hood as the CEO of Canyon Outdoor. They are acquaintances, but not close friends. 

. The board of directors consists of several individuals who own stock in Canyon 
Outdoor. At a recent board meeting, the board approved its annual dividend payable 
to shareholders effective June 1. 


. Define what constitutes a “related party.” 
b. Which of the preceding transactions would most likely be considered to be a related 


party transaction? 


. What financial statement implications, if any, would each of the above transactions 


have for Canyon Outdoor? 


. What procedures might auditors consider to help them identify potential related party 


transactions for clients like Canyon Outdoor? 


8-30 (Objective 8-3) The minutes of the board of directors of the Tetonic Metals Company 
for the year ended December 31, 2011, were provided to you. 


Meeting of March 5, 2011 


The meeting of the board of directors of Tetonic Metals was called to order by the 
James Cook, chairman of the board, at 8:30 am. The following directors were in 
attendance: 


Irene Arnold James Cook Brian McDonald 
ApagoPDF Enharicer Toey wilhaeas 
ary Beth Cape Heather Jackson 


The board approved the minutes from the November 22, 2010 meeting. 

The board reviewed the financial statements for the most recent fiscal year that 
ended December 31, 2010. Due to strong operating results, the board declared an 
increase in the annual dividend to common shareholders from $.32 to $.36 per 
common share payable on May 10, 2011 to shareholders of record on April 25, 2011. 

Tony Williams, CEO, led a discussion of the seven core strategic initiatives in the 
2011-2013 strategic plan. The most immediate initiative is the expansion of Tetonic 
operations into the Pacific Northwest. The board approved an increased budget for 2011 
administrative expenses of $1 million to open offices in the Portland, Oregon area. 

Mr. Williams also led a discussion of a proposed acquisition of one of Tetonic’s 
smaller competitors. The board discussed synergies that might be possible if the 
operations of the acquired company could be successfully integrated with the 
operations of Tetonic. The board granted Williams and the management team 
approval to continue negotiations with the other company’s board and management. 

The board continued its discussion from prior meetings about the October 2010 
report from the Environmental Protection Agency (EPA) regarding dust impact at 
Tetonic’s zinc refineries. Legal counsel for Tetonic updated the board on the status of 
negotiations with the EPA regarding findings contained in the report. The board 
asked management to include an update on the status of any resolutions for its next 
meeting. The board also asked management to schedule a conference call, if necessary, 
for the board if issues need to be resolved before the next meeting. 

Officer bonuses for the year ended December 31, 2010 were approved for payment 
on April 14, 2011, as follows: 


Tony Williams—Chief Executive Officer $275,000 
Mary Beth Cape—Chief Operating Officer $150,000 
Bob Browning—Chief Financial Officer $125,000 
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The Audit Committee and the Compensation Committee provided an update of 
issues discussed at each of their respective meetings. 
The meeting adjourned 5:30 pm. 


Meeting of October 21, 2011 


The meeting of the board of directors of Tetonic Metals was called to order by the 
James Cook, chairman of the board, at 8:30 am. The following directors were in 
attendance: 


Irene Arnold James Cook Brian McDonald 
Robert Beardsley Larry Holden Tony Williams 
Mary Beth Cape Heather Jackson 


The board approved the minutes from the March 5, 2011 meeting. 

Tony Williams, CEO, provided an overview of financial performance and operating 
results for the nine months ended September 30, 2011. Given the volatility in the 
economy, Tetonic sales have fallen by over 8% compared to the same period in 2010. 
To address the drop in revenues, Tetonic has scaled back mining operations by a 
similar percentage to reduce labor and shipping costs. 

Bob Browning, CFO, updated the board on discussions with banks that will be 
financing the acquisition of the Tetonic competitor. The terms of the $7 million 
financing include a floating interest rate that is 2% above prime over the ten year life 
of the loan. Payments will be made quarterly and Tetonic will have to maintain com- 
pliance with certain loan covenant restrictions that are tied to financial performance. 
The board approved the acquisition and related loan transaction and scheduled a 
closing date for the financing to be November 1, 2011. 

To prepare for the proposed acquisition, the board approved an increase in the 
capital expenditures budget of $1.5 million to cover costs of expanding computer 
operations, including a new server. The new equipment is needed to successfully 
integrate IT operations at Tetonic and the acquired company. The equipment will be 
installed in December 2011. EiApagorPDF.aEnhancenil no 
longer be used in the IT operations at Tetonic. 

The board discussed the creation of an incentive stock option plan for senior 
executives as a way to better align management and shareholder incentives. Consultants 
from a compensation advisory firm and tax attorneys from a national accounting firm 
led a discussion of the components of the proposed plan, including discussion of the 
related tax implications. The board asked the consultants to revise the plan based on 
comments received at the meeting for presentation at the board’s next meeting. 

Tetonic’s external auditor provided an update of its interim work related to tests of 
the operating effectiveness of internal controls over financial reporting. The audit 
partner presented a written report that provided information about three deficiencies 
in internal control considered to be significant by the auditor. 

Legal counsel for Tetonic updated the board on final resolution of the EPA report 
findings. The final settlement requires Tetonic to modify some of the air handling 
equipment at its zinc refineries that are expected to cost about $400,000. No other 
penalties were imposed by the EPA. 

The Audit Committee and the Compensation Committee provided an update of 
issues discussed at each of their respective meetings. 


. How do you, as the auditor, know that all minutes have been made available to you? 


b. Read the minutes of the meetings of March 5 and October 21. Use the following 


format to list and explain information that is relevant for the 2011 audit: 
Information Relevant to 2011 Audit Audit Action Required 





Ts 

2: 

. Read the minutes of the meeting of March 5, 2011. Did any of that information pertain 
to the December 31, 2010, audit? Explain what the auditor should have done during 
the December 31, 2010, audit with respect to 2011 minutes. 
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Required 


8-31 (Objective 8-6) Analytical procedures are an important part of the audit process and 
consist of the evaluation of financial information by the study of plausible relationships 
among financial and nonfinancial data. Analytical procedures may be done during planning, 
as a substantive test, or as a part of the overall review of an audit. 
The following are various statements regarding the use of analytical procedures: 
1. Not required during this stage. 
2. Should focus on enhancing the auditor’s understanding of the client’s business and 
the transactions and events that have occurred since the last audit date. 
3. Should focus on identifying areas that may represent specific risks relevant to the audit. 
4, Require documentation in the working papers of the auditor’s expectation of the ratio 
or account balance. 
5. Do not result in detection of misstatements. 
6. Designed to obtain evidential matter about particular assertions related to account 
balances or classes of transactions. 
7. Generally use data aggregated at a lower level than the other stages. 
8. Should include reading the financial statements and notes to consider the adequacy 
of evidence gathered. 
9. Involve reconciliation of confirmation replies with recorded book amounts. 
10. Use the preliminary or unadjusted working trial balance as a source of data. 
11. Expected to result in a reduced level of detection risk. 


For each of the 11 statements, select the stage of the audit for which the statement is most 
accurate using the following responses: 

1. Planning the audit 

2. Substantive testing 

3. Overall review 

4. Statement is not correct concerning analytical procedures.* 


8-32 (Objectives 8-5, 8-7, 8-8) You are auditing payroll for the Morehead Technologies 


compa’ ar c : lw<led next are amounts from the client’s 
bi chet hah ee cet Ee 





trial ba g with comparative audited information for the prior year. 
Audited Balance Preliminary Balance 

10/31/2010 10/31/2011 
Sales $ 51,316,234 $ 57,474,182 
Executive salaries 546,940 615,970 
Factory hourly payroll 10,038,877 11,476,319 
Factory supervisors’ salaries 785,825 810,588 
Office salaries 1,990,296 2,055,302 
Sales commissions 2,018,149 2,367,962 





You have obtained the following information to help you perform preliminary analytical 
procedures for the payroll account balances. 

1. There has been a significant increase in the demand for Morehead’s products. The 
increase in sales was due to both an increase in the average selling price of 4 percent 
and an increase in units sold that resulted from the increased demand and an increased 
marketing effort. 

2. Even though sales volume increased there was no addition of executives, factory 
supervisors, or office personnel. 

3, All employees including executives, but excluding commission salespeople, received 
a 3 percent salary increase starting November 1, 2010. Commission salespeople 
receive their increased compensation through the increase in sales. 

4, The increased number of factory hourly employees was accomplished by recalling 
employees that had been laid off. They receive the same wage rate as existing employees. 
Morehead does not permit overtime. 

5. Commission salespeople receive a 5 percent commission on all sales on which a 
commission is given. Approximately 75 percent of sales earn sales commission. The 


*AICPA adapted. 
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other 25 percent are “call-ins”, for which no commission is given. Commissions are 
paid in the month following the month they are earned. 


a. Use the final balances for the prior year included on the preceding page and the infor- 
mation in items | through 5 to develop an expected value for each account, except sales. 


b. Calculate the difference between your expectation and the client’s recorded amount as 
a percentage using the formula (expected value-recorded amount)/expected value. 


8-33 (Objectives 8-3, 8-7, 8-8) Your comparison of the gross margin percent for Jones 
Drugs for the years 2008 through 2011 indicates a significant decline. This is shown by the 
following information: 

















2011 2010 2009 2008 
Sales (thousands) $ 14,211 $ 12,916 $ 11,462 $ 10,351 
CGS (thousands) 9,223 8,266 7,313 6,573 
Gross margin $ 4,988 $ 4,650 $ 4,149 $ 3,778 
Percent 35.1 36.0 36.2 36.5 





A discussion with Marilyn Adams, the controller, brings to light two possible explana- 
tions. She informs you that the industry gross profit percent in the retail drug industry 
declined fairly steadily for 3 years, which accounts for part of the decline. A second factor 
was the declining percent of the total volume resulting from the pharmacy part of the 
business. The pharmacy sales represent the most profitable portion of the business, yet the 
competition from discount drugstores prevents it from expanding as fast as the nondrug 
items such as magazines, candy, and many other items sold. Adams feels strongly that these 
two factors are the cause of the decline. 

The following additional information is obtained from independent sources and the 
client’s records as a means of investigating the controller’s explanations: 


Industry Gross 
Profit Percent for 


Apago! PDE Enhance m:: 


Jones Drugs ($ in thousands) 








Drug Sales Nondrug Sales oods Sold Goods Sold and Related Products 
2011 $5,126 $9,085 $3,045 $6,178 32.7 
2010 5,051 7,865 2,919 5,347 32.9 
2009 4,821 6,641 2,791 4,522 33.0 
2008 4,619 5,732 2,665 3,908 33.2 





a. Evaluate the explanation provided by Adams. Show calculations to support your 
conclusions. 


b. Which specific aspects of the client’s financial statements require intensive investi- 
gation in this audit? 


8-34 (Objectives 8-7, 8-8) In the audit of the Worldwide Wholesale Company, you did 
extensive ratio and trend analysis. No material exceptions were discovered except for the 
following: 


1. Commission expense as a percent of sales has stayed constant for several years but 
has increased significantly in the current year. Commission rates have not changed. 

. The rate of inventory turnover has steadily decreased for 4 years. 

. Inventory as a percent of current assets has steadily increased for 4 years. 

. The number of days’ sales in accounts receivable has steadily increased for 3 years. 

. Allowance for uncollectible accounts as a percent of accounts receivable has steadily 
decreased for 3 years. 

. The absolute amounts of depreciation expense and depreciation expense as a 
percent of gross fixed assets are significantly smaller than in the preceding year. 


WB & bo 


lon 


a. Evaluate the potential significance of each of the exceptions just listed for the fair 
presentation of financial statements. 


b. State the follow-up procedures you would use to determine the possibility of material 
misstatements. 
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8-35 (Objectives 8-3, 8-5) As part of the analytical procedures of Mahogany Products, Inc., 
you perform calculations of the following ratios: 








Industry Mahogany 
Averages Products 
Ratio 2011 2010 2011 2010 
1. Current ratio 3.30 3.80 2.20 2.60 
2. Days to collect receivables 87.00 93.00 67.00 60.00 
3. Days to sell inventory 126.00 121.00 93.00 89.00 
4. Purchases divided by accounts payable 11.70 11.60 8.50 8.60 
5. Inventory divided by current assets 56 51 49 48 
6. Operating income divided by tangible assets .08 .06 14 12 
7. Operating income divided by net sales .06 .06 .04 .04 
8. Gross profit percent 21 27 21 19 
9. Earnings per share $14.27 $13.91 $2.09 $1.93 





For each of the preceding ratios: 
a. State whether there is a need to investigate the results further and, if so, the reason for 
further investigation. 
b. State the approach you would use in the investigation. 


c. Explain how the operations of Mahogany Products appear to differ from those of the 
industry. 


8-36 (Objectives 8-3, 8-5, 8-7) Following are the auditor’s calculations of several key ratios 
for Cragston Star Products. The primary purpose of this information is to understand the 
client’s business and assess the risk of financial failure, but any other relevant conclusions 
are also desirable. 


Ratio 2011 2010 2009 2008 2007 

1. Current ratio 2.08 2.26 2.51 2.43 2.50 

2. ABA ¥ 1.34 1.82 1.76 1.64 

3. ‘TITrses F9. ac DE Enhance; 3.20 4.10 5.30 7.10 

4. Accounts receivable turnover 4.20 5.50 4.10 5.40 5.60 

5. Days to collect receivables 86.90 66.36 89.02 67.59 65.18 

6. Inventory turnover 2.03 1.84 2.68 3.34 3.36 

7. Days to sell inventory 179.80 198.37 136.19 109.28 108.63 

8. Net sales divided by tangible assets .68 64 1 .69 67 

9. Profit margin 13 14 .16 15 14 

10. Return on assets .09 09 12 10 .09 
11. Return on equity 05 .06 10 10 aa 
12. Earnings per share $4.30 $4.26 $4.49 $4.26 $4.14 





a. What major conclusions can be drawn from this information about the company’s 
future? 


b. What additional information would be helpful in your assessment of this company’s 
financial condition? 


c. Based on the preceding ratios, which aspects of the company do you believe should 
receive special emphasis in the audit? 


8-37 (Objectives 8-3, 8-4) The Internet has dramatically increased global e-commerce 
activities. Both traditional “brick and mortar” businesses and new dot-com businesses use 
the Internet to meet business objectives. For example, eBay successfully offers online 
auctions as well as goods for sale in a fixed price format. 


a. Identify business strategies that explain eBay’s decision to offer goods for sale at fixed 
prices. 

b. Describe three business risks related to eBay’s operations. 

c. Acquisitions by eBay in recent years include PayPal, an online payment service, and 
Skype, an internet communications company. Discuss possible reasons why eBay 
made these strategic acquisitions. 
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d. Four years after acquiring Skype, eBay sold most of its interest in the company. 
Discuss how that impacts eBay’s business risks. 


e. Identify possible risks that can lead to material misstatements in the eBay financial 
statements if business risks related to its operations, including recent acquisitions and 
divestitures, are not effectively managed. 


CASES 


8-38 (Objectives 8-2, 8-3, 8-4) Winston Black was an audit partner in the firm of Henson, 
Davis & Company. He was in the process of reviewing the audit files for the audit of a new 
client, McMullan Resources. McMullan was in the business of heavy construction. Black 
was conducting his first review after the audit was substantially complete. Normally, he 
would have done an initial review during the planning phase as required by his firm’s 
policies; however, he had been overwhelmed by an emergency with his largest and most 
important client. He rationalized not reviewing audit planning information because (1) 
the audit was being overseen by Sarah Beale, a manager in whom he had confidence, and 
(2) he could “recover” from any problems during his end-of-audit review. 

Now, Black found that he was confronted with a couple of problems. First, he found 
that the firm may have accepted McMullan without complying with its new-client 
acceptance procedures. McMullan came to Henson, Davis & Company on a 
recommendation from a friend of Black’s. Black got “credit” for the new business, which 
was important to him because it would affect his compensation from the firm. Because 
Black was busy, he told Beale to conduct a new-client acceptance review and let him know 
if there were any problems. He never heard from Beale and assumed everything was okay. 
In reviewing Beale’s preaudit planning documentation, he saw a check mark in the box 
“Contact prior auditors” but found no details indicating what was done. When he asked 
Beale about this, she responded with the following: 


“T called Gardner Smith [the cApAagonP DE uenhancerx, firm] 
and left a voicemail message for him. He never returned my call. I talked to Ted 
McMullan about the change, and he told me that he informed Gardner about the 
change and that Gardner said, “Fine, Pll help in any way I can.” Ted said Gardner sent 
over copies of analyses of fixed assets and equity accounts, which Ted gave to me. I asked 
Ted why they replaced Gardner’s firm, and he told me it was over the tax contingency 
issue and the size of their fee. Other than that, Ted said the relationship was fine.” 


The tax contingency issue that Beale referred to was a situation in which McMullan had 
entered into litigation with a bank from which it had received a loan. The result of the 
litigation was that the bank forgave several hundred thousand dollars in debt. This was a 
windfall to McMullan, and they recorded it as a gain, taking the position that it was non- 
taxable. The prior auditors disputed this position and insisted that a contingent tax liability 
existed that required disclosure. This upset McMullan, but the company agreed in order to 
receive an unqualified opinion. Before hiring Henson, Davis & Company as their new 
auditors, McMullan requested that the firm review the situation. Henson, Davis & Company 
believed the contingency was remote and agreed to the elimination of the disclosure. 

The second problem involved a long-term contract with a customer in Montreal. Under 
accounting standards, McMullan was required to recognize income on this contract using the 
percentage-of-completion method. The contract was partially completed as of year-end and 
had a material effect on the financial statements. When Black went to review the copy of the 
contract in the audit files, he found three things. First, there was a contract summary that set 
out its major features. Second, there was a copy of the contract written in French. Third, there 
was a signed confirmation confirming the terms and status of the contract. The space request- 
ing information about any contract disputes was left blank, indicating no such problems. 

Black’s concern about the contract was that to recognize income in accordance with 
accounting standards, the contract had to be enforceable. Often, contracts contain a can- 
cellation clause that might mitigate enforceability. Because he was not able to read French, 
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Black couldn't tell whether the contract contained such a clause. When he asked Beale 
about this, she responded that she had asked the company’s vice president for the Canadian 
division about the contract and he told her that it was their standard contract. The company’s 
standard contract did have a cancellation clause in it, but it required mutual agreement and 
could not be cancelled unilaterally by the buyer. 

a. Evaluate and discuss whether Henson, Davis & Company complied with auditing 
standards in their acceptance of McMullan Resources as a new client. What can they do 
at this point in the engagement to resolve deficiencies if they exist? 

b. Evaluate and discuss whether sufficient audit work has been done with regard to 
McMullan’s Montreal contract. If not, what more should be done? 


c. Evaluate and discuss whether Black and Beale conducted themselves in accordance 
with auditing standards. 


8-39 (Objectives 8-3, 8-4, 8-7) Solomon is a highly successful, closely held Boston, 
Massachusetts, company that manufactures and assembles automobile specialty parts that 
are sold in auto parts stores in the East. Sales and profits have expanded rapidly in the past 
few years, and the prospects for future years are every bit as encouraging. In fact, the Solomon 
brothers are currently considering either selling out to a large company or going public to 
obtain additional capital. 

The company originated in 1984 when Frank Solomon decided to manufacture tooled 
parts. In 1999, the company changed over to the auto parts business. Fortunately, it has 
never been necessary to expand the facilities, but space problems have recently become 
severe and expanded facilities will be necessary. Land and building costs in Boston are 
currently extremely inflated. 

Management has always relied on you for help in its problems because the treasurer is 
sales-oriented and has little background in the controllership function. Salaries of all 
officers have been fairly modest in order to reinvest earnings in future growth. In fact, the 
company is oriented toward long-run wealth of the brothers more than toward short-run 
profit. others ‘BOR ‘EHH l we spinvested in the firm. 

A ‘Abags:, cce Fbatet ‘een the small but excellent sales force. 
The sales policy is to sell to small auto shops at high prices. This policy is responsible for 
fairly high credit losses, but the profit margin is high and the results have been highly 
successful. The firm has every intention of continuing this policy in the future. 

Your firm has been auditing Solomon since 1994, and you have been on the job for the 
past 3 years. The client has excellent internal controls and has always been cooperative. In 
recent years, the client has attempted to keep net income at a high level because of borrowing 
needs and future sellout possibilities. Overall, the client has always been pleasant to deal 
with and willing to help in any way possible. There have never been any major audit 
adjustments, and an unqualified opinion has always been issued. 

In the current year, you have completed the tests of the sales and collection area. The 
tests of controls and substantive tests of transactions for sales and sales returns and allow- 
ances were excellent, and extensive confirmations yielded no material misstatements. You 
have carefully reviewed the cutoff for sales and for sales returns and allowances and find 
these to be excellent. All recorded bad debts appear reasonable, and a review of the aged 
trial balance indicates that conditions seem about the same as in past years. 

a. Evaluate the information in the case (see below) to provide assistance to management 
for improved operation of its business. Prepare the supporting analysis using an 
electronic spreadsheet program (instructor option). 

b. Do you agree that sales, accounts receivable, and allowance for doubtful accounts are 
probably correctly stated? Show calculations to support your conclusion. 








12-31-11 
(Current Year) 12-31-10 12-31-09 12-31-08 
Balance Sheet 
Cash $ 49,615 $ 39,453 $ 51,811 $ 48,291 
Accounts receivable 2,366,938 2,094,052 1,756,321 1,351,470 
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12-31-11 


























(Current Year) 12-31-10 12-31-09 12-31-08 
Balance Sheet (continued) 
Allowance for doubtful accounts (250,000) (240,000) (220,000) (200,000) 
Inventory 2,771,833 2,585,820 2,146,389 1,650,959 
Current assets 4,938,386 4,479,325 3,734,521 2,850,720 
Fixed assets 3,760,531 3,744,590 3,498,930 3,132,135 
Total assets $8,698,917 $8,223,915 $7,233,451 $5,982,853 
Current liabilities $2,253,422 $2,286,433 $1,951,830 $1,625,811 
Long-term liabilities 4,711,073 4,525,310 4,191,699 3,550,481 
Owners’ equity 1,734,422 1,412,172 1,089,922 806,561 
Total liabilities and owners’ equity $8,698,917 $8,223,915 $7,233,451 $5,982,853 
Income Statement Information 
Sales $6,740,652 $6,165,411 $5,313,752 $4,251,837 
Sales returns and allowances (207,831) (186,354) (158,367) (121,821) 
Sales discounts allowed (74,147) (63,655) (52,183) (42,451) 
Bad debts (248,839) (245,625) (216,151) (196,521) 
Net sales $6,209,835 $5,669,777 $4,887,051 $3,891,044 
Gross margin $1,415,926 $1,360,911 $1,230,640 $1,062,543 
Net income after taxes $ 335,166 $ 322,250 $ 283,361 $ 257,829 
Aged Accounts Receivable 
0-30 days $ 942,086 $ 881,232 $ 808,569 $ 674,014 
31-60 days 792,742 697,308 561,429 407,271 
61-120 days 452,258 368,929 280,962 202,634 
>120 days 179,852 146,583 105,361 67,551 
Total $2,366,938 $2,094,052 $1,756,321 $1,351,470 





INTEGRATED CASE APPLICATION — 


PINNACLE MANUFACTURING: PART I 





8-40 (Objectives 8-3, 8-4, 8-5) 


Introduction 


This case study is presented in seven parts. Each part deals largely with the material in the 
chapter to which that part relates. However, the parts are connected in such a way that in 
completing all seven, you will gain a better understanding of how the parts of the audit are 
interrelated and integrated by the audit process. The parts of this case appear in the 
following textbook chapters: 


* Part I—Perform analytical procedures for different phases of the audit, Chapter 8. 

* Part II—Understand factors influencing risks and the relationship of risks to audit 
evidence, Chapter 9. 

* Part 1I—Understand internal control and assess control risk for the acquisition and 
payment cycle, Chapter 10. 

» Part [V—Conduct fraud brainstorming and assess fraud risks, Chapter 11. 

» Part V—Design tests of controls and substantive tests of transactions, Chapter 14. 

* Part VI—Determine sample sizes using audit sampling and evaluate results, Chapter 15. 

* Part VII—Design, perform, and evaluate results for tests of details of balances, 
Chapter 16. 


Background Information 


Your audit firm has recently been engaged as the new auditor for Pinnacle Manufacturing 
effective for the audit of the financial statements for the year ended December 31, 2011. 
Pinnacle is a medium-sized corporation, with its headquarters located in Detroit, 
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Michigan. The company is made up of three divisions. The first division, Welburn, has 
been in existence for 35 years and creates powerful diesel engines for boats, trucks, and 
commercial farming equipment. The second division, Solar-Electro, was recently acquired 
from a high-tech manufacturing firm based out of Dallas, Texas. Solar-Electro produces 
state-of-the-art, solar-powered engines. The solar-powered engine market is relatively 
new, and Pinnacle’s top management believes that the Solar-Electro division will be 
extremely profitable in the future as the focus on global climate change continues and 
when highly anticipated EPA regulations make solar-powered engines mandatory for 
certain public transportation vehicles. Finally, the third division, Machine-Tech, engages in 
a wide variety of machine service and repair operations. This division, also new to 
Pinnacle, is currently in its second year of operations. Pinnacle’s board of directors has 
recently considered selling the Machine-Tech division in order to focus more on core 
operations—engine manufacturing. However, before any sale will be made, the board has 
agreed to evaluate this year’s operating results. Excellent operating results may have the 
effect of keeping the division a part of Pinnacle for the next few years. The vice president 
for Machine-Tech is committed to making it profitable. 


PART I 


Required 


The purpose of Part I is to perform preliminary analytical procedures as part of the audit 
planning process. You have been asked to focus your attention on two purposes of analyti- 
cal procedures: obtain an understanding about the client’s business and indicate where 
there is an increased likelihood of misstatements. 


a. Refer to the financial statement data in Figure 8-9 for the current year and prior two 
years. Analyze the year-to-year change in account balance for at least five financial 
statement line items. Document the trend analysis in a format similar to the following: 

% Change % Change 


Ppagxgo PDF Enhancer 2009-2010 


Net sales 





b. Calculate at least five common ratios shown on pages 232-233 and document them in 
a format similar to the following: 
Ratio 2011 2010 2009 





Current ratio 


c. Based on the analytical procedures calculated in parts a. and b., summarize your 
observations about Pinnacle’s business, including your assessment of the client’s 
business risk. 


d. Go to the Pinnacle link on the textbook Web site (www.prenhall.com/arens) and open 
the Pinnacle income statement, which is located in the Pinnacle Income Statement 
worksheet of the Pinnacle_Financials Excel file. Use the income statement infor- 
mation to prepare a common-size income statement for all three years. See Figure 8-7 
(p. 229) for an example. Use the information to identify accounts for which you 
believe there is a concern about material misstatements. Use a format similar to the 
following: 

Estimate of $ Amount 
Account Balance of Potential Misstatement 





e. Use the three divisional income statements in the Pinnacle_Financials Excel file on 
the Web site to prepare a common-size income statement for each of the three 
divisions for all three years. Each division’s income statement is in a separate 
worksheet in the Excel file. Use the information to identify accounts for which you 
believe there is a concern about material misstatements. Use a format similar to the 
one in requirement d. 


f. Explain whether you believe the information in requirement d or e provides the most 
useful data for evaluating the potential for misstatements. Explain why. 
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FIGURE 8-9 Pinnacle Manufacturing Financial Statements 
Pinnacle Manufacturing Company 
Income Statement 
For the Year ended December 31 
2011 2010 2009 
Net sales $ 150,737,628 $ 148,586,037 $ 144,686,413 
Cost of goods sold 109,284,780 106,255,499 101,988,165 
Gross profit 41,452,848 42,330,538 42,698,248 
Operating expenses STATS 38,133,969 37,241,108 
Income from operations 4,275,110 4,196,569 5,457,140 
Other revenues and gains - - - 
Other expenses and losses 2,181,948 2,299,217 2,397,953 
Income before income tax 2,093,162 1,897,352 3,059,187 
Income tax 883,437 858,941 1,341,536 
Net income for the year 1,209,725 1,038,411 1,717,651 
Earnings per share $1.21 $1.04 $1.72 
= 7 
ia >) 
Pinnacle Manufacturing Company 
Balance Sheet 
As of December 31 
Assets 2011 2010 2009 
Current assets — —— =— 
Cash and cash equivalents Sa 721,279 $ 7,324,846 $ 8,066,545 
Net receivables 13,042,165 8,619,857 7,936,409 
Inventory 32,236,021 25,537,198 25,271,503 
Other current assets 172,278 143,206 131,742 
Total current assets 53,171,743 41,625,107 41,406,199 
Property, plant and equipment 62,263,047 61,635,530 58,268,732 
Total assets $ 115,434,790 $ 103,260,637 $ 99,674,931 
Liabilities 
Current liabilities 
Accounts payable $ 12,969,686 $ 9,460,776 $ 7,586,374 
Short/current long-term debt 15,375,819 10,298,668 9,672,670 
Other current liabilities 2,067,643 1,767,360 1,682,551 
Total current liabilities 30,413,148 21,526,804 18,941,595 
Long-term debt 24,420,090 22,342,006 22,379,920 
Total liabilities 54,833,238 43,868,810 41,321,515 
Stockholders’ equity 
Common stock 1,000,000 1,000,000 1,000,000 
Additional paid-in capital 15,717,645 15,717,645 15,717,645 
Retained earnings 43,883,907 42,674,182 41,635,771 
Total stockholders’ equity 60,601,552 59,391,827 58,353,416 
Total liabilities & stockholders’ equity $ 115,434,790 $ 103,260,637 $ 99,674,931 
bs S 








g. Analyze the account balances for accounts receivable, inventory, and short/current 
long-term debt. Describe any observations about those accounts and discuss additional 
information you want to consider during the current year audit. 


h. Based on your calculations, assess the likelihood (high, medium, or low) that Pinnacle 
is likely to fail financially in the next 12 months. 


ACL PROBLEM 
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8-41 (Objectives 8-5 and 8-7) This problem requires the use of ACL software, which is 
included in the CD attached to the text. Information about installing and using ACL and 
solving this problem can be found in Appendix, pages 838-842. You should read all of the 
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Required 


reference material preceding instructions about “Quick Sort” before locating the appro- 
priate command to answer questions a-c. For this problem use the “Inventory” file in the 
“Inventory_Review” subfolder under tables in Sample_Project. The suggested command or 
other source of information needed to solve the problem requirement is included at the end of 
each question. 


a. Obtain and print statistical information for both Inventory Value at Cost and Market 
Value. Determine how many inventory items have positive, negative, and zero values for 
both Inventory Value at Cost and Market Values. (Statistics) 


b. Use Quick Sort Ascending and Descending for both Inventory Value at Cost and Market 
Value. (Quick Sort) Use this information and the information from part a to identify any 
concerns you have in the audit of inventory. 


c. Calculate the ratio of Inventory Value at Cost to Market Value and sort the result from 
low to high. (Computed Fields and Quick Sort) Identify concerns about inventory 
valuation, if any. 


INTERNET PROBLEM 8-1: 


OBTAIN CLIENT BACKGROUND INFORMATION 


Required 





Planning is one of the most demanding and important aspects of an audit. A carefully 
planned audit increases auditor efficiency and provides greater assurance that the audit team 
addresses the critical issues. Auditors prepare audit planning documents that summarize 
client and industry background information and discuss accounting and auditing issues 
related to the client’s financial statements. 

The Securities and Exchange Commission (SEC) Form 10-K filing rules require manage- 
ment of U.S. public companies to include background information about the business, 
including discussion and analysis by management about the most recent financial condition 
and reg agouPDE ce EnhanGermhile these disclosures are primarily 
intended for current and future investors, they also provide rich information for auditors, 
especially during the client acceptance and continuance phase of an audit. Additionally, 
similar disclosures by a client’s competitors in their financial statements may also provide 
useful industry specific information that can be helpful during audit planning. 


a. Visit the SEC’s website (www.sec.gov) and locate the most recent Form 10-K filing for 
The Coca-Cola Company (search for “Coca Cola Co”). 


b. Review the information contained in Items 1, 1A, and 7 in the Form 10-K. Describe 
the nature of information included in each of these sections of the Form 10-K and 
discuss how the information might be helpful to auditors in obtaining an under- 
standing of the client’s business and industry. 


c. Locate the most recent Form 10-K filing for PepsiCo, Inc. (search for “PepsiCo”). 
Review the Items 1, 1A, and 7 disclosures and describe how the review of the PepsiCo, 
Inc. disclosures might be informative to auditors of The Coca-Cola Company. 
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MATERIALITY AND RISK 


Explain To Me One More Time That You Did 
A Good Job, But The Company Went Broke 


Maxwell Spencer is a senior partner in his firm, and one of his regular 
duties is to attend the firm’s annual training session for newly hired 
auditors. He loves doing this because it gives him a chance to share his 
many years of experience with inexperienced people who have bright and 
receptive minds. He covers several topics formally during the day and then 
sits around and “shoots the breeze” with participants during the evening 
hours. Here we listen to what he is saying. 


Suppose you are a retired 72-year-old man. You and your wife, Sarah, 
live on your retirement fund which you elected to manage yourself, 
rather than receive income from an annuity. You decide that your 
years in business prepared you with the ability to earn a better return 
than the annuity would provide. 


So when you retired and got your bundle, you called your broker and 
discussed with him what you should do with it. He tells you the most 
important thing is to protect your principal and recommends that you 


LEARNING OBJECTIVES 


After studying this chapter, 
you should be able to 


9-1 


9-2 


9-5 
9-6 


9-7 


buy bonds. You settle on three jssues that yqur. erand,his firm 
believe are good ones, with ADAG. BBE) Enhancer 9-8 


natural gas distribution company, (2) a fast-growing telecom company, 
and (3) a large national cable company. Now all you have to do is sit 
back and collect your interest. 


Ah, but the best laid plans of mice and men.... First, the natural gas 
company goes broke, and you can look forward to recovering only a 
few cents on the dollar over several years. Then, the telecom company 
fails, and you might get something back—eventually. Finally, the cable 
company has a scandal and has to default on all of its outstanding 





Apply the concept of materiality 
to the audit. 


Make a preliminary judgment 
about what amounts to consider 
material. 


Allocate preliminary materiality 
to segments of the audit during 
planning. 

Use materiality to evaluate audit 
findings. 


Define risk in auditing. 


Describe the audit risk model 
and its components. 


Consider the impact of 
engagement risk on acceptable 
audit risk. 


Consider the impact of several 
factors on the assessment of 
inherent risk. 


Discuss the relationship 
of risks to audit evidence. 


Discuss how materiality and risk 
are related and integrated into 
the audit process. 





bonds. A recovery plan is initiated, but don’t hold your breath. Your best strategy is to apply for a job at McDonald's. 


They hire older people, don’t they? 


Now what could the auditors of these three entities ever say to you about how they planned and conducted their 
audits and decided to issue an unqualified opinion that would justify that opinion in your mind? You don’t care 
about business failure versus audit failure, or risk assessment and reliability of audit evidence, or any of that 
technical mumbo jumbo. The auditors were supposed to be there for you when you needed them, and they 
weren't. And materiality? Anything that would have indicated a problem is material to you. 


The message is, folks, that it’s a lot easier to sweat over doing a tough audit right than it is to justify your 
judgments and decisions after it’s too late. And good luck if you think that a harmed investor will ever see things 


from your point of view. 
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MATERIALITY 


he scope paragraph in an audit report includes two important phrases (italicized 
below) that are directly related to materiality and risk. 


* We conducted our audits in accordance with auditing standards generally 
accepted in the United States of America. Those standards require that we plan 
and perform the audit to obtain reasonable assurance about whether the 
financial statements are free of material misstatement. 


The phrase obtain reasonable assurance is intended to inform users that auditors do 
not guarantee or ensure the fair presentation of the financial statements. Some risk that 
the financial statements are not fairly stated exists, even when the opinion is 
unqualified. 

The phrase free of material misstatement is intended to inform users that the 
auditor’s responsibility is limited to material financial information. Materiality is 
important because it is impractical for auditors to provide assurances on immaterial 
amounts. 

Materiality and risk are fundamental to planning the audit and designing an audit 
approach. In this chapter, we will show how these concepts fit into the planning phase 
of the audit. Note that the topic of this chapter is closely related to earlier discussions of 
auditor’s responsibilities, transaction cycles, and audit objectives (Chapter 6) and 
planning the audit (Chapter 8). 

In this chapter, we apply both materiality and risk to the concepts studied in 
Chapter 6. We introduce the fifth step in planning the audit, which builds on the first 
four steps that were covered in Chapter 8. When auditors decide materiality and assess 
risks, they use a considerable amount of the information acquired and documented 
during the first four parts of audit planning. 


OBJECTIVE 9-1 





Apply the concept of 
materiality to the audit. 
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Materiality is a major consideration in determining the appropriate audit report to 
issue. The concepts of materiality discussed in this chapter are directly related to those 
we introduced in Chapter 3. 

FASB Concept Statement 2 defines materiality as: 


* The magnitude of an omission or misstatement of accounting information that, 
in the light of surrounding circumstances, makes it probable that the judgment 
of a reasonable person relying on the information would have been changed or 
influenced by the omission or misstatement. [italics added] 


Because auditors are responsible for determining whether financial statements are 
materially misstated, they must, upon discovering a material misstatement, bring it to 
the client’s attention so that a correction can be made. If the client refuses to correct the 
statements, the auditor must issue a qualified or an adverse opinion, depending on the 
materiality of the misstatement. To make such determinations, auditors depend on a 
thorough knowledge of the application of materiality. 

A careful reading of the FASB definition reveals the difficulty that auditors have in 
applying materiality in practice. While the definition emphasizes reasonable users who 
rely on the statements to make decisions, auditors must have knowledge of the likely 
users of the client’s statements and the decisions that are being made. For example, if 
an auditor knows that financial statements will be relied on in a buy-sell agreement for 
the entire business, the amount that the auditor considers material may be smaller than 
that for an otherwise similar audit. In practice, of course, auditors may not know who 
all the users are or what decisions they may make based on the financial statements. 

Auditors follow five closely related steps in applying materiality, as shown in Figure 
9-1. The auditor first sets a preliminary judgment about materiality and then allocates 
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this estimate to the segments of the audit, as shown in the first bracket of the figure. 
These two steps, which are part of Cte bog °PDFEfihi an Aipussion 
of materiality in this chapter. Step 3 octurs throughout the engagement, when auditors 
estimate the amount of misstatements in each segment as they evaluate audit evidence. 
Near the end of the audit, during the engagement completion phase, auditors proceed 
through the final two steps. These latter three steps, as shown in the second bracket in 


Figure 9-1, are part of evaluating the results of audit tests. 


SET PRELIMINARY JUDGMENT ABOUT MATERIALITY 


OBJECTIVE 9-2 


Auditing standards require auditors to decide on the combined amount of misstatements 
in the financial statements that they would consider material early in the audit as they 
are developing the overall strategy for the audit. We refer to this as the preliminary 
judgment about materiality. It is called a preliminary judgment about materiality 
because, although a professional opinion, it may change during the engagement. This 
judgment must be documented in the audit files. 

The preliminary judgment about materiality (step 1 in Figure 9-1) is the maximum 
amount by which the auditor believes the statements could be misstated and still not 
affect the decisions of reasonable users. (Conceptually, this is an amount that is $1 less 
than materiality as defined by the FASB. We define preliminary materiality in this 
manner for convenience.) This judgment is one of the most important decisions the 
auditor makes, and it requires considerable professional wisdom. 

Auditors set a preliminary judgment about materiality to help plan the appropriate 
evidence to accumulate. The lower the dollar amount of the preliminary judgment, the 
more evidence required. Examine the financial statements of Hillsburg Hardware Co., 
in the glossy insert to the textbook. What combined amount of misstatements will affect 
decisions of reasonable users? Do you believe that a $100 misstatement will affect users’ 
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about what amounts to 
consider material. 





Chapter 9 / MATERIALITY AND RISK 


251 


Factors 


Affecting Preliminary 
Materiality Judgment 





Set preliminary 
judgment about 
materiality 








Allocate preliminary 
judgment about 
materiality 
to segments 








Estimate 
total misstatement 
in segment 








Estimate the 
combined 
misstatement 











Compare combined 
estimate with 
preliminary or 

revised judgment 
about materiality 








252 


decisions? If so, the amount of evidence required for the audit is likely to be beyond that 
for which the management of Hillsburg Hardware is willing to pay. Do you believe that 
a $10 million misstatement will be material? Most experienced auditors believe that 
amount is far too large as a combined materiality amount in these circumstances. 
During the audit, auditors often change the preliminary judgment about materiality. 
We refer to this as the revised judgment about materiality. Auditors are likely to make 
the revision because of changes in one of the factors used to determine the preliminary 
judgment; that is because the auditor decides that the preliminary judgment was too 
large or too small. For example, a preliminary judgment about materiality is often deter- 
mined before year-end and is based on prior years’ financial statements or interim finan- 
cial statement information. The judgment may be reevaluated after current financial 
statements are available. Or, client circumstances may have changed due to qualitative 
events, such as the issuance of debt that created a new class of financial statement users. 


Several factors affect the auditor’s preliminary judgment about materiality for a given 
set of financial statements. The most important of these are: 


Materiality Is a Relative Rather Than an Absolute Concept A misstatement of a 
given magnitude might be material for a small company, whereas the same dollar 
misstatement could be immaterial for a large one. This makes it impossible to establish 
dollar-value guidelines for a preliminary judgment about materiality that are appli- 
cable to all audit clients. For example, a total misstatement of $10 million would be 
extremely material for Hillsburg Hardware Co. because, as shown in their financial 
statements, total assets are about $61 million and net income before taxes is less than $6 
million. A misstatement of the same amount is almost certainly immaterial for a 
company such as IBM, which has total assets and net income of several billion dollars. 


Bases Are Needed for Evaluating Materiality Because materiality is relative, it is 
necess et bas tabh ier-hater jsstatements are material. Net income 
before OM ef n PORE ah what is material for profit-oriented 
businesses because it is regarded as a critical item of information for users. Some firms 
use a different primary base, because net income often fluctuates considerably from 
year to year and therefore does not provide a stable base, or when the entity is a not-for- 
profit organization. Other primary bases include net sales, gross profit, and total or net 
assets. After establishing a primary base, auditors should also decide whether the 
misstatements could materially affect the reasonableness of other bases such as current 
assets, total assets, current liabilities, and owners’ equity. Auditing standards require the 
auditor to document in the audit files the basis used to determine the preliminary 
judgment about materiality. 

Assume that for a given company, an auditor decided that a misstatement of 
income before taxes of $100,000 or more would be material, but a misstatement would 
need to be $250,000 or more to be material for current assets. It is not appropriate for 
the auditor to use a preliminary judgment about materiality of $250,000 for both 
income before taxes and current assets. Instead, the auditor must plan to find all 
misstatements affecting income before taxes that exceed the preliminary judgment 
about materiality of $100,000. Because almost all misstatements affect both the income 
statement and balance sheet, the auditor uses a primary preliminary materiality level of 
$100,000 for most tests. The only other misstatements that will affect current assets are 
misclassifications within balance sheet accounts, such as misclassifying a long-term 
asset as a current one. So, in addition to the primary preliminary judgment of 
materiality of $100,000, the auditor will also need to plan the audit with the $250,000 
preliminary judgment about materiality for misclassifications of current assets. 


Qualitative Factors Also Affect Materiality Certain types of misstatements are 
likely to be more important to users than others, even if the dollar amounts are the 
same. For example: 
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* Amounts involving fraud are usually considered more important than unin- 
tentional errors of equal dollar amounts because fraud reflects on the honesty 
and reliability of the management or other personnel involved. For example, 
most users consider an intentional misstatement of inventory more important 
than clerical errors in inventory of the same dollar amount. 

* Misstatements that are otherwise minor may be material if there are possible 
consequences arising from contractual obligations. Say that net working capital 
included in the financial statements is only a few hundred dollars more than the 
required minimum in a loan agreement. If the correct net working capital were 
less than the required minimum, putting the loan in default, the current and 
noncurrent liability classifications would be materially affected. 

* Misstatements that are otherwise immaterial may be material if they affect a 
trend in earnings. For example, if reported income has increased 3 percent 
annually for the past 5 years but income for the current year has declined 1 
percent, that change may be material. Similarly, a misstatement that would cause 
a loss to be reported as a profit may be of concern. 


Accounting and auditing standards do not provide specific materiality guidelines to 
practitioners. The concern is that such guidelines might be applied without considering 
all the complexities that should affect the auditor’s final decision. However, in this 
chapter, we do provide guidelines to illustrate the application of materiality. These are 
intended only to help you better understand the concept of applying materiality in 
practice. The guidelines are stated in Figure 9-2 in the form of policy guidelines of a 


fieneeu Illustrative Materiality Guidelines ) 


BERGER AND ANTHONY, CPAs 
Gary, Indiana 46405 


POLICY STATEMENT Charles G. Berger 
No. 32IC Joe Anthony 
Title: Materiality Guidelines 








Professional judgment is to be used at all times in setting and applying materiality guidelines. 
As a general guideline, the following policies are to be applied: 

1. The combined total of misstatements in the financial statements exceeding 6 percent is 
normally considered material. A combined total of less than 3 percent is presumed to be 
immaterial in the absence of qualitative factors. Combined misstatements between 3 
percent and 6 percent require the greatest amount of professional judgment to determine 
their materiality. 

2. The 3 percent to 6 percent must be measured in relation to the appropriate base. Many 
times there is more than one base to which misstatements should be compared. The 
following guides are recommended in selecting the appropriate base: 

a. Income statement. Combined misstatements in the income statement should 
ordinarily be measured at 3 percent to 6 percent of operating income before taxes. A 
guideline of 3 percent to 6 percent may be inappropriate in a year in which income is 
unusually large or small. When operating income in a given year is not considered 
representative, it is desirable to substitute as a base a more representative income 
measure. For example, average operating income for a 3-year period may be used as 
the base. 

b. Balance sheet. Combined misstatements in the balance sheet should originally be 
evaluated for current assets, current liabilities, and total assets. For current assets and 
current liabilities, the guidelines should be between 3 percent and 6 percent, applied 
in the same way as for the income statement. For total assets, the guidelines should 
be between 1 percent and 3 percent, applied in the same way as for the income 
statement. 

3. Qualitative factors should be carefully evaluated on all audits. In many instances, they are 
more important than the guidelines applied to the income statement and balance sheet. 
The intended uses of the financial statements and the nature of the information in the 
statements, including footnotes, must be carefully evaluated. 











Illustrative Guidelines 
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Application 
to Hillsburg Hardware 


CPA firm. Notice that the guidelines are formulas using one or more bases and a range 
of percentages. The application of guidelines, such as the ones we present here, requires 
considerable professional judgment. 


Using the illustrative guidelines in Figure 9-2 (p. 253), let’s examine a preliminary 
judgment about materiality for Hillsburg Hardware Co. The guidelines are as follows: 


Preliminary Judgment About Materiality (Rounded, in Thousands) 














Minimum Maximum 
Percentage Dollar Amount Percentage Dollar Amount 
Earnings from operations 3 $ 221 6 $ 442 
Current assets 3 1,531 6 3,062 
Total assets 1 614 3 1,841 
Current liabilities 3 396 6 793 





If the auditor for Hillsburg Hardware decides that the general guidelines are 
reasonable, the first step is to evaluate whether any qualitative factors significantly 
affect the materiality judgment. Assuming no qualitative factors exist, if the auditor 
concludes at the end of the audit that combined misstatements of operating income 
before taxes are less than $221,000, the statements will be considered fairly stated. If 
the combined misstatements exceed $442,000, the statements will not be considered 
fairly stated. If the misstatements are between $221,000 and $442,000, a more careful 
consideration of all facts will be required. The auditor then applies the same process 
to the other three bases. 


ALLOCATE PRELIMINARY JUDGMENT ABOUT MATERIALITY 





TO SEGMENTS (TOLERABLE MISSTATEMENT) 


OBJECTIVE 9-3 





Allocate preliminary 
materiality to segments of 
the audit during planning. 





The allocation of the preliminary judgment about materiality to segments (step 2 in 
Figure 9-1 on page 251) is necessary because auditors accumulate evidence by segments 
rather than for the financial statements as a whole. If auditors have a preliminary 
judgment about materiality for each segment, it helps them decide the appropriate 
audit evidence to accumulate. For an accounts receivable balance of $1,000,000, for 
example, the auditor should accumulate more evidence if a misstatement of $50,000 is 
considered material than if $300,000 were considered material. 

Most practitioners allocate materiality to balance sheet rather than income state- 
ment accounts, because most income statement misstatements have an equal effect on 
the balance sheet due to the nature of double-entry accounting. For example, a $20,000 
overstatement of accounts receivable is also a $20,000 overstatement of sales. It is 
inappropriate to allocate the preliminary judgment to both income statement and 
balance sheet accounts because doing so will result in double counting, which will in 
turn lead to smaller tolerable misstatements than is desirable. This enables auditors to 
allocate materiality to either income statement or balance sheet accounts. Because 
there are fewer balance sheet than income statement accounts in most audits, and 
because most audit procedures focus on balance sheet accounts, materiality should be 
allocated only to balance sheet accounts. 

When auditors allocate the preliminary judgment about materiality to account 
balances, the materiality allocated to any given account balance is referred to as tolerable 
misstatement. For example, if an auditor decides to allocate $100,000 of a total 
preliminary judgment about materiality of $200,000 to accounts receivable, tolerable 
misstatement for accounts receivable is $100,000. This means that the auditor is willing 
to consider accounts receivable fairly stated if it is misstated by $100,000 or less. 


254 Part 2 / THE AUDIT PROCESS 


Auditors face three major difficulties in allocating materiality to balance sheet 
accounts: 


1. Auditors expect certain accounts to have more misstatements than others. 
2. Both overstatements and understatements must be considered. 
3. Relative audit costs affect the allocation. 


All three of these difficulties are considered in the allocation in Figure 9-3. It is 
worth keeping in mind that at the end of the audit, the auditor must combine all actual 
and estimated misstatements and compare them to the preliminary judgment about 
materiality. In allocating tolerable misstatement, the auditor is attempting to do the 
audit as efficiently as possible. 


Figure 9-3 illustrates the allocation approach followed by the senior, Fran Moore, for 
the audit of Hillsburg Hardware Co. It summarizes the balance sheet, combining 
certain accounts, and shows the allocation of total materiality of $442,000 (6 percent of 
earnings from operations). Moore’s allocation approach uses judgment in the alloca- 
tion, subject to the following two arbitrary requirements established by Berger and 
Anthony, CPAs: 


* Tolerable misstatement for any account cannot exceed 60 percent of the prelimi- 
nary judgment (60 percent of $442,000 = $265,000, rounded). 

* The sum of all tolerable misstatements cannot exceed twice the preliminary 
judgment about materiality (2 x $442,000 = $884,000). 





Tolerable Misstatement Allocated to Hillsburg Hardware Co. 














Balance Tolerable 
12-31-11 Misstatement 
(in Thousands) (in Thousands) 
Cash $ 828 $ 6 (a) 
Trade accounts receivable (net) 18,957 265 (b) 
Inventories 29,865 265 (b) 
Other current assets psa 60 (c) 
Property, plant, and equipment 10,340 48 (d) 
Total assets $61,367 
Trade accounts payable $ 4,720 108 (e) 
Notes payable—total 28,300 0 (a) 
Accrued payroll and payroll tax 1,470 60 (c) 
Accrued interest and dividends payable 2,050 0 (a) 
Other liabilities 2,364 72 (*— 
Capital stock and capital in excess of par 8,500 0 (a) 
Retained earnings 13,963 NA (f) 
Total liabilities and equity $61,367 $884 (2 x $442) 
NA = Not applicable 
(a) Zero or small tolerable misstatement because account can be completely audited at low cost and no 
misstatements are expected. 
(b) Large tolerable misstatement because account is large and requires extensive sampling to audit the account. 
(©) Large tolerable misstatement as a percent of account because account can be verified at extremely low cost, 
probably with analytical procedures, if tolerable misstatement is large. 
(d) Small tolerable misstatement as a percent of account balance because most of the balance is in land and 
buildings, which is unchanged from the prior year and need not be audited further this year. 
(€) Moderately large tolerable misstatement because a relatively large number of misstatements are expected. 
(f) Not applicable—retained earnings is a residual account that is affected by the net amount of the 
misstatements in the other accounts. 











Allocation Illustrated 
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The first requirement keeps the auditor from allocating all of total materiality to 
one account. If, for example, all of the preliminary judgment of $442,000 is allocated 
to trade accounts receivable, a $442,000 misstatement in that account will be 
acceptable. However, it may not be acceptable to have such a large misstatement in one 
account, and even if it is acceptable, it does not allow for any misstatements in other 
accounts. 

There are two reasons for the second requirement, permitting the sum of the 
tolerable misstatement to exceed overall materiality: 


* It is unlikely that all accounts will be misstated by the full amount of tolerable 
misstatement. If, for example, other current assets have a tolerable misstatement 
of $100,000 but no misstatements are found in auditing those accounts, it 
means that the auditor, after the fact, could have allocated zero or a small 
tolerable misstatement to other current assets. It is common for auditors to find 
fewer misstatements than tolerable misstatement. 

* Some accounts are likely to be overstated, whereas others are likely to be under- 
stated, resulting in a net amount that is likely to be less than the preliminary 
judgment. 


Notice in the allocation that the auditor is concerned about the combined effect on 
operating income of the misstatement of each balance sheet account. An overstatement 
of an asset account will therefore have the same effect on the income statement as an 
understatement of a liability account. In contrast, a misclassification in the balance 
sheet, such as a classification of a note payable as an account payable, will have no effect 
on operating income. Therefore, the materiality of items not affecting the income 
statement must be considered separately. 

Figure 9-3 (p. 255) also includes the rationale that Moore followed in deciding 
tolerable misstatement for each account. For example, she concluded that it was 
unnec pago“PDP  Erharcer to notes payable, even though it is 
as large ds inventories. If she had assigned $132,500 to each of those two accounts, 
more evidence would have been required in inventories, but the confirmation of the 
balance in notes payable would still have been necessary. It was therefore more 
efficient to allocate $265,000 to inventories and none to notes payable. Similarly, she 
allocated $60,000 to other current assets and accrued payroll and payroll tax, both of 
which are large compared with the recorded account balance. Moore did so because 
she believes that these accounts can be verified within $60,000 by using only 
analytical procedures, which are low cost. If tolerable misstatement were set lower, 
she would have to use more costly audit procedures such as documentation and 
confirmation. 

In practice, it is often difficult to predict in advance which accounts are most likely 
to be misstated and whether misstatements are likely to be overstatements or under- 
statements. Similarly, the relative costs of auditing different account balances often 
cannot be determined. It is therefore a difficult professional judgment to allocate the 
preliminary judgment about materiality to accounts. Accordingly, many accounting 
firms have developed rigorous guidelines and sophisticated methods for doing so. 
These guidelines also help ensure the auditor appropriately documents the tolerable 
misstatement amounts and the related basis used to determine those amounts in the 
audit files. 

To summarize, the purpose of allocating the preliminary judgment about 
materiality to balance sheet accounts is to help the auditor decide the appropriate 
evidence to accumulate for each account on both the balance sheet and income 
statement. An aim of the allocation is to minimize audit costs without sacrificing 
audit quality. Regardless of how the allocation is done, when the audit is completed, 
the auditor must be confident that the combined misstatements in all accounts are 
less than or equal to the preliminary (or revised) judgment about materiality. 
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ESTIMATE MISSTATEMENT AND COMPARE 


WITH PRELIMINARY JUDGMENT 





The first two steps in applying materiality involve planning (see Figure 9-1 on page 
251) and are our primary concern in this chapter. The last three steps result from 
performing audit tests. These steps are introduced here and discussed in more detail 
in subsequent chapters. 

When auditors perform audit procedures for each segment of the audit, they docu- 
ment all misstatements found. Misstatements in an account can be of two types: 
known misstatements and likely misstatements. Known misstatements are those 
where the auditor can determine the amount of the misstatement in the account. For 
example, when auditing property, plant, and equipment, the auditor may identify 
capitalized leased equipment that should be expensed because it is an operating lease. 
There are two types of likely misstatements. The first are misstatements that arise from 
differences between management’s and the auditor’s judgment about estimates of 
account balances. Examples are differences in the estimate for the allowance for uncol- 
lectible accounts or for warranty liabilities. The second are projections of misstatements 
based on the auditor’s tests of a sample from a population. For example, assume the 
auditor finds six client misstatements in a sample of 200 in testing inventory costs. The 
auditor uses these misstatements to estimate the total likely misstatements in inventory 
(step 3). The total is called an estimate or a “projection” or “extrapolation” because only 
a sample, rather than the entire population, was audited. The projected misstatement 
amounts for each account are combined on the worksheet (step 4), and then the 
combined likely misstatement is compared with materiality (step 5). 

Table 9-1 illustrates the last three steps in applying materiality. For simplicity, only 
three accounts are included. The misstatement in cash of $2,000 is a known misstate- 
ment related to unrecorded bank sky es PPE IR rhtvadie @iptke for 
cash, the misstatements for accounts receivable and inventory are based on samples. 
The auditor calculates likely misstatements for accounts receivable and inventory 
using known misstatements detected in those samples. To illustrate the calculation, 
assume that in auditing inventory the auditor found $3,500 of net overstatement 
amounts in a sample of $50,000 of the total population of $450,000. The $3,500 
identified misstatement is a known misstatement. To calculate the estimate of the 
likely misstatements for the total population of $450,000, the auditor makes a direct 




















TABLE 9-1 Illustration of Comparison of Estimated Total Misstatement to 
Preliminary Judgment about Materiality 
Estimated Misstatement Amount 
Known 
Tolerable Misstatement and Sampling 

Account Misstatement _ Direct Projection Error Total 
Cash $ 4,000 $ 2,000 $ NA $ 2,000 
Accounts receivable 20,000 12,000 6,000 18,000 
Inventory 36,000 31,500 15,750 47,250 
Total estimated 

misstatement amount $45,500 $16,800 $62,300 
Preliminary judgment 

about materiality $50,000 
NA = Not applicable. 
Cash audited 100 percent. 

& 7 
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projection of the known misstatement from the sample to the population and adds an 
estimate for sampling error. The calculation of the direct projection estimate of 
misstatement is: 


Direct projection 
Total recorded pe) 





Net misstatements in the sample ($3,500) ees ealiane ine = estimate of 
Total sampled ($50,000) P ‘3 450,000) misstatement 
: ($31,500) 


(Note that the direct projection of likely misstatement for accounts receivable of 
$12,000 is not illustrated.) 

The estimate for sampling error results because the auditor has sampled only a 
portion of the population and there is a risk that the sample does not accurately 
represent the population. (We'll discuss this in more detail in chapters 15 and 17). In 
this simplified example, we'll assume the estimate for sampling error is 50 percent of 
the direct projection of the misstatement amounts for the accounts where sampling 
was used (accounts receivable and inventory). There is no sampling error for cash 
because the total amount of misstatement is known, not estimated. 

In combining the misstatements in Table 9-1 (p. 257), we can observe that the 
known misstatements and direct projection of likely misstatements for the three 
accounts adds to $45,500. However, the total sampling error is less than the sum of the 
individual sampling errors. This is because sampling error represents the maximum 
misstatement in account details not audited. It is unlikely that this maximum 
misstatement amount exists in all accounts subjected to sampling. 

Table 9-1 shows that total estimated likely misstatement of $62,300 exceeds the 
preliminary judgment about materiality of $50,000. The major area of difficulty is 
inventory, where estimated misstatement of $47,250 is significantly greater than 
tolerable misstatement of $36,000. Because the estimated combined misstatement 
exceeA pagqmiPDMsknhafoees statements are not acceptable. The 
auditor can either determine whether the estimated likely misstatement actually 
exceeds $50,000 by performing additional audit procedures or require the client to 
make an adjustment for estimated misstatements. If the auditor decides to perform 
additional audit procedures, they will be concentrated in the inventory area. 

If the estimated net overstatement amount for inventory had been $28,000 ($18,000 
plus $10,000 sampling error), the auditor probably would not have needed to expand 
audit tests because it would have met both the tests of tolerable misstatement ($36,000) 
and the preliminary judgment about materiality ($2,000 + $18,000 + $28,000 = $48,000 
< $50,000). In fact, the auditor would have had some leeway with that amount because 
the results of cash and accounts receivable procedures indicate that those accounts are 
within their tolerable misstatement limits. If the auditor approaches the audit of the 
accounts in a sequential manner, the findings of the audit of accounts audited earlier 
can be used to revise the tolerable misstatement established for accounts audited later. 
In the illustration, if the auditor had audited cash and accounts receivable before 
inventories, tolerable misstatement for inventories could have been increased. 


AUDIT RISK 


OBJECTIVE 9-5 


Define risk in auditing. 





The second standard of fieldwork requires the auditor to obtain an understanding of 
the entity and its environment, including its internal control, to assess the risk of 
material misstatements in the client’s financial statements. Chapter 8 described how 
the auditor gains an understanding of the client’s business and industry to assess client 
business risk and the risk of material misstatement. 

As we saw in Chapter 8, auditors accept some level of risk or uncertainty in perform- 
ing the audit function. The auditor recognizes, for example, the inherent uncertainty 
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about the appropriateness of evidence, uncertainty about the effectiveness of a client’s 
internal controls, and uncertainty about whether the financial statements are fairly stated 
when the audit is completed. An effective auditor recognizes that risks exist and deals 
with those risks in an appropriate manner. Most risks auditors encounter are difficult 
to measure and require careful consideration before the auditor can respond appro- 
priately. Responding to these risks properly is critical to achieving a high-quality audit. 


Auditors consider risk in planning procedures to obtain audit evidence primarily by 
applying the audit risk model. The model is introduced here and discussed in greater 
detail later in the chapter. You will need a thorough understanding of the model to 
conduct effective audit planning and to master the content presented in the remaining 
chapters of this book. 

The audit risk model helps auditors decide how much and what types of evidence 
to accumulate in each cycle. It is usually stated as follows: 


AAR 
~ IRX CR 
where: PDR = planned detection risk 
AAR = acceptable audit risk 
IR = inherent risk 
CR = control risk 


Figure 9-4 shows the relationship between the audit risk model and the under- 
standing of the client’s business and industry discussed in Chapter 8. Auditors use the 
audit risk model to further identify the potential for misstatements in the overall 
financial statements and specific account balances, classes of transactions, and 
disclosures where misstatements are_most likely to occur, 


Apago PDF Enhancer 


Audit Risk Model and Understanding the Client’s Business and ) 
Industry 


Industry and External Environment 

























Business Operations and Processes 











Understand Client's 
Business and Industry 


Y 


Assess Client 
Business Risk 


Y 


Assess Risk of 
Material Misstatements 


AAR 
y \ PDR = ——— 
IRx CR 


Inherent Control 
Risk (IR) Risk (CR) 


Management and Governance 











Objectives and Strategies 








Measurement and Performance 














AUDIT RISK MODEL 









































Audit Risk Model 
for Planning 


Chapter 9 / MATERIALITY AND RISK 259 


Illustration Concerning 
Risks and Evidence 


Before we discuss the audit risk model components, review the illustration for 
a hypothetical company in Table 9-2. Let’s walk through the illustration point by 
point: 


: The first row in the table shows the differences among cycles in the frequency 
and size of expected misstatements (A). Almost no misstatements are expected 
in payroll and personnel, but many are expected in inventory and warehousing. 
It is possible that the payroll transactions are routine, while considerable com- 
plexities exist in recording inventory. 

* Similarly, internal control is believed to differ in effectiveness among the five 
cycles (B). For example, internal controls in payroll and personnel are con- 
sidered highly effective, whereas those in inventory and warehousing are 
considered ineffective. 

* Finally, the auditor has decided on a low willingness that material misstatements 
exist after the audit is complete for all five cycles (C). It is common for auditors 
to want an equally low likelihood of misstatements for each cycle after the audit 
is finished to permit the issuance of an unqualified opinion. 

* These considerations (A, B, C) affect the auditor’s decision about the appro- 
priate nature, timing, and extent of evidence to accumulate (D). For example, 
because the auditor expects few misstatements in payroll and personnel (A) and 
internal controls are effective (B), the auditor plans for less evidence (D) than 
for inventory and warehousing. 


At the top of the following page, we provide a numerical example for discussion. 
The numbers used are for the inventory and warehousing cycle in Table 9-2. 


epee 9-2 Illustration of Differing Evidence Among Cycles 








Capital 
Sales and Acquisition Payroll and Inventory and Acquisition 
Collection and Payment Personnel Warehousing and Repay- 
Cycle Cycle Cycle Cycle ment Cycle 
Auditor's assessment of 
expectation of material Expect some Expect many Expect few Expect many Expect few 


misstatement before 
considering internal 


misstatements 


misstatements 


misstatements 


misstatements 


misstatements 











control (inherent risk) (medium) (high) (low) (high) (low) 
Auditor's assessment of 

effectiveness of internal Medium High High Low Medium 
controls to prevent or effectiveness effectiveness effectiveness effectiveness effectiveness 
detect material misstate- 

ments (control risk) (medium) (low) (low) (high) (medium) 
Auditor's willingness 

to permit material Low Low Low Low Low 
misstatements to exist willingness willingness willingness willingness willingness 
after completing the audit 

(acceptable audit risk) (low) (low) (low) (low) (low) 
Extent of evidence Medium Medium Low High Medium 
the auditor plans level level level level level 

to accumulate 

(planned detection risk) (medium) (medium) (high) (low) (medium) 
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IR = 100% 


CR = 100% 

AAR = 5% 

ppp]? — = 5 or 5% 
1.0 x 1.0 


Note that the assessments in Table 9-2 are not in numerical form. Although risk 
model assessments may be quantitative or nonquantitative, most firms prefer non- 
quantitative assessments of risk (such as low, moderate, and high) due to the difficulty 
in precisely quantifying measures of risk. 


AUDIT RISK MODEL COMPONENTS 


OBJECTIVE 9-6 


Each of the four risks in the audit risk model is sufficiently important to merit detailed 
discussion. This section briefly discusses all four to provide an overview of the risks. 
Acceptable audit risk and inherent risk are discussed in greater detail later in this 
chapter. Control risk is examined in Chapter 10. 


Planned detection risk is the risk that audit evidence for a segment will fail to detect 
misstatements exceeding tolerable misstatement. There are two key points to know 
about planned detection risk. 

Planned detection risk is dependent on the other three factors in the model. It will 
change only if the auditor changes one of the other risk model factors. 

Planned detection risk determines the amount of substantive evidence that the 
auditor plans to accumulate, inversely with the size of planned detection risk. If 
planned detection risk is reduced, tBX GoreeRDEckirilranee ence to 
achieve the reduced planned risk. For example, in Table 9-2, planned detection risk (D) 
is low for inventory and warehousing, which causes planned evidence to be high. The 
opposite is true for payroll and personnel. 

In the preceding numerical example, the planned detection risk (PDR) of .05 
means the auditor plans to accumulate evidence until the risk of misstatements 
exceeding tolerable misstatement is reduced to 5 percent. If control risk (CR) were .50 
instead of 1.0, planned detection risk (PDR) would be .10, and planned evidence could 
therefore be reduced. 


Inherent risk measures the auditor’s assessment of the likelihood that there are material 
misstatements due to error or fraud in a segment before considering the effectiveness of 
internal control. If the auditor concludes that a high likelihood of misstatement exists, 
the auditor will conclude that inherent risk is high. Internal controls are ignored in 
setting inherent risk because they are considered separately in the audit risk model as 
control risk. In Table 9-2, inherent risk (A) was assessed high for acquisitions and 
payments and inventory and warehousing and lower for payroll and personnel and 
capital acquisition and repayment. Such assessments are typically based on discussions 
with management, knowledge of the company, and results in audits of previous years. 

Inherent risk is inversely related to planned detection risk and directly related to 
evidence. Inherent risk for inventory and warehousing in Table 9-2 is high, which 
results in a lower planned detection risk and more planned evidence than if inherent 
risk were lower. We'll examine this in greater detail later in the chapter. 

In addition to increasing audit evidence for a higher inherent risk in a given audit 
area, auditors commonly assign more experienced staff to that area and review the 
completed audit tests more thoroughly. For example, if inherent risk for inventory 
obsolescence is extremely high, it makes sense for the CPA firm to assign an experienced 





Describe the audit risk 
model and its components. 
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Control Risk 


Acceptable Audit Risk 


staff person to perform more extensive tests for inventory obsolescence and to more 
carefully review the audit results. 


Control risk measures the auditor’s assessment of whether misstatements exceeding a 
tolerable amount in a segment will be prevented or detected on a timely basis by the 
client’s internal controls. Assume that the auditor concludes that internal controls are 
completely ineffective to prevent or detect misstatements. That is the likely conclusion 
for inventory and warehousing (B) in Table 9-2 (p. 260). The auditor will therefore 
assign a high, perhaps 100 percent, risk factor to control risk. The more effective the 
internal controls, the lower the risk factor that can be assigned to control risk. 

The audit risk model shows the close relationship between inherent and control 
risks. For example, an inherent risk of 40 percent and a control risk of 60 percent affect 
planned detection risk and planned evidence the same as an inherent risk of 60 percent 
and a control risk of 40 percent. In both cases, multiplying IR by CR results in a de- 
nominator in the audit risk model of 24 percent. The combination of inherent risk 
and control risk is referred to in auditing standards as the risk of material misstatement. 
The auditor may make a combined assessment of the risk of material misstatement or 
the auditor can separately assess inherent risk and control risk. (Remember, inherent risk 
is the expectation of misstatements before considering the effect of internal control.) 

As with inherent risk, the relationship between control risk and planned detection 
risk is inverse, whereas the relationship between control risk and substantive evidence 
is direct. If the auditor concludes that internal controls are effective, planned detection 
risk can be increased and evidence therefore decreased. The auditor can increase 
planned detection risk when controls are effective because effective internal controls 
reduce the likelihood of misstatements in the financial statements. 

Before auditors can set control risk less than 100 percent, they must obtain an 
understanding of internal control, evaluate how well it should function based on the 
aa et PDE mennanesy effectiveness. Obtaining an under- 
standin internal control is required for all audits. The latter two are assessment of 
control risk steps that are required only when the auditor assesses control risk below 
maximum. 

Auditors of larger public companies choose to rely extensively on controls because 
they must test the effectiveness of internal control over financial reporting to satisfy 
Sarbanes—Oxley Act requirements. Auditors of other companies and other types of 
entities are also likely to rely on controls that are effective, especially when day-to-day 
transaction processing involves highly automated procedures. When controls are 
likely to be ineffective and inherent risk is high, the use of the audit risk model causes 
the auditor to decrease planned detection risk and thereby increase planned evidence. 
We devote the entire next chapter to understanding internal control, assessing control 
risk, and evaluating their impact on evidence requirements. 


Acceptable audit risk is a measure of how willing the auditor is to accept that the 
financial statements may be materially misstated after the audit is completed and an 
unqualified opinion has been issued. When auditors decide on a lower acceptable audit 
risk, they want to be more certain that the financial statements are not materially mis- 
stated. Zero risk is certainty, and a 100 percent risk is complete uncertainty. Complete 
assurance (zero risk) of the accuracy of the financial statements is not economically 
practical. Moreover, as we discussed in Chapter 6, the auditor cannot guarantee the 
complete absence of material misstatements. 

Often, auditors refer to the term audit assurance (also called overall assurance or 
level of assurance) instead of acceptable audit risk. Audit assurance or any of the equiva- 
lent terms is the complement of acceptable audit risk, that is, one minus acceptable 
audit risk. In other words, acceptable audit risk of 2 percent is the same as audit 
assurance of 98 percent. 
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The concept of acceptable audit risk can be more easily understood by thinking in 
terms of a large number of audits, say, 10,000. What portion of these audits can include 
material misstatements without having an adverse effect on society? Certainly, the 
portion is below 10 percent. It is probably much closer to 1 percent or less. If an auditor 
believes that the appropriate percentage is 1 percent, then acceptable audit risk should 
be set at 1 percent, or perhaps lower, based on the specific circumstances. 

When employing the audit risk model, there is a direct relationship between 
acceptable audit risk and planned detection risk, and an inverse relationship between 
acceptable audit risk and planned evidence. If the auditor decides to reduce acceptable 
audit risk, planned detection risk is thereby reduced, and planned evidence must be 
increased. For a client with lower acceptable audit risk, auditors also often assign more 
experienced staff or review the audit files more extensively. 


There are important distinctions in how the auditor assesses the four risk factors in the 
audit risk model. For acceptable audit risk, the auditor decides the risk the CPA firm is 
willing to take that the financial statements are misstated after the audit is completed, 
based on certain client related factors. An example of a client where the auditor will 
accept very little risk (low acceptable audit risk) is for an initial public offering. We will 
discuss factors affecting acceptable audit risk shortly. Inherent risk and control risk are 
based on auditors’ expectations or predictions of client conditions. An example of a 
high inherent risk is inventory that has not been sold for two years. An example of a 
low control risk is adequate separation of duties between asset custody and accounting. 
The auditor cannot change these client conditions, but can only make a likelihood 
assessment. Inherent risk factors are discussed later in the chapter and control risk is 
covered in Chapter 10. Detection risk is dependent completely on the other three risks. 
It can be determined only after the auditor assesses the other three risks. 


Distinction 
Among Risks in the 
Audit Risk Model 


ASSESSING ACCEPTABLE AUDIT RISK 


Auditors must decide the appropriate acceptable audit risk for an audit, preferably 
during audit planning. First, auditors decide engagement risk and then use engage- 
ment risk to modify acceptable audit risk. 


Engagement risk is the risk that the auditor or audit firm will suffer harm after the audit 
is finished, even though the audit report was correct. Engagement risk is closely related 
to client business risk, which was discussed in Chapter 8. For example, if a client 
declares bankruptcy after an audit is completed, the likelihood of a lawsuit against the 
CPA firm is reasonably high, even if the quality of the audit was high. 

It is worth noting that auditors disagree about whether engagement risk should be 
considered in planning the audit. Opponents of modifying evidence for engagement 
risk contend that auditors do not provide audit opinions for different levels of assurance 
and therefore should not provide more or less assurance because of engagement risk. 
Proponents contend that it is appropriate for auditors to accumulate additional 
evidence, assign more experienced personnel, and review the audit more thoroughly on 
audits where legal exposure is high or other potential adverse actions affecting the 
auditor exist, as long as the assurance level is not decreased below a reasonably high level 
when low engagement risk exists. 


When auditors modify evidence for engagement risk, it is done by control of acceptable 
audit risk. We believe that a reasonably low acceptable audit risk is always desirable, but 
in some circumstances an even lower risk is needed because of engagement risk factors. 
Research points to several factors affecting engagement risk and, therefore, acceptable 
audit risk. Only three of those are discussed here: the degree to which external users 
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Factors Affecting 
Acceptable Audit Risk 


Chapter 9 / MATERIALITY AND RISK 263 


264 


rely on the statements, the likelihood that a client will have financial difficulties after 
the audit report is issued, and the integrity of management. 


The Degree to Which External Users Rely on the Statements When external 
users place heavy reliance on the financial statements, it is appropriate to decrease 
acceptable audit risk. When the statements are heavily relied on, a great social harm 
can result if a significant misstatement remains undetected in the financial statements. 
Auditors can more easily justify the cost of additional evidence when the loss to users 
from material misstatements is substantial. Several factors are good indicators of the 
degree to which statements are relied on by external users: 


* Client’s size. Generally speaking, the larger a client’s operations, the more widely 
the statements are used. The client’s size, measured by total assets or total 
revenues, will have an effect on acceptable audit risk. 

* Distribution of ownership. The statements of publicly held corporations are 
normally relied on by many more users than those of closely held corporations. 
For these companies, the interested parties include the SEC, financial analysts, 
and the general public. 

* Nature and amount of liabilities. When statements include a large amount of 
liabilities, they are more likely to be used extensively by actual and potential 
creditors than when there are few liabilities. 


The Likelihood That a Client Will Have Financial Difficulties After the Audit 
Report Is Issued Ifa client is forced to file for bankruptcy or suffers a significant loss 
after completion of the audit, auditors face a greater chance of being required to 
defend the quality of the audit than if the client were under no financial strain. The 
natural tendency for those who lose money in a bankruptcy, or because of a stock 
price reversal, is to file suit against the auditor. This can result both from the honest 
belief that the auditor failed to conduct an adequate audit and from the users’ desire 
to recAYDaAGothd#? Ds redn ith afrbereemuacy of the audit work. 

In situations in which the auditor believes the chance of financial failure or loss is 
high and a corresponding increase in engagement risk occurs, acceptable audit risk 
should be reduced. If a subsequent challenge occurs, the auditor will be in a better 
position to defend the audit results successfully. Total audit evidence and costs will 
increase, but this is justifiable because of the additional risk of lawsuits that the 
auditor faces. 

It is difficult for an auditor to predict financial failure before it occurs, but certain 
factors are good indicators of its increased probability: 


* Liquidity position. If a client is constantly short of cash and working capital, it 
indicates a future problem in paying bills. The auditor must assess the likelihood 
and significance of a steadily declining liquidity position. 

* Profits (losses) in previous years. When a company has rapidly declining profits 
or increasing losses for several years, the auditor should recognize the future 
solvency problems that the client is likely to encounter. It is also important to 
consider the changing profits relative to the balance remaining in retained 
earnings. 

* Method of financing growth. The more a client relies on debt as a means of 
financing, the greater the risk of financial difficulty if the client’s operating 
success declines. Auditors should evaluate whether fixed assets are being financed 
with short- or long-term loans, as large amounts of required cash outflows during 
a short time can force a company into bankruptcy. 

* Nature of the client’s operations. Certain types of businesses are inherently riskier 
than others. For example, other things being equal, a start-up technology 
company dependent on one product is much more likely to go bankrupt than a 
diversified food manufacturer. 
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AJCPA — Many companies operate in specialized banks and savings institutions, construction 


industries that have unique economic, contractors, healthcare providers, not-for-profit 
INDUSTRY AUDIT regulatory, and accounting issues. In an effort organizations, and insurance entities. The AICPA 
RISK ALERTS _ to provide auditors with current guidance on issues new or revised risk alerts whenever they 
FOR SPECIALIZED assessing inherent risks for clients in specialized conclude that auditors should be aware of 
industries, the AICPA annually issues a series recent economic, regulatory, or technical 
INDUSTRIES of Industry Audit Risk Alerts. Some of the developments for companies in specific 
industries covered by the publications are industries. 





* Competence of management. Competent management is constantly alert for 
potential financial difficulties and modifies its operating methods to minimize 
the effects of short-run problems. Auditors must assess the ability of manage- 
ment as a part of the evaluation of the likelihood of bankruptcy. 


The Auditor’s Evaluation of Management’s Integrity As we discussed in Chapter 
8 as a part of new client investigation and continuing client evaluation, if a client has 
questionable integrity, the auditor is likely to assess a lower acceptable audit risk. 
Companies with low integrity often conduct their business affairs in a manner that 
results in conflicts with their stockholders, regulators, and customers. In turn, these 
conflicts often reflect on the users’ perceived quality of the audit and can result in 
lawsuits and other disagreements. A prior criminal conviction of key management per- 
sonnel is an obvious example of questionable management integrity. Other examples of 
questionable integrity might include frequent disagreements with previous auditors, 
the Internal Revenue Service, and the SEC. Frequent turnover of key financial and 
internal audit personnel and ongoing conflicts with labor unions and employees may 
also indicate integrity problems. 


To assess acceptable audit risk, the RA irP DE; eMNNANGE Becting 


acceptable audit risk. Table 9-3 illustrates the methods used by auditors to assess each 
of the three factors already discussed. After examining Table 9-3, it is easy to observe 
that the assessment of each of the factors is highly subjective, meaning overall assessment 
of acceptable audit risk is also highly subjective. A typical evaluation of acceptable audit 
risk is high, medium, or low, where a low acceptable audit risk assessment means a 
“risky” client requiring more extensive evidence, assignment of more experienced 
personnel, and/or a more extensive review of audit documentation. As the engagement 
progresses, auditors obtain additional information about the client, and acceptable 
audit risk may be modified. 


faery 9-3 Methods Practitioners Use to Assess Acceptable Audit Risk 








Factors Methods Used to Assess Acceptable Audit Risk 
External users’ reliance * Examine the financial statements, including footnotes. 
on financial statements * Read minutes of board of directors meetings to determine future plans. 


¢ Examine Form 10K for a publicly held company. 
* Discuss financing plans with management. 





Likelihood of financial ¢ Analyze the financial statements for financial difficulties using ratios 
difficulties and other analytical procedures. 
* Examine historical and projected cash flow statements for the nature 
of cash inflows and outflows. 





Management integrity Follow the procedures discussed in Chapter 8 for client acceptance 


and continuance. 
——————————————————————————————— = 








Making the Acceptable 
Audit Risk Decision 
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ASSESSING INHERENT RISK 


OBJECTIVE 9-8 





Consider the impact of 
several factors on the 
assessment of inherent risk. 





Factors Affecting 
Inherent Risk 


The inclusion of inherent risk in the audit risk model is one of the most important 
concepts in auditing. It implies that auditors should attempt to predict where 
misstatements are most and least likely in the financial statement segments. This 
information affects the amount of evidence that the auditor needs to accumulate, the 
assignment of staff and the review of audit documentation. 


The auditor must assess the factors that make up the risk and modify audit evidence to 
take them into consideration. The auditor should consider several major factors when 
assessing inherent risk: 


* Nature of the client’s business 

* Results of previous audits 

* Initial versus repeat engagement 

* Related parties 

* Nonroutine transactions 

* Judgment required to correctly record account balances and transactions 
* Makeup of the population 

* Factors related to fraudulent financial reporting 

* Factors related to misappropriation of assets 


Nature of the Client’s Business Inherent risk for certain accounts is affected by the 
nature of the client’s business. For example, an electronics manufacturer faces a greater 
likelihood of obsolete inventory than a steel fabricator does. Inherent risk is most likely 
to vary from business to business for accounts such as inventory, accounts and loans 
receivable, and property, plant, and equipment. The nature of the client’s business 
should have little or pee igherent risk for accounts such as cash, notes, and 
sorte ATOR A) ‘idan WEAMaining knowledge about the client’s 
business and industry and assessing client business risk, as discussed in Chapter 8, is 
useful for assessing this factor. 


Results of Previous Audits Misstatements found in the previous year’s audit have a 
high likelihood of occurring again in the current year’s audit, because many types of 
misstatements are systemic in nature, and organizations are often slow in making 
changes to eliminate them. Therefore, an auditor is negligent if the results of the 
preceding year’s audit are ignored during the development of the current year’s audit 
program. For example, if the auditor found a significant number of misstatements in 
pricing inventory in last year’s audit, the auditor will likely assess inherent risk as high 
in the current year’s audit, and extensive testing will have to be done as a means of 
determining whether the deficiency in the client’s system has been corrected. If, 
however, the auditor found no misstatements for the past several years in conducting 
tests of an audit area, the auditor is justified in reducing inherent risk, provided that 
changes in relevant circumstances have not occurred. 


Initial Versus Repeat Engagement Auditors gain experience and knowledge about 
the likelihood of misstatements after auditing a client for several years. The lack of 
previous years’ audit results causes most auditors to assess a higher inherent risk for 
initial audits than for repeat engagements in which no material misstatements were 
previously found. Most auditors set a high inherent risk in the first year of an audit and 
reduce it in subsequent years as they gain more knowledge about the client. 


Related Parties Transactions between parent and subsidiary companies, and those 
between management and the corporate entity, are examples of related-party trans- 
actions as defined by accounting standards. Because these transactions do not occur 
between two independent parties dealing at “arm’s length,” a greater likelihood exists 
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that they might be misstated, causing an increase in inherent risk. We discussed 
related parties transactions in Chapter 8. 


Nonroutine Transactions Transactions that are unusual for a client are more likely 
to be incorrectly recorded than routine transactions because the client often lacks 
experience recording them. Examples include fire losses, major property acquisitions, 
and restructuring charges resulting from discontinued operations. By knowing the 
client’s business and reviewing minutes of meetings, the auditor can assess the con- 
sequences of nonroutine transactions. 


Judgment Required to Correctly Record Account Balances and Transactions 
Many account balances such as certain investments recorded at fair value, allowances 
for uncollectible accounts receivable, obsolete inventory, liability for warranty payments, 
major repairs versus partial replacement of assets, and bank loan loss reserves require 
estimates and a great deal of management judgment. Because they require considerable 
judgment, the likelihood of misstatements increases, and as a result the auditor should 
increase inherent risk. 


Makeup of the Population Often, individual items making up the total population 
also affect the auditor’s expectation of material misstatement. Most auditors use a higher 
inherent risk for accounts receivable where most accounts are significantly overdue than 
where most accounts are current. Examples of items requiring a higher inherent risk 
include transactions with affiliated companies (see vignette below), amounts due from 
officers, cash disbursements made payable to cash, and accounts receivable outstanding 
for several months. These situations require greater investigation because of a greater 
likelihood of misstatement than occurs with more typical transactions. 


Factors Related to Fraudulent Financial Reporting and Misappropriation 
of Assets In Chapter 6, we discussed the auditor’s responsibilities to assess the risk of 
fraudulent financial reporting and piPDEsceBnhkii@e mncept 
and practice to separate fraud risk factors into acceptable audit risk, inherent risk, or 
control risk. For example, management that lacks integrity and is motivated to 
misstate financial statements is one of the factors in acceptable audit risk, but it may 
also affect control risk. Similarly, several of the other risk factors influencing manage- 
ment characteristics are a part of the control environment, as we'll discuss in Chapter 
10. These include the attitude, actions, and policies that reflect the overall attitudes of 
top management about integrity, ethical values, and commitment to competence. 





charges that were instead recorded as receivables. 


Its holding company, Interpublic Group of 
Companies, Inc. (IPG), negligently failed to 
address the accounting problems at McCann, its 
largest subsidiary, resulting in material misstate- 
ments in its own financial reporting. 

McCann's management failed to reconcile 
intercompany accounts for at least six years 
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GLOBAL __ The Securities and Exchange Commission filed covering the period 1997-2002. At times, 
enforcement actions in 2008 against global McCann’s management intentionally delayed 
ADVERTISING advertising network McCann-Erickson Worldwide reconciling intercompany accounts because they 
FIRM CHARGED and two former executives for their roles in an knew it would result in write-offs that would 
accounting fraud involving intercompany trans- interfere with the company’s efforts to hit profit 
IN ACCOUNTING actions. the SEC complaint alleges that McCann, targets. In fact, every year from 1997 to 2002 the 
FRAUD INVOLVING _ which owns hundreds of regional and local firm's auditor listed pressure to produce results in 
advertising agencies throughout the world, line with budgets as part of its risk assessment, 
INTERCOMPANY fraudulently misstated its financial results by and described the failure to reconcile the inter- 
RECEIVABLES improperly failing to expense intercompany company accounts as a fundamental breakdown 


in internal controls. IPG and McCann agreed to 
settle the SEC’s charges, and McCann agreed to 
pay a $12 million penalty. 


Source: United States District Court Southern District 
of New York, Securities and Exchange Commission v. 
Interpublic Group of Companies, Inc. and McCann- 
Erickson Worldwide, Inc., April 30, 2008. 
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Making the 
Inherent Risk Decision 


Obtain Information to 
Assess Inherent Risk 


To satisfy the requirements of auditing standards, it is more important for the 
auditor to assess the risks and to respond to them than it is to categorize them into a 
risk type. For this reason, many audit firms assess fraud risk separately from the 
assessment of the audit risk model components. 

The risk of fraud can be assessed for the entire audit or by cycle, account, and 
objective. For example, a strong incentive for management to meet unduly aggressive 
earnings expectations may affect the entire audit, while the susceptibility of inventory 
to theft may affect only the inventory account. For both the risk of fraudulent financial 
reporting and the risk of misappropriation of assets, auditors focus on specific areas of 
increased fraud risk and designing audit procedures or changing the overall conduct of 
the audit to respond to those risks. The specific response to an identified risk of fraud 
can include revising assessments of acceptable audit risk, inherent risk, and control 
risk. Assessing fraud risk will be the focus of Chapter 11. 


The auditor must evaluate the information affecting inherent risk and decide on an 
appropriate inherent risk level for each cycle, account, and, many times, for each audit 
objective. Some factors, such as an initial versus repeat engagement, will affect many or 
perhaps all cycles, whereas others, such as nonroutine transactions, will affect only 
specific accounts or audit objectives. Although the profession has not established 
standards or guidelines for setting inherent risk, we believe that auditors are generally 
conservative in making such assessments. Assume that in the audit of inventory the 
auditor notes that (1) a large number of misstatements were found in the previous year 
and (2) inventory turnover has slowed in the current year. Auditors will likely set 
inherent risk at a relatively high level (some will use 100 percent) for each audit 
objective for inventory in this situation. 


Auditors begin their assessments of inherent risk during the planning phase and 
update the assessments throughout the audit. Chapter 8 discussed how auditors gather 
infornApa OaPDFPheEnhancermt during the planning phase. For 
example, to obtain knowledge of the client’s business and industry, auditors may tour 
the client’s plant and offices and identify related parties. This and other information 
about the entity and its environment discussed in Chapter 8 pertain directly to 
assessing inherent risk. Also, several of the items discussed earlier under factors 
affecting inherent risk, such as the results of previous audits and nonroutine trans- 
actions are evaluated separately to help assess inherent risk. As audit tests are 
performed during an audit, the auditor may obtain additional information that affects 
the original assessment. 


RELATIONSHIP OF RISKS TO EVIDENCE AND 


FACTORS INFLUENCING RISKS 





OBJECTIVE 9-9 





Discuss the relationship 
of risks to audit evidence. 





Figure 9-5 summarizes factors that determine each of the risks, the effect of the three 
component risks on the determination of planned detection risk, and the relationship 
of all four risks to planned audit evidence. “D” in the figure indicates a direct 
relationship between a component risk and planned detection risk or planned 
evidence. “I” indicates an inverse relationship. For example, an increase in acceptable 
audit risk results in an increase in planned detection risk (D) and a decrease in planned 
audit evidence (I). Compare Figure 9-5 to Table 9-2 (p. 260) and observe that these two 
illustrations include the same concepts. 

Auditors respond to risk primarily by changing the extent of testing and types of 
audit procedures, including incorporating unpredictability in the audit procedures 
used. In addition to modifying audit evidence, there are two other ways that auditors 
can change the audit to respond to risks: 
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Relationship of Factors Influencing Risks to Risks and Risks to ) 
Planned Evidence 





FACTORS INFLUENCING RISKS AUDIT 
RISKS EVIDENCE 
* Reliance by 
external users Acceptable 
* Likelihood of audit 
















financial failure risk 
¢ Integrity of management 


* Nature of business 

* Results of previous audits 

* Initial versus repeat 
engagement 

* Related parties 

* Nonroutine transactions 

* Judgment required 

* Makeup of population 

* Factors related to 
misstatements arising from 
fraudulent financial 
reporting* 

* Susceptibility of assets to 
misappropriation* 














Planned 
audit 
evidence 


Planned 
detection 
risk 


Inherent 
risk 









D 




















+ Effectiveness of Control 
internal controls 4 i 
* Planned reliance us 
D = Direct relationship; | = Inverse relationship 
*Fraud risk factors. These may also affect acceptable audit risk and control risk. 
b o 





1. The engagement may require more experienced staff. CPA firms should staff all 
engagements with qualified staff. For low acceptable audit risk clients, special 
care is appropriate in staffing, and the importance of professional skepticism 
should be emphasized. Similarly, if an audit area such as inventory has a high 
inherent risk, it is important to assign that area to someone with experience in 
auditing inventory. 

2. The engagement will be reviewed more carefully than usual. CPA firms need to 
ensure adequate review of the audit files that document the auditor’s planning, 
evidence accumulation and conclusions, and other matters in the audit. When 
acceptable audit risk is low, more extensive review is often warranted, including 
a review by personnel who were not assigned to the engagement. If the risk of 
material misstatement (the combination of inherent risk and control risk) is 
high for certain accounts, the reviewer will likely spend more time making sure 
the evidence was appropriate and correctly evaluated. 


Neither control risk nor inherent risk is assessed for the overall audit. Instead, both control 
risk and inherent risk are assessed for each cycle, each account within a cycle, and some- 
times even each audit objective for the account. The assessments are likely to vary on the 
same audit from cycle to cycle, account to account, and objective to objective. For example, 
internal controls may be more effective for inventory-related accounts than for those 
related to fixed assets. Control risk will therefore be lower for inventory than for fixed 
assets. Factors affecting inherent risk, such as susceptibility to misappropriation of assets 
and routineness of the transactions, are also likely to differ from account to account. For 
that reason, it is normal to have inherent risk vary for different accounts in the same audit. 


Audit Risk 
for Segments 
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Relating Tolerable 
Misstatement 
and Risks to 
Balance-Related 
Audit Objectives 


Measurement 
Limitations 


Acceptable audit risk is ordinarily assessed by the auditor during planning and 
held constant for each major cycle and account. Auditors normally use the same 
acceptable audit risk for each segment because the factors affecting acceptable audit 
risk are related to the entire audit, not individual accounts. For example, the extent to 
which external users’ decisions rely upon financial statements is usually related to the 
overall financial statements, not just one or two accounts. 

In some cases, however, a lower acceptable audit risk may be more appropriate for 
one account than for others. If an auditor decided to use a medium acceptable audit 
risk for the audit as a whole, the auditor might decide to reduce acceptable audit risk to 
low for inventory if inventory is used as collateral for a short-term loan. 

Some auditors use the same acceptable audit risk for all segments based on their 
belief that at the end of the audit, financial statement users should have the same level 
of assurance for every segment of the financial statements. Other auditors use a different 
level of assurance for different segments based on their belief that financial statement 
users may be more concerned about certain account balances relative to other accounts 
in a given audit. For illustrations in this and subsequent chapters, we use the same 
acceptable audit risk for all segments in the audit. Note, however, that changing the risk 
for different segments is also acceptable. 

Like control risk and inherent risk, planned detection risk and required audit 
evidence will vary from cycle to cycle, account to account, or objective to objective. 
This conclusion should not be surprising. As the circumstances of each engagement 
differ, the extent and nature of evidence needed will depend on the unique circum- 
stances. For example, inventory might require extensive testing on an engagement 
because of weak internal controls and the auditor’s concerns about obsolescence 
resulting from technological changes in the industry. On the same engagement, accounts 
receivable may require little testing because of effective internal controls, fast collection 
of receivables, excellent relationships between the client and customers, and good audit 
resultsy BPE YPDE Eni anc aezt of inventory, an auditor may assess 
a higher hherent risk of a realizable value misstatement because of the higher potential 
for obsolescence but a low inherent risk of a classification misstatement because there 
is only purchased inventory. 


Although it is common in practice to assess inherent and control risks for each balance- 
related audit objective, it is not common to allocate materiality to those objectives. Auditors 
are able to effectively associate most risks with different objectives, and it is reasonably easy 
to determine the relationship between a risk and one or two objectives. For example, obso- 
lescence in inventory is unlikely to affect any objective other than realizable value. It is more 
difficult to decide how much of the materiality allocated to a given account should in turn 
be allocated to one or two objectives. Therefore, most auditors do not attempt to do so. 


One major limitation in the application of the audit risk model is the difficulty of 
measuring the components of the model. Despite the auditor’s best efforts in planning, 
the assessments of acceptable audit risk, inherent risk, and control risk, and therefore 
planned detection risk, are highly subjective and are only approximations of reality. 
Imagine, for example, attempting to precisely assess inherent risk by determining the 
impact of factors such as the misstatements discovered in prior years’ audits and tech- 
nology changes in the client’s industry. 

To offset this measurement problem, many auditors use broad and subjective 
measurement terms, such as low, medium, and high. As Table 9-4 shows, auditors can 
use this information to decide on the appropriate amount and types of evidence to 
accumulate. For example, in situation 1, the auditor has decided on a high acceptable 
audit risk for an account or objective. The auditor has concluded a low risk of misstate- 
ment in the financial statements exists and that internal controls are effective. Therefore, 
a high planned detection risk is appropriate. As a result, a low level of evidence is 
needed. Situation 3 is at the opposite extreme. If both inherent and control risks are 
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Relationships of Risk to Evidence ) 
Planned Amount of 
Acceptable Inherent Control Detection Evidence 
Situation Audit Risk Risk Risk Risk Required 
1 High Low Low High Low 
2 Low Low Low Medium Medium 
5 Low High High Low High 
4 Medium Medium Medium Medium Medium 
Bj High Low Medium Medium Medium 











high and the auditor wants a low acceptable audit risk, considerable evidence is 
required. The other three situations fall between these two extremes. 

It is equally difficult to measure the amount of evidence implied by a given planned 
detection risk. A typical audit program intended to reduce detection risk to the planned 
level is a combination of several audit procedures, each using a different type of evidence 
which is applied to different audit objectives. Auditors’ measurement methods are too 
imprecise to permit an accurate quantitative measure of the combined evidence. Instead, 
auditors subjectively evaluate whether sufficient appropriate evidence has been planned 
to satisfy a planned detection risk of low, medium, or high. Presumably, measurement 
methods are sufficient to permit an auditor to determine whether more or different 
types of evidence are needed to satisfy a low planned detection risk than for medium or 
high. Considerable professional judgment is needed to decide how much more. 

In applying the audit risk mode Dad. are “Ry t both ce pains 
and under-auditing. Most auditor ©... PDE; a nhane Tinder- 
auditing exposes the CPA firm to legal ee and loss of professional eter 
Because of the concern to avoid under-auditing, auditors typically assess risks con- 
servatively. For example, an auditor might not assess either control risk or inherent risk 
below .5 even when the likelihood of misstatement is low. In these audits, a low risk 
might be .5, medium .8, and high 1.0, if the risks are quantified. 


Auditors develop various types of decision aids to help link judgments affecting audit 
evidence with the appropriate evidence to accumulate. One such worksheet is included 
in Figure 9-6 (p. 272) for the audit of accounts receivable for Hillsburg Hardware Co. 
The eight balance-related audit objectives introduced in Chapter 6 are included in the 
columns at the top of the worksheet. Rows one and two are acceptable audit risk and 
inherent risk. Tolerable misstatement is included at the bottom of the worksheet. The 
engagement in-charge, Fran Moore, made the following decisions in the audit of 
Hillsburg Hardware Co.: 


* Tolerable misstatement. The preliminary judgment about materiality was set at 
$442,000 (approximately 6 percent of earnings from operations of $7,370,000). 
She allocated $265,000 to the audit of accounts receivable (see page 255). 

* Acceptable audit risk. Fran assessed acceptable audit risk as medium because 
the company is publicly traded, but is in good financial condition, and has high 
management integrity. Although Hillsburg is a publicly traded company, its 
stock is not widely held or extensively followed by financial analysts. 

* Inherent risk. Fran assessed inherent risk as medium for existence and cutoff 
because of concerns over revenue recognition. Fran also assessed inherent risk 
as medium for realizable value. In past years, audit adjustments to the allowance 
for uncollectible accounts were made because it was found to be understated. 
Inherent risk was assessed as low for all other objectives. 


Tests of 

Details of Balances 
Evidence-Planning 
Worksheet 
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Evidence-Planning Worksheet to Decide Tests of Details of Balances for Hillsburg 


Hardware Co. — Accounts Receivable 





y 


Classification 
Realizable value 


= 
at 

O) 
2 
‘s 
= 

o 
a 


Acceptable audit risk Medium Medium 


Medium L Low 


° 


| | | dele ae 


Control risk—Sales 


Control risk— 
Cash receipts 


Control risk— 
Additional controls 


Substantive tests of 
transactions—Sales 


aie 


Substantive tests of 
transactions— 

Cash receipts 
Analytical 
procedures 


Planned detection 
risk for tests of 
details of balances 


Planned audit 
evidence for tests of 
details of balances 





Tolerable misstatement $265,000 











Planned detection risk would be approximately the same for each balance-related 
audit objective in the audit of accounts receivable for Hillsburg Hardware Co. if the only 
three factors the auditor needed to consider were acceptable audit risk, inherent risk, and 
tolerable misstatement. The evidence-planning worksheet shows that other factors must 
also be considered before making the final evidence decisions. (These are studied in subse- 
quent chapters and will be integrated into the evidence-planning worksheet at that time.) 





Relationship of The concepts of materiality and risk in auditing are closely related and inseparable. Risk 
Risk and Materiality is a measure of uncertainty, whereas materiality is a measure of magnitude or size. Taken 
to Audit Evidence together, they measure the uncertainty of amounts of a given magnitude. For example, 
the statement that the auditor plans to accumulate evidence such that there is only a 5 

OBJECTIVE 9-10 percent risk (acceptable audit risk) of failing to uncover misstatements exceeding 
Asan len aaitalivacel tolerable misstatement of $265,000 (materiality) is a precise and meaningful statement. 
risk are related and integrated If the statement eliminates either the risk or materiality portion, it is meaningless. A 5 
into the audit process. percent risk without a specific materiality measure could imply that a $100 or $1 million 
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Relationship of Tolerable Misstatement and Risks to Planned ) 
Evidence 








TOLERABLE MISSTATEMENT PLANNED 
AND RISKS AUDIT 
EVIDENCE 
Acceptable 
audit risk 





















Inherent Planned Planned 
risk detection risk audit evidence 





Control 
risk 





Tolerable 
misstatement 





D = Direct relationship; | = Inverse relationship 











misstatement is acceptable. A $265, 000. ica without a specific risk could 
imply that a 1 percent or 80 percent 

The relationships among tolerate ag on <PDF En our ris ape Sanne audit 
evidence are shown in Figure 9-7. This figure expands Figure 9-5 (p. 269) by including 
tolerable misstatement. Observe that tolerable misstatement does not affect any of the 
four risks, and the risks have no effect on tolerable misstatement, but together they 
determine planned evidence. Stated differently, tolerable misstatement is not a part of 
the audit risk model, but the combination of tolerable misstatement and the audit risk 
model factors determine planned audit evidence. 


The audit risk model is primarily a planning model and is, therefore, of limited use in 
evaluating results. No difficulties occur when the auditor accumulates planned evidence 
and concludes that the assessment of each of the risks was reasonable or better than 
originally thought. The auditor will conclude that sufficient appropriate evidence has 
been collected for that account or cycle. 

However, special care must be exercised when the auditor decides, on the basis of 
accumulated evidence, that the original assessment of control risk or inherent risk was 
understated or acceptable audit risk was overstated. In such a circumstance, the auditor 
should follow a two-step approach. 


1. The auditor must revise the original assessment of the appropriate risk. It 
violates due care to leave the original assessment unchanged if the auditor 
knows it is inappropriate. 

2. The auditor should consider the effect of the revision on evidence requirements, 
without use of the audit risk model. If a revised risk is used in the audit risk model 
to determine a revised planned detection risk, there is a danger of not increasing 
the evidence sufficiently. Instead, the auditor should carefully evaluate the 
implications of the revision of the risk and modify evidence appropriately, 
outside of the audit risk model. 


Revising Risks 
and Evidence 
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For example, assume that the auditor confirms accounts receivable and, based on the 
misstatements found, concludes that the original control risk assessment as low was 
inappropriate. The auditor should revise the estimate of control risk upward and care- 
fully consider the effect of the revision on the additional evidence needed in the audit of 
receivables and the sales and collection cycle. Based on the results of the additional tests 
performed, the auditor should carefully evaluate whether sufficient appropriate evidence 
has been gathered in the circumstances to reduce audit risk to an acceptable level. 


SUMMARY 


Materiality and risk are fundamental concepts important to audit planning. Both concepts 
require significant auditor judgment and they directly impact the auditor’s planned audit 
evidence. Materiality is important because the auditor provides assurance to financial 
statement users that the financial statements are free of material misstatements. Thus, the 
auditor must develop a preliminary judgment about materiality to be able to design an 
audit plan that will provide a basis for that assurance. Furthermore, because auditors accept 
some level of uncertainty in performing the audit function, the consideration of risk as 
defined by the audit risk model is necessary for the auditor to effectively address those risks 
in the most appropriate manner. The auditor’s understanding of the entity and its environ- 
ment, including its internal control, provide a basis for the auditor’s assessment of the risk 
of material misstatement. Using the audit risk model and tolerable misstatement for each 
account, the auditor determines the audit evidence needed to achieve an acceptable level of 
audit risk for the financial statements as a whole. 


ESSENTIAL TERMS 


AccepAP Ages. PDE .knhancexr.: projection estimate of misstate- 


willing the auditor is to accept that the 
financial statements may be materially 
misstated after the audit is completed and 
an unqualified audit opinion has been 
issued; see also audit assurance 


Allocation of the preliminary judgment 
about materiality—the process of assign- 
ing to each balance sheet account the mis- 
statement amount considered to be material 
for that account based on the auditor’s 
preliminary judgment 


Audit assurance—a complement to 
acceptable audit risk; an acceptable audit 
risk of 2 percent is the same as audit 
assurance of 98 percent; also called overall 
assurance and level of assurance 


Audit risk model—a formal model re- 
flecting the relationships between accept- 
able audit risk (AAR), inherent risk (JR), 
control risk (CR), and planned detection 
risk (PDR); PDR = AAR/(IR X CR) 
Control risk—a measure of the auditor’s 
assessment of the likelihood that mis- 
statements exceeding a tolerable amount 
in a segment will not be prevented or 
detected by the client’s internal controls 
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ment—estimate of likely misstatement 
in a population based on a sample, ex- 
cluding sampling risk, and calculated as 
net misstatements in the sample, divided 
by the total sampled, multiplied by the 
total recorded population value 


Engagement risk—the risk that the auditor 
or audit firm will suffer harm because of 
a client relationship, even though the audit 
report rendered for the client was correct 


Inherent risk—a measure of the auditor’s 
assessment of the likelihood that there 
are material misstatements in a segment 
before considering the effectiveness of 
internal control 


Known misstatements—specific misstate- 
ments in a class of transactions or account 
balance identified during the audit 


Likely misstatements—misstatements that 
arise from either differences between 
management’s and the auditor’s judgment 
about estimates of account balances or 
from projections of misstatements based 
on the auditor’s test of a sample from a 
population 


Materiality—the magnitude of an omis- 
sion or misstatement of accounting infor- 
mation that, in the light of surrounding 
circumstances, makes it probable that the 
judgment of a reasonable person relying 
on the information would have been 
changed or influenced by the omission or 
misstatement 


Planned detection risk—a measure of the 
risk that audit evidence for a segment will 
fail to detect misstatements exceeding a 
tolerable amount, should such misstate- 
ments exist; PDR = AAR/ (IR x CR) 


Preliminary judgment about materiality— 
the maximum amount by which the 
auditor believes that the statements 
could be misstated and still not affect the 
decisions of reasonable users; used in 
audit planning 


Revised judgment about materiality— 
a change in the auditor’s preliminary 
judgment made when the auditor deter- 
mines that the preliminary judgment was 
too large or too small 


Risk—the acceptance by auditors that 
there is some level of uncertainty in per- 
forming the audit function 


Risk of material misstatement—the com- 
bination of inherent risk and control risk 
(IR x CR) 


Sampling error—results because the 
auditor has sampled only a portion of the 
population 


Tolerable misstatement—the materiality 
allocated to any given account balance; 
used in audit planning 


REVIEW QUESTIONS 


9-1 (Objective 9-1) Chapter 8 introduced the eight parts of the planning phase of an audit. 
Which part is the evaluation of materiality and risk? 


9-2 (Objective 9-1) Define the meaning of the term materiality as it is used in accounting 
and auditing. What is the asemuoeal between materiality and the phrase obtain reasonable 
assurance used in the auditor’s report?. 


9-3 (Objectives 9-1, 9-2) Explain wPe Ry DEE nhance 7 6ly in 


practice. 


9-4 (Objective 9-2) What is meant by setting a preliminary judgment about materiality? 
Identify the most important factors affecting the preliminary judgment. 

9-5 (Objective 9-2) What is meant by using bases for setting a preliminary judgment about 
materiality? How will those bases differ for the audit of a manufacturing company and a 
government unit such as a school district? 

9-6 (Objective 9-2) Assume that Rosanne Madden, CPA, is using 5% of net income before 
taxes, current assets, or current liabilities as her major guidelines for evaluating materiality. 
What qualitative factors should she also consider in deciding whether misstatements may 
be material? 

9-7 (Objectives 9-2, 9-3) Distinguish between the terms tolerable misstatement and 
preliminary judgment about materiality. How are they related to each other? 


9-8 (Objective 9-3) Assume a company with the following balance sheet accounts: 








Account Amount Account Amount 
Cash $10,000 Long-term loans $30,000 
Fixed assets 60,000 M. Johnson, proprietor 40,000 

$70,000 $70,000 








You are concerned only about overstatements of owner’s equity. Set tolerable misstatement 
for the three relevant accounts such that the preliminary judgment about materiality does 
not exceed $5,000. Justify your answer. 

9-9 (Objective 9-4) Explain what is meant by making an estimate of the total misstatement 
in a segment and in the overall financial statements. Why is it important to make these 
estimates? What is done with them? 
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9-10 (Objective 9-2) How will the conduct of an audit of a medium-sized company be 
affected by the company’s being a small part of a large conglomerate as compared with it 
being a separate entity? 

9-11 (Objective 9-6) Define the audit risk model and explain each term in the model. Also 
describe which two factors of the model when combined reflect the risk of material 
misstatement. 

9-12 (Objective 9-6) What is meant by planned detection risk? What is the effect on the 
amount of evidence the auditor must accumulate when planned detection risk is increased 
from medium to high? 

9-13 (Objective 9-6) Explain the causes of an increased or decreased planned detection risk. 


9-14 (Objectives 9-6, 9-8) Define what is meant by inherent risk. Identify four factors that 
make for high inherent risk in audits. 


9-15 (Objective 9-8) Explain why inherent risk is set for segments rather than for the 
overall audit. What is the effect on the amount of evidence the auditor must accumulate 
when inherent risk is increased from medium to high for a segment? Compare your answer 
with the one for question 9-12. 

9-16 (Objective 9-8) Explain the effect of extensive misstatements found in the prior year’s 
audit on inherent risk, planned detection risk, and planned audit evidence. 

9-17 (Objectives 9-6, 9-7) Explain what is meant by the term acceptable audit risk. What is 
its relevance to evidence accumulation? 

9-18 (Objective 9-7) Explain the relationship between acceptable audit risk and the legal 
liability of auditors. 

9-19 (Objective 9-7) State the three categories of factors that affect acceptable audit risk and 
list the factors that the auditor can use to indicate the degree to which each category exists. 
9-20 (Objective 9-9) Auditors have not been successful in measuring the components of 
the audit risk model. How is it Pah, to use the model in a meaningful way without a 
precis AP &GOsuhRhDE ris&Nhancer 

9-21 (Objective 9-10) Explain the circumstances when the auditor should revise the 
components of the audit risk model and the effect of the revisions on planned detection 
risk and planned evidence. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


9-22 (Objectives 9-1, 9-2) The following questions deal with materiality. Choose the best 
response. 


a. Which one of the following statements is correct concerning the concept of materiality? 
(1) Materiality is determined by reference to guidelines established by the AICPA. 
(2) Materiality depends only on the dollar amount of an item relative to other items 
in the financial statements. 
(3) Materiality depends on the nature of an item rather than the dollar amount. 
(4) Materiality is a matter of professional judgment. 


b. Which of the following is not correct about materiality? 

(1) The concept of materiality recognizes that some matters are important for fair 
presentation of financial statements in conformity with accounting standards, 
whereas other matters are not important. 

(2) An auditor considers materiality for planning purposes in terms of the largest 
aggregate level of misstatements that could be considered material to any one of 
the financial statements. 

(3) Materiality judgments are made in light of surrounding circumstances and neces- 
sarily involve both quantitative and qualitative judgments. 

(4) An auditor’s consideration of materiality is influenced by the auditor’s perception 
of the needs of a reasonable person who will rely on the financial statements. 
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c. In considering materiality for planning purposes, an auditor believes that misstate- 
ments aggregating $10,000 will have a material effect on an entity’s income statement, 
but that misstatements will have to aggregate $20,000 to materially affect the balance 
sheet. Ordinarily, it is appropriate to design audit procedures that are expected to detect 
misstatements that aggregate 
(1) $10,000 
(2) $15,000 
(3) $20,000 
(4) $30,000 


9-23 (Objectives 9-6, 9-8) The following questions concern audit risk. Choose the best 
response. 


a. Some account balances, such as those for pensions and leases, are the result of 
complex calculations. The susceptibility to material misstatements in these types of 
accounts is defined as 
(1) audit risk. 

(2) detection risk. 
(3) sampling risk. 
(4) inherent risk. 

b. Inherent risk and control risk differ from planned detection risk in that they 
(1) arise from the misapplication of auditing procedures. 

(2) may be assessed in either quantitative or nonquantitative terms. 
(3) exist independently of the financial statement audit. 
(4) can be changed at the auditor’s discretion. 


c. Which of the following best describes the element of inherent risk that underlies the 
application of auditing standards? 
(1) Cash audit work may have to be carried out in a more conclusive manner than 
inventory audit work. 
Intercompany transactions APayo?! PPE: (PAhsne exams 
length transactions with outside parffes. 
(3) Inventories may require more attention by the auditor on an engagement for a 
merchandising enterprise than on an engagement for a public utility. 
The scope of the audit need not be expanded if misstatements that arouse suspicion 
of fraud are of relatively insignificant amounts. 


(2 


— 


(4 


ae 


9-24 (Objective 9-9) The following questions deal with audit risk and evidence. Choose the 
best response. 


a. As the acceptable level of detection risk decreases, an auditor may 
(1) reduce substantive testing by relying on the assessments of inherent risk and control 
risk. 
(2) postpone the planned timing of substantive tests from interim dates to the year-end. 
(3) eliminate the assessed level of inherent risk from consideration as a planning factor. 
(4) lower the assessed level of control risk from the maximum level to below the maximum. 


b. As lower acceptable levels of both audit risk and materiality are established, the auditor 
should plan more work on individual accounts to 
(1) find smaller misstatements. 
(2) find larger misstatements. 
(3) increase the tolerable misstatement in the accounts. 
(4) increase materiality in the accounts. 


c. Based on evidence gathered and evaluated, an auditor decides to increase the assessed 
level of control risk from that originally planned. To achieve an overall audit risk level 
that is substantially the same as the planned audit risk level, the auditor could 
(1) decrease detection risk. 

(2) increase materiality levels. 
(3) decrease substantive testing. 
(4) increase inherent risk. 
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DISCUSSION QUESTIONS AND PROBLEMS 


9-25 (Objectives 9-2, 9-3, 9-4) You are evaluating audit results for current assets in the 
audit of Quicky Plumbing Co. You set the preliminary judgment about materiality for 
current assets at $15,000 for overstatements and at $22,500 for understatements. The 
preliminary and actual estimates are shown next. 



































Tolerable Misstatement Estimate of Total Misstatement 
Over- Under- Over- Under- 
Account statements statements statements statements 
Cash $ 2,000 $ 3,000 $ 1,000 $ 0 
Accounts receivable 10,000 15,000 9,000 8,000 
Inventory 15,000 22,000 14,000 5,000 
Prepaid expenses 3,000 5,000 2,000 1,000 
Total $30,000 $45,000 $26,000 $14,000 
Required a. Justify a lower preliminary judgment about materiality for overstatements than under- 


statements in this situation. 


b. Explain why the totals of the tolerable misstatements exceed the preliminary judg- 
ments about materiality for both understatements and overstatements. 


c. Explain how it is possible that three of the estimates of total misstatement have both 
an overstatement and an understatement. 


d. Assume that you are not concerned whether the estimate of misstatement exceeds 
tolerable misstatement for individual accounts if the total estimate is less than the 
preliminary judgment. 

(1) Given the audit results, should you be more concerned about the existence of 
material overstatements or understatements at this point in the audit of Quicky 


ierg C 
Apags PDF Enhancer 


account or accounts will you be most concerned about in (1)? Explain. 


e. Explain why the estimate of total overstatement amount for each account is less than 
tolerable misstatement, but that the total overstatement estimate exceeds the 
preliminary judgment of materiality. 


9-26 (Objectives 9-2, 9-3, 9-4) You are evaluating audit results for assets in the audit of 
Roberts Manufacturing. You set the preliminary judgment about materiality at $50,000. 
The account balances, tolerable misstatement, and estimated overstatements in the accounts 
are shown next. 




















Account Tolerable Estimate of Total 
Account Balance Misstatement Overstatements 
Cash $ 50,000 $ 5,000 $ 1,000 
Accounts receivable 1,200,000 30,000 20,000 
Inventory 2,500,000 50,000 ? 
Other assets 250,000 15,000 12,000 
Total $4,000,000 $100,000 ? 
Required a. Assume you tested inventory amounts totaling $1,000,000 and found $10,000 in 


overstatements. Ignoring sampling risk, what is your estimate of the total misstate- 
ment in inventory? 


b. Based on the audit of the assets accounts and ignoring other accounts, are the overall 
financial statements acceptable? Explain. 


c. What do you believe the auditor should do in the circumstances? 


9-27 (Objectives 9-2, 9-3, 9-4) On pages 279-280 are statements of earnings and financial 
position for Wexler Industries. 
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Consolidated Statements of Earnings 
Wexler Industries (in Thousands) 


For the 53 Weeks Ended 


For the 52 Weeks Ended 





March 30, 2011 March 31, 2010 April 1, 2009 
Revenue 
Net sales $8,351,149 $6,601,255 $5,959,587 
Other income 59,675 43,186 52,418 
8,410,824 6,644,441 6,012,005 
Costs and expenses 
Cost of sales 5,197,375 4,005,548 3,675,369 
Marketing, general, and 
administrative expenses 2,590,080 2,119,590 1,828,169 
Provision for loss on 
restructured operations 64,100 - - 
Interest expense 141,662 46,737 38,546 
7,993,217 6,171,875 5,542,084 
Earnings from continuing 
operations before income 
taxes 417,607 472,566 469,921 
Income taxes (196,700) (217,200) (214,100) 
Earnings from continuing 
operations 220,907 255,366 255,821 
Provision for loss on 
discontinued operations, 
net of income taxes (20,700) - - 
Net earnings $ 200,207 $ 255,366 $ 255,821 





_$ 200207 _$_ 255,566 © _$_ 255,821 


Consolidated Statements of Financial Position 
Wexler Industries (in Thousands) 


Assets 


Current assets 
Cash 
Temporary investments, including time deposits 
of $65,361 in 2011 and $181,589 in 2010 
(at cost, which approximates market) 
Receivables, less allowances of $16,808 in 2011 
and $17,616 in 2010 
Inventories 
Finished product 
Raw materials and supplies 


Deferred income tax benefits 
Prepaid expenses 


Current assets 

Land, buildings, and equipment, at cost, 
less accumulated depreciation 

Investments in affiliated companies and 
sundry assets 

Goodwill and other intangible assets 


Total 


March 30, 2011 


$ 39,683 


123,421 
899,752 


680,974 
443,175 


1,124,149 
9,633 
57,468 


2,254,106 
1,393,902 


112,938 
99,791 


$3,860,737 


March 31, 2010 


$ 37,566 


271,639 
759,001 


550,407 
353,795 


904,202 


10,468 
35,911 


2,018,787 
1,004,455 


83,455 
23,145 


$3,129,842 
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Liabilities and Stockholders’ Equity 


March 30, 2011 


March 31, 2010 





Current liabilities 


Notes payable $ 280,238 $ 113,411 
Current portion of long-term debt 64,594 12,336 
Accounts and drafts payable 359,511 380,395 
Accrued salaries, wages, and vacations 112,200 63,557 
Accrued income taxes 76,479 89,151 
Other accrued liabilities 321,871 269,672 
Current liabilities 1,214,893 928,522 
Long-term debt 730,987 390,687 
Other noncurrent liabilities 146,687 80,586 
Deferred income taxes 142,344 119,715 
Stockholders’ equity 
Common stock issued, 51,017,755 shares 

in 2011 and 50,992,410 in 2010 51,018 50,992 
Additional paid-in capital 149,177 148,584 
Cumulative foreign currency translation adjustment (76,572) - 
Retained earnings 1,554,170 1,462,723 
Common stock held in treasury, at cost, 1,566,598 shares (51,967) (51,967) 
Stockholders’ equity 1,625,826 1,610,332 

Total $3,860,737 $3,129,842 

Required a. Use professional judgment in deciding on the preliminary judgment about materiality 


for earnings, current assets, current liabilities, and total assets. Your conclusions 
should be stated in terms of percents and dollars. 


b. Assume that you define materiality for this audit as a combined misstatement of 
earnings from continuing operations before income taxes of 5%. Also assume that you 
believe there . an equal likelihood of a ar of every account in the financial 


‘Apa goe sst Anas sult in an overstatement of earnings. 
te rffateriality to these wing statements as you consider appropriate. 


c. As discussed in part b, net earnings from continuing operations before income taxes 
was used as a base for calculating materiality for the Wexler Industries audit. Discuss 
why most auditors use before-tax net earnings instead of after-tax net earnings when 
calculating materiality based on the income statement. 


d. Now, assume that you have decided to allocate 75% of your preliminary judgment to 
accounts receivable, inventories, and accounts payable because you believe all other 
accounts have a low inherent and control risk. How does this affect evidence accumu- 
lation on the audit? 

e. Assume that you complete the audit and conclude that your preliminary judgment 
about materiality for current assets, current liabilities, and total assets has been met. 


The actual estimate of misstatements in earnings exceeds your preliminary judgment. 
What should you do? 


9-28 (Objectives 9-2, 9-3, 9-4, 9-6, 9-7, 9-8, 9-10) The following are concepts discussed in 
this chapter: 


_ 


. Preliminary judgment about materiality 
. Control risk 

. Risk of fraud 

. Estimated total misstatement in a segment 
. Planned detection risk 

. Estimate of the combined misstatement 
. Acceptable audit risk 

. Tolerable misstatement 

. Inherent risk 

. Risk of material misstatement 

. Known misstatement 


— 
Re OOOND US W bY 


a 
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a. Identify which items are audit planning decisions requiring professional judgment. Required 


b. Identify which items are audit conclusions resulting from application of audit pro- 
cedures and requiring professional judgment. 


c. Under what circumstances is it acceptable to change those items in part a after the 
audit is started? Which items can be changed after the audit is 95% completed? 


9-29 (Objectives 9-6, 9-7) Describe what is meant by acceptable audit risk. Explain why 
each of the following statements is true: 


a. A CPA firm should attempt to achieve the same audit risk for all audit clients when 
circumstances are similar. 


b. A CPA firm should decrease acceptable audit risk for audit clients when external users 
rely heavily on the statements. 


c. A CPA firm should decrease acceptable audit risk for audit clients when there is a 
reasonably high likelihood of a client filing bankruptcy. 


d. Different CPA firms should attempt to achieve reasonably similar audit risks for 
clients with similar circumstances. 


9-30 (Objective 9-7) Bohrer, CPA is considering the following factors in assessing audit risk 

at the financial statement level in planning the audit of Waste Remediation Services (WRS), 

Inc.’s financial statements for the year ended December 31, 2011. WRS is a privately-held 

company that contracts with municipal governments to close landfills. Audit risk at the 

financial statement level is influenced by the risk of material misstatements, which may be 
indicated by factors related to the entity, management, and the industry environment. 
1. This was the first year WRS operated at a profit since 2006 because the munici- 
palities received increased federal and state funding for environmental purposes. 
2. WRS’s Board of Directors is controlled by Tucker, the majority shareholder, who also 
acts as the chief executive officer. 
3. The internal auditor reports to Fugyeq rap Dp Rtordddearicie reker. 
. The accounting department has eXperieficed a high rate of turnover of key personnel. 
5. WRS’s bank has a loan officer who meets regularly with WRS’s CEO and controller 
to monitor WRS’s financial performance. 
6. WRS’s employees are paid bi-weekly. 
7. Bohrer has audited WRS for five years. 
8. During 2011, WRS changed its method of preparing its financial statements from 
the cash basis to generally accepted accounting principles. 
9. During 2011, WRS sold one half of its controlling interest in Sanitation Equipment 
Leasing (SEL) Co. WRS retained a significant interest in SEL. 

10. During 2011, litigation filed against WRS in 2001 alleging that WRS discharged pol- 
lutants into state waterways was dropped by the state. Loss contingency disclosures 
that WRS included in prior years’ financial statements are being removed for the 
2011 financial statements. 

11. During December 2011, WRS signed a contract to lease disposal equipment from an 
entity owned by Tucker’s parents. This related party transaction is not disclosed in 
WRS’s notes to its 2011 financial statements. 

12. During December 2011, WRS increased its casualty insurance coverage on several 
pieces of sophisticated machinery from historical cost to replacement cost. 

13. WRS recorded a substantial increase in revenue in the fourth quarter of 2011. 
Inquiries indicated that WRS initiated a new policy and guaranteed several muni- 
cipalities that it would refund state and federal funding paid to WRS on behalf of the 
municipality if it failed a federal or state site inspection in 2012. 

14. An initial public offering of WRS stock is planned in 2012. 


For each of the 14 factors listed above, indicate whether the item would likely increase audit Required 
risk, decrease audit risk, or have no effect on audit risk.* 


eS 


*AICPA adapted. 
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Required 


Required 


9-31 
used 


(Objective 9-6) Following are six situations that involve the audit risk model as it is 
for planning audit evidence requirements. Numbers are used only to help you under- 


stand the relationships among factors in the risk model. 


oT 2 





Situation 
Risk 1 2 3 4 5 6 
Acceptable audit risk 5% 5% 5% 5% 1% 1% 
Inherent risk 100% 40% 60% 20% 100% 40% 
Control risk 100% 60% 40% 30% 100% 60% 


Planned detection risk - - = = = = 





. Explain what each of the four risks means. 
. Calculate planned detection risk for each situation. 


c. Which situation requires the greatest amount of evidence and which requires the 


9-32 


least? 


. Using your knowledge of the relationships among the foregoing factors, state the effect 


on planned detection risk (increase or decrease) of changing each of the following factors 
while the other two remain constant: 

(1) An increase in acceptable audit risk 

(2) An increase in control risk 

(3) A decrease in inherent risk 

(4) An increase in control risk and a decrease in inherent risk of the same amount 


(Objectives 9-6, 9-9) Following are six situations that involve the audit risk model as it 


is used for planning audit evidence requirements in the audit of inventory. 


9-33 
1 


2. 


ies) 








Situation 
Risk 1 2 3 4 5 6 
Acceptable audit risk High High Low Low High Medium 
napago PDF Enhancers Low Medium Medium 
Control risk Low Low High High Medium Medium 


Planned detection risk — - = = = _ 
Planned evidence — - = = = = 





. Explain what low, medium, and high mean for each of the four risks and planned 


evidence. 


. Fill in the blanks for planned detection risk and planned evidence using the terms low, 


medium, or high. 


. Using your knowledge of the relationships among the foregoing factors, state the 


effect on planned evidence (increase or decrease) of changing each of the following five 
factors, while the other three remain constant: 

(1) A decrease in acceptable audit risk 

(2) A decrease in control risk 

(3) A decrease in planned detection risk 

(4) A decrease in inherent risk 

(5) A decrease in inherent risk and an increase in control risk of the same amount 


(Objectives 9-6) Below are ten independent risk factors: 

. The client lacks sufficient working capital to continue operations. 

The client fails to detect employee theft of inventory from the warehouse because 

there are no restrictions on warehouse access and the client does not reconcile 

inventory on hand to recorded amounts on a timely basis. 

. The company is publicly traded. 

. The auditor has identified numerous material misstatements during prior year audit 
engagements. 

. The assigned staff on the audit engagement lack the necessary skills to identify actual 
errors in an account balance when examining audit evidence accumulated. 

. The client is one of the industry’s largest based on its size and market share. 
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8. 


9. 


10 


. The client engages in several material transactions with entities owned by family 
members of several of the client’s senior executives. 

The allowance for doubtful accounts is based on significant assumptions made by 
management. 

The audit plan omits several necessary audit procedures. 

. The client fails to reconcile bank accounts to recorded cash balances. 


Identify which of the following audit risk model components relates most directly to each 
of the ten risk factors: 


* Acceptable audit risk 

¢ Inherent risk 

* Control risk 

¢ Planned detection risk 


9-34 


(Objectives 9-6, 9-10) Using the audit risk model, state the effect on control risk, 


inherent risk, acceptable audit risk, and planned evidence for each of the following 
independent events. In each of the events a to j, circle one letter for each of the three 
independent variables and planned evidence: I = increase, D = decrease, N = no effect, and 
C = cannot determine from the information provided. 


a. 


lar) 


The client’s management materially decreased long-term contractual debt: 


Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 
. The company changed from a privately held company to a publicly held company: 
Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 


. The auditor decided to set assessed control risk at the maximum (it was previously 


assessed below the maximum): 


Control risk IDNC Apagd“P Fr &rthanger 


Inherent risk IDNC ed evidence 


. The account balance increased materially from the preceding year without apparent 
reason: 
Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 


. You determined through the planning phase that working capital, debt-to-equity 


ratio, and other indicators of financial condition improved during the past year: 


Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 
. This is the second year of the engagement, and there were few misstatements found in 


the previous year’s audit. The auditor also decided to increase reliance on internal 
control: 


Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 
. The client began selling products online to customers through its Web page during the 


year under audit. The online customer ordering process is not integrated with the 
company’s accounting system. Client sales staff print out customer order information 
and enter that data into the sales accounting system: 


Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 
. There has been a change in several key management personnel. You believe that 


management is somewhat lacking in personal integrity compared with the previous 
management. You believe it is still appropriate to do the audit: 
Control risk IDNC Acceptable audit risk 


IDNC 
Inherent risk IDNC Planned evidence IDNC 


Required 
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i. In auditing inventory, you obtain an understanding of internal control and perform 
tests of controls. You find it significantly improved compared with that of the 
preceding year. You also observe that because of technology changes in the industry, 
the client’s inventory may be somewhat obsolete: 

Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 


j. In discussions with management, you conclude that management is planning to sell 
the business in the next few months. Because of the planned changes, several key 
accounting personnel quit several months ago for alternative employment. You also 
observe that the gross margin percent has significantly increased compared with that 


of the preceding ae 
Control risk IDNC Acceptable audit risk IDNC 
Inherent risk IDNC Planned evidence IDNC 


CASES 


Required 


9-35 (Objectives 9-6, 9-7, 9-8) Whitehead, CPA, is planning the audit of a newly obtained 
client, Henderson Energy Corporation, for the year ended December 31, 2011. Henderson 
Energy is regulated by the state utility commission and because it is a publicly traded 
company the audited financial statements must be filed with the Securities and Exchange 
Commission (SEC). 

Henderson Energy is considerably more profitable than many of its competitors, 
largely due to its extensive investment in information technologies used in its energy 
distribution and other key business processes. Recent growth into rural markets, 
however, has placed some strain on 2011 operations. Additionally, Henderson Energy 
expanded its palep pe into speculative markets and is also making greater use of 
derivative and IP Initigate some of its investment risks. Because of 
the VApadg the, De Rane BEC Risted with these activities, Henderson 
Energy added several highly ee accountants within its financial reporting team. 
Internal audit, which has direct reporting responsibility to the audit committee, is also 
actively involved in reviewing key accounting assumptions and estimates on a quarterly 
basis. 

Whitehead’s discussions with the predecessor auditor revealed that the client has 
experienced some difficulty in correctly tracking existing property, plant, and equipment 
items. This largely involves equipment located at its multiple energy production facilities. 
During the recent year, Henderson acquired a regional electric company, which expanded 
the number of energy production facilities. 

Whitehead plans to staff the audit engagement with several members of the firm who 
have experience in auditing energy and public companies. The extent of partner review of 
key accounts will be extensive. 


Based on the above information, identify factors that affect the risk of material mis- 
statement in the December 31, 2011 financial statements of Henderson Energy. Indicate 
whether the factor increases or decreases the risk of material misstatement. Also, identify 
which audit risk model component is affected by the factor. Use the format below: 





Effect on the Risk of Audit Risk Model 
Factor Material Misstatement Component 
Henderson is a new client Increases Inherent risk 


9-36 (Objectives 9-2, 9-3, 9-6, 9-7, 9-8) Pamela Albright is the manager of the audit of 
Stanton Enterprises, a public company that manufactures formed steel subassemblies for 
other manufacturers. Albright is planning the 2011 audit and is considering an appropriate 
amount for planning materiality, what tolerable misstatement should be allocated to 
the financial statement accounts, and the appropriate inherent risks. Summary financial 
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FIGURE 9-8 Stanton Enterprises Summary Financial Statements 
Balance Sheet 
Preliminary Audited 
12-31-11 12-31-10 
Cash $ 243,689 $ 133,981 
Trade accounts receivable 3,544,009 2,224,921 
Allowance for uncollectible accounts (120,000) (215,000) 
Inventories 4,520,902 3,888,400 
Prepaid expenses 29,500 24,700 
Total current assets 8,218,100 6,057,002 
Property, plant, and equipment: 
At cost 12,945,255 9,922,534 
Less accumulated depreciation (4,382,990) (3,775,911) 
Total prop., plant, and equipment 8,562,265 6,146,623 
Goodwill 1,200,000 345,000 
Total assets $17,980,365 $12,548,625 
Accounts payable $ 2,141,552 $ 2,526,789 
Bank loan payable 150,000 — 
Accrued liabilities 723,600 598,020 
Federal income taxes payable 1,200,000 1,759,000 
Current portion of long-term debt 240,000 240,000 
Total current liabilities 4,455,152 5,123,809 
Long-term debt 960,000 1,200,000 
Stockholders’ equity: 
Common stock 1,250,000 1,000,000 
Additional paid-in capital 2,469,921 1,333,801 
Retained earnings 8,845,292 3,891,015 
Total stockholders’ equity 12,565,213 6,224,816 
Total liabilities and stockholders’ equity $17,980,365 $12,548,625 
Combined Statement of Income and Retained Earnings 
Preliminary Audited 
12-31-11 12-31-10 
Sales $43,994,931 $32,258,015 
Cost of goods sold 24,197,212 19,032,229 
Gross profit 19,797,719 13,225,786 
Selling, general, and administrative expenses 10,592,221 8,900,432 
Pension cost 1,117,845 865,030 
Interest expense 83,376 104,220 
Total operating expenses 11,793,442 9,869,682 
Income before taxes 8,004,277 3,356,104 
Income tax expense 1,800,000 1,141,000 
Net income 6,204,277 2,215,104 
Beginning retained earnings 3,891,015 2,675,911 
10,095,292 4,891,015 
Dividends declared (1,250,000) (1,000,000) 
Ending retained earnings $ 8,845,292 $ 3,891,015 








statement information is shown in Figure 9-8. Additional relevant planning information is 


summarized next. 


1. Stanton has been a client for 4 years, and Albright’s firm has always had a good rela- 
tionship with the company. Management and the accounting people have always 
been cooperative, honest, and positive about the audit and financial reporting. No 
material misstatements were found in the prior year’s audit. Albright’s firm has 
monitored the relationship carefully, because when the audit was obtained, Leonard 
Stanton, the CEO, had the reputation of being a “high-flyer” and had been through 
bankruptcy at an earlier time in his career. 
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. Stanton runs the company in an autocratic way, primarily because of a somewhat 


controlling personality. He believes that it is his job to make all the tough decisions. 
He delegates responsibility to others but is not always willing to delegate a commen- 
surate amount of authority. 


. The industry in which Stanton participates has been in a favorable cycle the past 


few years and that trend is continuing in the current year. Industry profits are 
reasonably favorable, and there are no competitive or other apparent threats on the 
horizon. 


. Internal controls for Stanton are evaluated as reasonably effective for all cycles but 


not unusually strong. Although Stanton supports the idea of control, Albright has 
been disappointed that management has continually rejected Albright’s recom- 
mendation to improve its internal audit function. 


. Stanton has a contract with its employees that if earnings before taxes, interest 


expense, and pension cost exceed $7.8 million for the year, an additional contribu- 
tion must be made to the pension fund equal to 5% of the excess. 





Stanton Enterprises Evidence-Planning Worksheet to Decide Tests of Details of Balances 
for Accounts Receivable 





Acceptable audit risk 


Control risk—Sales 


Control risk— 
Cash receipts 


Control risk— 
Additional controls 


Substantive tests of 
transactions—Sales 


Substantive tests of 
transactions— 
Cash receipts 


Analytical 
procedures 


Planned detection 
risk for tests of 
details of balances 


Planned audit 
evidence for tests of 
details of balances 





Detail tie-in 
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Tolerable misstatement 
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a. You are to play the role of Pamela Albright in the 12-31-11 audit of Stanton Enterprises. Required 
Make a preliminary judgment of materiality and allocate tolerable misstatement to 
financial statement accounts. Prepare an audit schedule showing your calculations. 
(Instructor option: prepare the schedule using an electronic spreadsheet.) 


b. Make an acceptable audit risk decision for the current year as high, medium, or low, 
and support your answer. 


c. Perform analytical procedures for Stanton Enterprises that will help you identify 
accounts that may require additional evidence in the current year’s audit. Document 
the analytical procedures you perform and your conclusions. (Instructor option: use 
an electronic spreadsheet to calculate analytical procedures.) 


d. The evidence planning worksheet to decide tests of details of balances for Stanton’s 
accounts receivable is shown in Figure 9-9. Use the information in the case and your 
conclusions in parts a—c to complete the following rows of the evidence-planning 
worksheet: Acceptable audit risk, Inherent risk, and Analytical procedures. Also fill in 
tolerable misstatement for accounts receivable at the bottom of the worksheet. Make 
any assumptions you believe are reasonable and appropriate and document them. 


INTEGRATED CASE APPLICATION — 


PINNACLE MANUFACTURING: PART Il 





9-37 (Objectives 9-7, 9-8) 


In Part I of the case, you performed preliminary analytical procedures for Pinnacle (pp. 
245-247). The purpose of Part II is to identify factors influencing risks and the relationship 
of risks to audit evidence. 

During the planning phase of the audit, you met with Pinnacle’s management team and 


performed other planning activitic Bayo" P DFO Rh aHies spat you 


believe may be relevant to the audit: 


1. Your firm has an employee who reads and saves articles about issues that may affect 
key clients. You read an article in the file titled, “EPA Regulations Encouraging Solar- 
Powered Engines Postponed?” After reading the article, you realize that the regula- 
tions management is relying upon to increase sales of the Solar-Electro division 
might not go into effect for at least ten years. A second article is titled, “Stick to Diesel 
Pinnacle!” The article claims that although Pinnacle has proven itself within the 
diesel engine industry, they lack the knowledge and people necessary to perform well 
in the solar-powered engine industry. 

2. You ask management for a tour of the Solar-Electro facilities. While touring the 
warehouse, you notice a section of solar-powered engines that do not look like the 
ones advertised on Pinnacle’s Web site. You ask the warehouse manager when those 
items were first manufactured. He responds by telling you, “I’m not sure. P’ve been 
here a year and they were here when I first arrived.” 

3. You also observe that new computerized manufacturing equipment has been 
installed at Solar-Electro. The machines have been stamped with the words, “Product 
of Welburn Manufacturing, Detroit, Michigan.” 

4. During discussions with the Pinnacle controller, you learn that Pinnacle employees 
did a significant amount of the construction work for a building addition because of 
employee idle time and to save costs. The controller stated that the work was carefully 
coordinated with the construction company responsible for the addition. 

5. While reading the footnotes of the previous year’s financial statements, you note that 
one customer, Auto-Electro, accounts for nearly 15% of the company’s accounts 
receivable balance. You investigate this receivable and learn the customer has not 
made any payments for several months. 

6. During a meeting with the facilities director, you learn that the board of directors has 
decided to raise a significant amount of debt to finance the construction of a new 
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manufacturing plant for the Solar-Electro division. The company also plans to make 

a considerable investment in modifications to the property on which the plant will 

be built. 

. While standing in line at a vending machine, you see a Pinnacle vice president 
wearing a golf shirt with the words “Todd-Machinery.” You are familiar with the 
company and noticed some of its repairmen working in the plant earlier. You tell the 
man you like the shirt and he responds by saying, “Thank you. My wife and I own the 
company, but we hire people to manage it.” 

. After inquiry of the internal audit team, you realize there is significant turnover in 
the internal audit department. You conclude the turnover is only present at the 
higher-level positions. 

9. While reviewing Pinnacle’s long-term debt agreements, you identify several restric- 
tive covenants. Two requirements are to keep the current ratio above 2.0 and debt- 
to-equity below 1.0 at all times. 

10. The engagement partner from your CPA firm called today notifying you that Brian 
Sioux, an industry specialist and senior tax manager from the firm’s Ontario office, 
will be coming on-site to Pinnacle’s facilities to investigate an ongoing dispute 
between the Internal Revenue Service and Pinnacle. 

11. A member of your CPA firm, who is currently on-site in Detroit at the Welburn 
division, calls you to see how everything is going while you are visiting Solar-Electro 
in Texas. During your conversation, he asks if you know anything about the recent 
intercompany loan from Welburn to Solar-Electro. 


N 


co 


Required a. Review Part I of the case and the situations in Part II and identify information that 
affects your assessment of acceptable audit risk. Note that only some of the situations 
in Part II will relate to acceptable audit risk. Classify the information based on the 
three factors that affect acceptable audit risk. 

External users’ reliance on financial statements 
Likelihood of financial difficulties 
Apago PDH Enhancer 
b. Assess acceptable audit risk as high, medium, or low considering the items you identi- 
fied in requirement a. (A risky client will be assessed as a low acceptable audit risk.) 
Justify your response. 
c. Identify inherent risks for the audit of Pinnacle using the information from Parts I 
and II. For each inherent risk, identify the account or accounts that may be affected. 


Inherent Risk Account or Accounts Affected 


INTERNET PROBLEM 9-1: 


MATERIALITY AND TOLERABLE MISSTATEMENT 





Establishing materiality and allocation of materiality to individual accounts requires con- 
siderable judgment. Access Microsoft’s 2009 financial statements at www.microsoft.com 
(use the “investor relations” link). 


Required a. Assume that your firm’s materiality guidelines indicate that materiality should be 
between three and six percent of net income before taxes. What percentage and dollar 
amount of materiality would you use for the audit of Microsoft? Explain. 


b. What asset accounts on Microsoft’s balance sheet should be allocated the largest 
amount of tolerable misstatement? Explain. 
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SECTION 404 AUDITS 
OF INTERNAL CONTROL LEARNING OBJECTIVES 
AND CONTROL RISK yearnenneremam 


you should be able to 

10-1 Describe the three primary 
Rogue Trader Circumvents Controls abeives of effective internal 
Causing $7 Billion In Losses cab 

10-2 Contrast management's 
The size of the trading losses at French bank Société Générale were responsibilities for maintaining 
staggering. Jéréme Kerviel, a junior trader with a modest base salary of internal control with the auditor's 


responsibilities for evaluating 


around $70,000, had gambled more than the bank’s entire net worth in : ; 
and reporting on internal control. 


high-risk bets involving unauthorized trades related to European stock 


F 10-3 Explain the five components 
index funds. of the COSO internal control 
Kerviel’s role was to make trades that bet whether European stock markets famed 

would rise or fall. Each bet was supposed to be offset by a trade in the Mee, ebrubaaocapr dl ee 
opposite direction to keep risk at a minimum, with the bank making profit sg Gu A caer ae Ane 
or loss based on the difference between the parallel bets. However, within 10-5 soneveuin risk ce key 
months of joining the trading desk, he began placing his bets all in one eisiasieak aged heer Seis 
direction, rather than hedging the trades as he was expected to do. One objectives. 

bet paid off handsomely after an ap age LAD Etrakinhawmece r 10-6 Describe the process of designing 
sent European markets into a dive. “Bingo, 500,000 euros” Kerviel said in an and performing tests of controls. 


interview with investigators. This success led him to make even bolder bets. Porat aiinrana cern an 


requirements for auditor 


Société Générale played up their use of computer systems to ward off risk. fc oninacnnimernalcantiol 


The bank’s equity-derivatives unit had not experienced a major incident 


in 15 years. “We didn’t think it was possible” said one Société Générale eae ea eee een 


evaluating, reporting, and testing 








executive discussing the losses. Unfortunately, Kerviel knew how to mask internal control for nonpublic 
his trades to avoid detection. He masked his positions with fake trades, companies. 
creating the illusion that his positions were hedged. \ 7 





Keeping his trades hidden required constant vigilance. He needed to 

continue to delete and re-enter fake trades to avoid detection. As a result, Kerviel regularly skipped holidays and rarely 
took vacation. “It is one of the rules of controls: a trader who doesn’t take holidays is trader who doesn’t want his 
books to be seen by others” Kerviel stated to investigators. 


Finally, a fictitious trade made in the name of a German brokerage house triggered an alarm in Société Générale’s 
systems. Under repeated questioning, Kerviel revealed that his bets had over 50 billion euros (€) at risk for the bank. 
By the time the French bank unwound the bets, it had lost €4.9 billion ($7.4 billion) nearly destroying the 145 year- 
old bank. 


At Kerviel’s June 2010 trial, one of the bank’s former executives admitted that the bank failed by creating an 
environment where there was “too much trust.” And, his former boss commented “If you're not looking for anything, 
you don’t find anything.” 


Sources: Adapted from 1. Nicola Clark and Katrin Behnhold, “A Société Générale Trader Remains a Mystery as His Criminal Trial Ends,” 
The New York Times (June 25, 2010); 2. David Gauthier-Villars and Carrick Mollenkamp, “Portrait Emerges of Rogue Trader at French 
Bank," The Wall Street Journal (February 2-3, 2008) p. Al. 


he opening story involving Société Générale demonstrates how deficiencies in internal control can cause significant 

losses resulting in material misstatements in financial statements. Financial reporting problems at companies such as 
Enron and WorldCom also exposed serious deficiencies in internal control. To address these concerns, Section 404 of the 
Sarbanes—Oxley Act (Section 404) requires auditors of U.S. public companies to assess and report on the effectiveness of 
internal control over financial reporting, in addition to their report on the audit of the financial statements. Similar 
legislation has arisen around the world, such as Japan’s widely known “J-SOX’, which also mandates management and 
auditor reporting on internal controls for Japanese companies. 

This is the third chapter dealing with planning the audit. It shows how effective internal controls can reduce 
planned audit evidence in the audit of financial statements. To support the assessment of the control risk component 
of the audit risk model, auditors must obtain an understanding of internal control and gather evidence to support 
that assessment. The chart in the margin shows where these tasks fit into planning the audit. Most of the chapter 
describes how public company auditors integrate evidence to provide a basis for their report on the effectiveness of 
internal control over financial reporting with the assessment of control risk in the financial statement audit. The end 
of the chapter identifies and discusses the differences in assessing control risk and testing controls for nonpublic 
companies compared to public companies. By the end of the chapter, you will see that there are more similarities 
than differences in the two approaches. 


INTERNAL CONTROL OBJECTIVES 


OBJECTIVE 10-1 A system of internal control consists of policies and procedures designed to provide 
management with reasonable assurance that the company achieves its objectives and 
objectives of effective goals. These policies and procedures are often called controls, and collectively, they 
internal control. make up the entity’s internal control. Management typically has three broad objectives 
in designing an effective internal control system: 


Describe the three primary 





1. Apage of. BoE. En ing. As we discussed in Chapter 6, management is 


























ARAGGe DEpar AIG SXonvestors, creditors, and other users. 
Accept client Management has both a legal and professional responsibility to be sure that the 
and perform initial information is fairly presented in accordance with reporting requirements of 
aa accounting frameworks such as GAAP and IFRS. The objective of effective 
Understand the internal control over financial reporting is to fulfill these financial reporting 

client's business responsibilities. 
and industty 2. Efficiency and effectiveness of operations. Controls within a company en- 
= Aint courage efficient and effective use of its resources to optimize the company’s 
business risk goals. An important objective of these controls is accurate financial and 
nonfinancial information about the company’s operations for decision 

Perform preliminary making. 

analylral procedtlrs 3. Compliance with laws and regulations. Section 404 requires management of 
Set ae ain and all public companies to issue a report about the operating effectiveness of 
assess acceptable internal control over financial reporting. In addition to the legal provisions 
audit risk and of Section 404, public, nonpublic, and not-for-profit organizations are 
—_— Hisk required to follow many laws and regulations. Some relate to accounting only 
Understand indirectly, such as environmental protection and civil rights laws. Others are 
internal control and closely related to accounting, such as income tax regulations and anti-fraud 

assess control risk legal provisions. 





Gatien infotmerion Management designs systems of internal control to accomplish all three objectives. 
to assess fraud risks 


The auditor’s focus in both the audit of financial statements and the audit of internal 
Develop overall controls is on controls over the reliability of financial reporting plus those controls 
audit plan and over operations and compliance with laws and regulations that could materially affect 
ale plagatt financial reporting. 
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MANAGEMENT AND AUDITOR RESPONSIBILITIES 


FOR INTERNAL CONTROL 





Responsibilities for internal controls differ between management and the auditor. 
Management is responsible for establishing and maintaining the entity’s internal controls. 
Management is also required by Section 404 to publicly report on the operating effective- 
ness of those controls. In contrast, the auditor’s responsibilities include understanding 
and testing internal control over financial reporting. Since 2004, auditors of larger 
public companies have been required by the SEC to annually issue an audit report on 
the operating effectiveness of those controls. 


Management, not the auditor, must establish and maintain the entity’s internal controls. 
This concept is consistent with the requirement that management, not the auditor, is 
responsible for the preparation of financial statements in accordance with applicable 
accounting frameworks such as GAAP or IFRS. Two key concepts underlie manage- 
ment’s design and implementation of internal control—reasonable assurance and 
inherent limitations. 


Reasonable Assurance A company should develop internal controls that provide 
reasonable, but not absolute, assurance that the financial statements are fairly stated. 
Internal controls are developed by management after considering both the costs and 
benefits of the controls. The concept of reasonable assurance allows for only a remote 
likelihood that material misstatements will not be prevented or detected on a timely 
basis by internal control. 


Inherent Limitations Internal controls can never be completely effective, regardless 
of the care followed in their design and implementation. Even if management can 


design an ideal system, its Het RB AGS onpslys “BAK anceyeny 
of the people using it. Assume, for ¢x#mple? that a carefully developed procedure for 
counting inventory requires two employees to count independently. If neither of the 
employees understands the instructions or if both are careless in doing the counts, the 
inventory count is likely to be wrong. Even if the count is correct, management might 
override the procedure and instruct an employee to increase the count to improve 
reported earnings. Similarly, the employees might decide to overstate the counts to 
intentionally cover up a theft of inventory by one or both of them. An act of two or more 
employees who conspire to steal assets or misstate records is called collusion. 


Section 404(a) of the Sarbanes—Oxley Act requires management of all public companies 
to issue an internal control report that includes the following: 


» Astatement that management is responsible for establishing and maintaining an 
adequate internal control structure and procedures for financial reporting 

* An assessment of the effectiveness of the internal control structure and pro- 
cedures for financial reporting as of the end of the company’s fiscal year 


Management must also identify the framework used to evaluate the effectiveness of 
internal control. The internal control framework used by most U.S. companies is the 
Committee of Sponsoring Organizations of the Treadway Commission (COSO) 
Internal Control—Integrated Framework. Other internal control frameworks exist 
around the world, such as the United Kingdom’s Internal Control: Guidance for Directors 
on the Combined Code (known as the Turnbull Report) and Canada’s Guidance on 
Assessing Control (known as “CoCo”). 

Management’s assessment of internal control over financial reporting consists of 
two key aspects. First, management must evaluate the design of internal control over 


OBJECTIVE 10-2 





Contrast management's 
responsibilities for main- 
taining internal control with 
the auditor's responsibilities 
for evaluating and reporting 
on internal control. 





Management's 
Responsibilities 
for Establishing 
Internal Control 


Management's 
Section 404 
Reporting 
Responsibilities 
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Auditor 
Responsibilities 
for Understanding 
Internal Control 


financial reporting. Second, management must test the operating effectiveness of those 
controls. 


Design of Internal Control Management must evaluate whether the controls are 
designed and put in place to prevent or detect material misstatements in the financial 
statements. Management’s focus is on controls that address risks related to all relevant 
assertions for all significant accounts and disclosures in the financial statements. This 
includes evaluating how significant transactions are initiated, authorized, recorded, 
processed, and reported to identify points in the flow of transactions where material 
misstatements due to error or fraud could occur. 


Operating Effectiveness of Controls In addition, management must test the 
operating effectiveness of controls. The testing objective is to determine whether the 
controls are operating as designed and whether the person performing the control 
possesses the necessary authority and qualifications to perform the control effectively. 
Management’s test results, which must also be documented, form the basis for 
management’s assertion at the end of the fiscal year about the controls’ operating 
effectiveness. Management must disclose any material weakness in internal control. 
Even if only one material weakness is present, management must conclude that the 
company’s internal control over financial reporting is not effective. 

The SEC requires management to include its report on internal control in its 
annual Form 10-K report filed with the SEC. Figure 10-1 includes an example of 
management’s report on internal control that complies with Section 404 requirements 
and related SEC rules. 


Because of its importance, knowledge about a client’s internal control is included in a 
separate generally accepted auditing standard. Recall that the second GAAS field work 
standard states “The auditor must obtain a sufficient understanding of the entity and 
its environment, including its internal control, to assess the risk of material misstate- 
ment Apago:iPDFn Enhancer error or fraud and to design the 
nature, timing, and extent of further audit procedures.” The auditor obtains the 
understanding of internal control to assess control risk in every audit. Auditors are 
primarily concerned about controls over the reliability of financial reporting and 
controls over classes of transactions. 


Controls Over the Reliability of Financial Reporting To comply with the second 
standard of field work, the auditor focuses primarily on controls related to the first of 


Example Section 404 Management Report on Internal Control 
Over Financial Reporting 


The management of Marble Corporation is responsible for establishing and maintaining adequate 
internal control over financial reporting. Marble’s internal control system was designed to provide 
reasonable assurance to the company’s management and board of directors regarding the 
preparation and fair presentation of published financial statements. 





Marble management assessed the effectiveness of the company’s internal control over financial 
reporting as of December 31, 2011. In making this assessment, it used the criteria set forth by the 
Committee of Sponsoring Organizations of the Treadway Commission (COSO) in /nternal Control— 
Integrated Framework. Based on our assessment, we believe that, as of December 31, 2011, the 
company’s internal control over financial reporting is effective based on those criteria. 


Marble’s independent auditors have issued an audit report on our assessment of the company’s 
internal control over financial reporting. This report appears on the following page. 


February 15, 2012 








Fred Narsky, President Karen Wilson, Chief Financial Officer 
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management’s internal control concerns: reliability of financial reporting. Financial 
statements are not likely to correctly reflect GAAP or IFRS if internal controls over 
financial reporting are inadequate. Unlike the client, the auditor is less concerned with 
controls that affect the efficiency and effectiveness of company operations, because such 
controls may not influence the fair presentation of financial statements. Auditors should 
not, however, ignore controls affecting internal management information, such as 
budgets and internal performance reports. These types of information are often 
important sources used by management to run the business and can be important 
sources of evidence that help the auditor decide whether the financial statements are 
fairly presented. If the controls over these internal reports are inadequate, the value of the 
reports as evidence diminishes. 

As stated in Chapter 6, auditors have significant responsibility for the discovery of 
material fraudulent financial reporting and misappropriation of assets (fraud) and 
direct-effect illegal acts. Auditors are therefore also concerned with a client’s internal 
control over the safeguarding of assets and compliance with laws and regulations if 
they affect the fairness of the financial statements. Internal controls, if properly 
designed and implemented, can be effective in preventing and detecting fraud. 


Controls over Classes of Transactions Auditors emphasize internal control over 
classes of transactions rather than account balances because the accuracy of accounting 
system outputs (account balances) depends heavily on the accuracy of inputs and 
processing (transactions). For example, if products sold, units shipped, or unit selling 
prices are wrong in billing customers for sales, both sales and accounts receivable 
will be misstated. On the other hand, if controls are adequate to ensure correct billings, 
cash receipts, sales returns and allowances, and write-offs, the ending balance in accounts 
receivable is likely to be correct. Because of the emphasis on classes of transactions, 
auditors are primarily concerned with the transaction-related audit objectives discussed 
in Chapter 6 when assessing internal controls over jal reporting. These objectives 
were discussed in detail on pages 1 RGAe fail N ent of 
transaction-related audit objectives for sales transactions. 

Even though auditors emphasize transaction-related controls, the auditor must 
also gain an understanding of controls over ending account balance and presentation 
and disclosure objectives. For example, transaction-related audit objectives typically 
have no effect on two balance-related audit objectives: realizable value and rights and 
obligations. They also are unlikely to have an effect on the four presentation and dis- 
closure objectives. The auditor is likely to evaluate separately whether management has 
implemented internal control for each of these two account balance objectives and the 
four presentation and disclosure objectives. 





























Sales Transaction-Related Audit Objectives | 
Transaction-Related Audit Objective—General Form Sales Transaction-Related Audit Objectives 
Recorded transactions exist (occurrence). Recorded sales are for shipments made to existing customers. 
Existing transactions are recorded (completeness). Existing sales transactions are recorded. 
Recorded transactions are stated at the correct amounts (accuracy). Recorded sales are for the amount of goods shipped and are 
correctly billed and recorded. 
Recorded transactions are correctly included in the master files Sales transactions are correctly included in the master files 
and are correctly summarized (posting and summarization). and are correctly summarized. 
Transactions are correctly classified (classification). Sales transactions are correctly classified. 
q Transactions are recorded on the correct dates (timing). Sales are recorded on the correct dates. 
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ARGUMENTS 
AGAINST WAIVING 
SECTION 404(b) 
REQUIREMENT 
FOR SMALLER 
PUBLIC 
COMPANIES 





While many smaller companies lobbied Congress 
to permanently exempt the Section 404(b) 
requirement for auditors of smaller public 
companies to report on the operating effective- 
ness of internal controls over financial reporting, 
groups representing institutional investors, 
investment professionals, and the auditing 
profession argued that waiving the 404(b) 
compliance requirements for non-accelerated 
filers would send a message to investors in those 
smaller companies that they didn’t deserve the 
same amount of protection as those who invest 
in larger companies. In a joint letter issued to 
Congress, the groups said: 


We dispute the notion that investors in smaller 
public companies do not deserve the same 
financial reporting safeguards as investors of 
large public companies. The Securities and 
Exchange Commission (SEC) has conducted a 
Congressionally-mandated study which found 
that Section 404 provides benefits that are 
valuable regardless of a public company’s 
size... An independent audit of ICFR is also an 
important safeguard against financial fraud. 


Those who suggest that such frauds occur 
only in large companies are mistaken, as a 
recent study issued by The Committee of 
Sponsoring Organizations of the Treadway 
Commission found that between 1998 and 
2007, the median market capitalization of 
companies experiencing fraudulent events 
was approximately $100 million... Exempting 
smaller companies from Section 404(b) 
compliance may also result in a dual class 
system of investor protection and effectively 
undermine investor confidence in the 
effectiveness of exempted companies’ 
financial control mechanisms. 


While persuasive, these arguments did not 
convince Congress, resulting in the inclusion of 
the permanent exemption in the 2010 federal 
financial reform legislation. 


Source: Adapted from the June 10, 2010 joint letter 
addressed to House and Senate Conferees by the 
Chartered Financial Analysts Institute (CFA Institute), 
Center on Audit Quality (CAQ), and the Council of 
Institutional Investors (vwww.caq.org). 





Auditor 
Responsibilities 
for Testing 
Internal Control 


Section 404(b) requires that the auditor report on the effectiveness of internal control 
over financial reporting. As discussed in Chapter 1, as a result of the federal financial 
reform legislation passed by Congress in July 2010 only larger public companies 
accel ASA GO) PDR phaarrecerdit report on internal control over 
financial repofting. 

To express an opinion on these controls, the auditor obtains an understanding of 
and performs tests of controls for all significant account balances, classes of trans- 
actions, and disclosures and related assertions in the financial statements. We will 
discuss tests of controls later in the chapter and in considerable detail in several other 
chapters throughout the text. Auditor reporting on internal control is also discussed 
later in the chapter. 


COSO COMPONENTS OF INTERNAL CONTROL 


OBJECTIVE 10-3 





Explain the five components 
of the COSO internal control 
framework. 
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COSO’s Internal Control—Integrated Framework, the most widely accepted internal 
control framework in the United States, describes five components of internal control 
that management designs and implements to provide reasonable assurance that its 
control objectives will be met. Each component contains many controls, but auditors 
concentrate on those designed to prevent or detect material misstatements in the 
financial statements. The COSO internal control components include the following: 


1. Control environment 

Risk assessment 

Control activities 

Information and communication 
Monitoring 


Ou tS 


As illustrated in Figure 10-2, the control environment serves as the umbrella for 
the other four components. Without an effective control environment, the other four 
are unlikely to result in effective internal control, regardless of their quality. 
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. 
haparoes Five Components of Internal Control 


Control Environment 












Risk Control Information and 
Assessment Activities Communication 


Monitoring 



































The essence of an effectively controlled organization lies in the attitude of its manage- 
ment. If top management believes that control is important, others in the organization 
will sense this commitment and respond by conscientiously observing the controls 
established. If members of the organization believe that control is not an important 
concern to top management, it is almost certain that management’s control objectives 
will not be effectively achieved. 

The control environment consists of the actions, policies, and procedures that 
reflect the overall attitudes of top management, directors, and owners of an entity about 
internal control and its importance to the entity. To understand and assess the control 
environment, auditors should consider the most important control subcomponents. 


Integrity and Ethical Values Integrity and ethical values are the product of the 
entity’s ethical and behavioral standards, as well as how they are communicated and 
reinforced in practice. They include management’s actions to remove or reduce 
incentives and temptations that might prompt personnel to engage in dishonest, illegal, 
or unethical acts. They also include Apagai FAH e aC e@:Kavioral 
standards to personnel through policy statements, codes of conduct, and by example. 


Commitment to Competence Competence is the knowledge and skills necessary to 
accomplish tasks that define an individual’s job. Commitment to competence includes 
management’s consideration of the competence levels for specific jobs and how those 
levels translate into requisite skills and knowledge. 


Board of Director or Audit Committee Participation The board of directors is 
essential for effective corporate governance because it has ultimate responsibility to 
make sure management implements proper internal control and financial reporting 
processes. An effective board of directors is independent of management, and its 
members stay involved in and scrutinize management’s activities. Although the board 
delegates responsibility for internal control to management, it must regularly assess 
these controls. In addition, an active and objective board can reduce the likelihood that 
management overrides existing controls. 

To assist the board in its oversight, the board creates an audit committee that is 
charged with oversight responsibility for financial reporting. The audit committee is also 
responsible for maintaining ongoing communication with both external and internal 
auditors, including the approval of audit and nonaudit services done by auditors for 
public companies. This allows the auditors and directors to discuss matters that might 
relate to such things as management integrity or the appropriateness of actions taken 
by management. 

The audit committee’s independence from management and knowledge of finan- 
cial reporting issues are important determinants of its ability to effectively evaluate 
internal controls and financial statements prepared by management. The Sarbanes— 
Oxley Act directed the SEC to require the national stock exchanges (NYSE and NASDAQ) 
to strengthen audit committee requirements for public companies listing securities on 


The Control 
Environment 
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the exchanges. In response, the exchanges will not list any security from a company 
with an audit committee that: 
1. Is not comprised solely of independent directors 
Is not solely responsible for hiring and firing the company’s auditors 
3. Does not establish procedures for the receipt and treatment of complaints (e.g., 
“whistleblowing”) regarding accounting, internal control or auditing matters 
4. Does not have the ability to engage its own counsel and other advisors 
5. Is inadequately funded 


Similar provisions exist outside the U.S., such as the European Commission’s 8th 
Directive that requires each public-interest entity to have an audit committee with at least 
one member who is independent and who has competence in accounting or auditing. 
PCAOB Standard 5 requires the auditor to evaluate the effectiveness of the audit com- 
mittee’s oversight of the company’s external financial reporting and internal control 
over financial reporting. 

Many privately held companies also create an effective audit committee. For other 
privately held companies, governance may be provided by owners, partners, trustees, 
or a committee of management, such as a finance or budget committee. Individuals 
responsible for overseeing the strategic direction of the entity and the accountability of 
the entity, including financial reporting and disclosure, are called those charged with 
soverApagoiiPDEdknhancer 
Management’s Philosophy and Operating Style Management, through its activities, 
provides clear signals to employees about the importance of internal control. For 
example, does management take significant risks, or is it risk averse? Are sales and 
earnings targets unrealistic, and are employees encouraged to take aggressive actions to 
meet those targets? Can management be described as “fat and bureaucratic,” “lean and 
mean,’ dominated by one or a few individuals, or is it “just right”? Understanding these 
and similar aspects of management’s philosophy and operating style gives the auditor a 
sense of management’s attitude about internal control. 


Organizational Structure The entity’s organizational structure defines the existing 
lines of responsibility and authority. By understanding the client’s organizational 
structure, the auditor can learn the management and functional elements of the 
business and perceive how controls are implemented. 


Human Resource Policies and Practices The most important aspect of internal 
control is personnel. If employees are competent and trustworthy, other controls can 
be absent, and reliable financial statements will still result. Incompetent or dishonest 
people can reduce the system to a shambles—even if there are numerous controls in 
place. Honest, efficient people are able to perform at a high level even when there are 
few other controls to support them. However, even competent and trustworthy people 
can have shortcomings. For example, they can become bored or dissatisfied, personal 
problems can disrupt their performance, or their goals may change. 

Because of the importance of competent, trustworthy personnel in providing 
effective control, the methods by which persons are hired, evaluated, trained, promoted, 
and compensated are an important part of internal control. 


After obtaining information about each of the subcomponents of the control 
environment, the auditor uses this understanding as a basis for assessing management’s 
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STRENGTHENING 
ENTERPRISE RISK 
OVERSIGHT 





The recent financial crisis is leading to a renewed 
focus on how senior executives approach risk 
management, including the board's role in risk 
oversight. Companies exist to provide value for 
stakeholders, but face uncertainty in their 
attempts to grow stakeholder value. A challenge 
for management is to determine how much 
uncertainty to accept, and how to effectively deal 
with uncertainty and associated risks. Senior 
executives are working to strengthen risk 
oversight so that both management and the 
board are better informed about emerging risk 
exposures, particularly those impacting strategy. 
A recent COSO thought paper, Strengthening 
Enterprise Risk Oversight for Strategic Advantage, 
highlights four specific areas where senior manage- 


2. Understand risk management practices: 
For many organizations, the approach to risk 
management is ad hoc, informal, and implicit, 
leaving executives and boards with an 
incomplete view of key risks. 

3. Review the portfolio of risks in relation to 
risk appetite: Ultimately, the goal is to 
evaluate whether existing risk exposures are 
in line with stakeholder appetite for risks. 


4. Be apprised of the most significant risks 


and related responses: Because risks 
constantly evolve, management needs a 
process that provides timely and robust 
information about risks arising across the 
organization. 


These four areas build off COSO’s Enterprise 


Risk Management - Integrated Framework, which 
provides core principles for effective identification, 
assessment, and management of enterprise risks. 


ment can work with its board to enhance the 
board's risk oversight capabilities: 


1. Discuss risk management philosophy and 
appetite: Unless the board and management 
fully understand the level of risk that the 
organization is willing and able to take, it will 
be difficult for the board and management to 
effectively oversee critical risk exposures. 


Sources: Adapted from 1. Strengthening Enterprise 
Risk Management for Strategic Advantage, COSO, 
2009; 2. Enterprise Risk Management - Integrated 
Framework, COSO, 2004 (www.coso.org). 





and directors’ attitudes and awareness about the importance of control. For example, 
the auditor might determine the nature of a client’s budgeting system as a part of 


understanding the design of the control environment. The ope 
system might then be evaluated in pa PAG@y PE: PRE iknhan 


ration of the budgeting 
RaANG@eZrmine 


budgeting procedures and follow-up of differences between budget and actual. 


Risk assessment for financial reporting is management’s identification and analysis 


Risk Assessment 


of risks relevant to the preparation of financial statements in conformity with appro- 
priate accounting standards. For example, if a company frequently sells products at a 
price below inventory cost because of rapid technology changes, it is essential for the 
company to incorporate adequate controls to address the risk of overstating inventory. 
Similarly, failure to meet prior objectives, quality of personnel, geographic dispersion of 
company operations, significance and complexity of core business processes, intro- 
duction of new information technologies, economic downturns, and entrance of new 
competitors are examples of factors that may lead to increased risk. Once management 
identifies a risk, it estimates the significance of that risk, assesses the likelihood of the 
risk occurring, and develops specific actions that need to be taken to reduce the risk to 


an acceptable level. 






Control Environment 





Risk 
Assessment 











Information and 
Communication 


Control 
Activities 














Monitoring 








Management’s risk assessment differs from but is closely related to the auditor’s 
risk assessment discussed in Chapter 9. While management assesses risks as a part of 
designing and operating internal controls to minimize errors and fraud, auditors assess 
risks to decide the evidence needed in the audit. If management effectively assesses 
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Control Activities 


and responds to risks, the auditor will typically accumulate less evidence than when 
management fails to identify or respond to significant risks. 

Auditors obtain knowledge about management’s risk assessment process using 
questionnaires and discussions with management to determine how management 
identifies risks relevant to financial reporting, evaluates the significance and likeli- 
hood of the risks occurring, and decides the actions needed to address the risks. 


Control activities are the policies and procedures, in addition to those included in the 
other four control components, that help ensure that necessary actions are taken to 
address risks to the achievement of the entity’s objectives. There are potentially many 
such control activities in any entity, including both manual and automated controls. The 
control activities generally fall into the following five types, which are discussed next: 


1. Adequate separation of duties 

Proper authorization of transactions and activities 
Adequate documents and records 

Physical control over assets and records 
Independent checks on performance 


a 







Control Environment 





Risk Control Information and 


Assessment Activities Communication Monitoring 





























Adequate Separation of Duties Four general guidelines for adequate separation of 
duties to prevent both fraud and errors are especially significant for auditors. 


SeparApaga cRRE ob DNANCET noting To protect a company from 


embezzlement, a person who has temporary or permanent custody of an asset should 
not account for that asset. Allowing one person to perform both functions increases 
the risk of that person disposing of the asset for personal gain and adjusting the records 
to cover up the theft. If the cashier, for example, receives cash and is responsible for 
data entry for cash receipts and sales, that person could pocket the cash received and 
adjust the customer’s account by failing to record a sale or by recording a fictitious 
credit to the account. 


Separation of the Authorization of Transactions from the Custody of Related 
Assets It is desirable to prevent persons who authorize transactions from having 
control over the related asset, to reduce the likelihood of embezzlement. For example, 
the same person should not authorize the payment of a vendor’s invoice and also 
approve the disbursement of funds to pay the bill. 


Separation of Operational Responsibility from Record-Keeping Responsibility To 
ensure unbiased information, record keeping is typically the responsibility of a separate 
department reporting to the controller. For example, if a department or division oversees 
the creation of its own records and reports, it might change the results to improve its 
reported performance. 


Separation of IT Duties from User Departments As the level of complexity of IT 
systems increases, the separation of authorization, record keeping, and custody often 
becomes blurred. For example, sales agents may enter customer orders online. The 
computer authorizes those sales based on its comparison of customer credit limits to 
the master file and posts all approved sales in the sales cycle journals. Therefore, the 
computer plays a significant role in the authorization and record keeping of sales 
transactions. To compensate for these potential overlaps of duties, it is important for 
companies to separate major IT-related functions from key user department functions. 
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In this example, responsibility for designing and controlling accounting software 
programs that contain the sales authorization and posting controls should be under the 
authority of IT, whereas the ability to update information in the master file of customer 
credit limits should reside in the company’s credit department outside the IT function. 


Proper Authorization of Transactions and Activities Every transaction must be 
properly authorized if controls are to be satisfactory. If any person in an organization 
could acquire or expend assets at will, complete chaos would result. Authorization can 
be either general or specific. Under general authorization, management establishes 
policies and subordinates are instructed to implement these general authorizations 
by approving all transactions within the limits set by the policy. General authorization 
decisions include the issuance of fixed price lists for the sale of products, credit limits 
for customers, and fixed reorder points for making acquisitions. 

Specific authorization applies to individual transactions. For certain transactions, 
management prefers to authorize each transaction. An example is the authorization of a 
sales transaction by the sales manager for a used-car company. 

The distinction between authorization and approval is also important. Authoriza- 
tion is a policy decision for either a general class of transactions or specific transactions. 
Approval is the implementation of management’s general authorization decisions. An 
example of a general authorization is management setting a policy authorizing the 
ordering of inventory when less than a 3-week supply is on hand. When a department 
orders inventory, the clerk responsible for maintaining the perpetual record approves 
the order to indicate that the authorization policy has been met. In other cases, the 
computer approves the transactions by comparing quantities of inventory on hand to 
a master file of reorder points and automatically submits purchase orders to authorized 
suppliers in the vendor master file. In this case, the computer is performing the 
approval function using preauthorized information contained in the master files. 


Adequate Documents and koRpago PDF iniyancer upon 
arizéd. They inclu 


which transactions are entered and su de such diverse items as sales 
invoices, purchase orders, subsidiary records, sales journals, and employee time cards. Many 
of these documents and records are maintained in electronic rather than paper formats. 
Adequate documents are essential for correct recording of transactions and control of 
assets. For example, if the receiving department completes an electronic receiving report 
when material is received, the accounts payable computer application can verify the 
quantity and description on the vendor’s invoice by comparing it with the information 
on the receiving report, with exceptions resolved by the accounts payable department. 

Certain principles dictate the proper design and use of documents and records. 
Documents and records should be: 


* Prenumbered consecutively to facilitate control over missing documents and 
records and as an aid in locating them when they are needed at a later date. 
Prenumbered documents and records are important for the completeness 
transaction-related audit objective. 

* Prepared at the time a transaction takes place, or as soon as possible thereafter, 
to minimize timing errors. 

* Designed for multiple use, when possible, to minimize the number of different 
forms. For example, a properly designed electronic shipping record can be the 
basis for releasing goods from storage to the shipping department, informing 
billing of the quantity of goods to bill to the customer and the appropriate billing 
date, and updating the perpetual inventory records. 

* Constructed in a manner that encourages correct preparation. This can be done 
by providing internal checks within the form or record. For example, computer 
screen prompts may force online data entry of critical information before the 
record is electronically routed for authorizations and approvals. Similarly, screen 
controls can validate the information entered, such as when an invalid general 
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PHANTOM BOOKS 
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Senior executives at Livent Inc., the Toronto theater 
owner and producer of Broadway-style shows 
including Show Boat, Ragtime, and Phantom of 
the Opera, took their theatrics to a new level 
when they allegedly engaged in a pervasive fraud 
to materially distort their financial statements 
over an eight-year period. According to charges 
filed by the Securities and Exchange Commission, 
the former chairman and CEO and former 
president together coaxed several of their longtime 
company associates, including the CFO and IT 
manager, to participate in a multifaceted scheme 
to manipulate profits. 


assets from expenses. Their techniques included 
alteration of computer programs to lower 
expenses without a trace in order to hide the 
fraud from Livent auditors. In addition, they 
created “phantom” accounting records showing 
the adjustments so senior management could 
track the fraudulent entries and know the 
company’s true financial condition. Ultimately, 
their distortions were revealed, and the 
executives faced charges both in the United 
States and Canada. Livent filed for bankruptcy and 
was subsequently sold to a team headed by a 
former Walt Disney Company executive. 


In addition to orchestrating vendor kickback 
schemes to siphon off millions of dollars and 
numerous customer side-agreements to falsify 
revenues, senior management manipulated the 
accounting records to shift costs of shows to fixed 


Sources: 1. Securities and Exchange Commission, 
Litigation Release No. 16022, Washington, DC, 
January 1999; 2. Canadian Broadcasting Company, 
“Livent Founders Charged with Fraud,” Arts Now, 
Toronto, October 10, 2002. 


ledger account number is automatically rejected when the account number 
does not match the chart of accounts master file. 


A control closely related to documents and records is the chart of accounts, which 
classifies transactions into individual balance sheet and income statement accounts. 
The chart of accounts is helpful in preventing classification errors if it accurately 
describes which type of transactions should be in each account. 


Physical Control Over Assets and Records To maintain adequate internal 
waw.\ 2) igs re ) “i ote Yo! sets are left unprotected, they can be 
stolen’ a, re P F bevel Fak ; he can be stolen, damaged, altered, or 
lost, which can seriously disrupt the accounting process and business operations. 
When a company is highly computerized, its computer equipment, programs, and data 
files must be protected. The data files are the records of the company and, if damaged, 
could be costly or even impossible to reconstruct. 

The most important type of protective measure for safeguarding assets and records 
is the use of physical precautions. An example is the use of storerooms for inventory to 
guard against theft. When the storeroom is under the control of a competent employee, 
there is further assurance that theft is minimized. Fireproof safes and safety deposit 
vaults for the protection of assets such as currency and securities are other important 
physical safeguards in addition to off-site back-up of computer software and data files. 


Independent Checks on Performance The last category of control activities is the 
careful and continuous review of the other four, often called independent checks or 
internal verification. The need for independent checks arises because internal controls 
tend to change over time, unless there is frequent review. Personnel are likely to forget 
or intentionally fail to follow procedures, or they may become careless unless someone 
observes and evaluates their performance. Regardless of the quality of the controls, 
personnel can make errors or commit fraud. 

Personnel responsible for performing internal verification procedures must be 
independent of those originally responsible for preparing the data. The least expensive 
means of internal verification is the separation of duties in the manner previously 
discussed. For example, when the bank reconciliation is done by a person independent 
of the accounting records and handling of cash, there is an opportunity for verification 
without incurring significant additional costs. 

Computerized accounting systems can be designed so that many internal verification 
procedures can be automated as part of the system. For example, the computer can 
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prevent processing payment on a vendor invoice if there is no matching purchase order 
number or receiving report number for that invoice included in the system. 

Auditing standards require the auditor to obtain an understanding of the process 
company employees follow to reconcile detail records supporting a significant account 
balance to the general ledger for those accounts to help the auditor more effectively 
design and perform audit procedures. For example, an auditor is likely to send con- 
firmations of customer accounts receivable selected from accounts receivable master 
files. Before planning the confirmation procedures the auditor needs to understand the 
design and implementation of controls that company personnel use to reconcile the 
accounts receivable master file to the related general ledger account balance. 


The purpose of an entity’s accounting information and communication system is to 
initiate, record, process, and report the entity’s transactions and to maintain account- 
ability for the related assets. An accounting information and communication system 
has several subcomponents, typically made up of classes of transactions such as sales, 
sales returns, cash receipts, acquisitions, and so on. For each class of transactions, the 
accounting system must satisfy all of the six transaction-related audit objectives 
identified earlier in Table 10-1 (p. 293). For example, the sales accounting system should 
be designed to ensure that all shipments of goods are correctly recorded as sales (complete- 
ness and accuracy objectives) and are reflected in the financial statements in the proper 
period (timing objective). The system must also avoid duplicate recording of sales and 
recording a sale if a shipment did not occur (occurrence objective). 
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To understand the design of the accounting information system, the auditor deter- 
mines (1) the major classes of transactions of the entity; (2) how those transactions are 
initiated and recorded; (3) what accounting records exist and their nature; (4) how the 
system captures other events that are significant to the financial statements, such as 
declines in asset values; and (5) the nature and details of the financial reporting process 
followed, including procedures to enter transactions and adjustments in the general 
ledger. 


Monitoring activities deal with ongoing or periodic assessment of the quality of 
internal control by management to determine that controls are operating as intended 
and that they are modified as appropriate for changes in conditions. The information 
being assessed comes from a variety of sources, including studies of existing internal 
controls, internal auditor reports, exception reporting on control activities, reports by 
regulators such as bank regulatory agencies, feedback from operating personnel, and 
complaints from customers about billing charges. 

For many companies, especially larger ones, an internal audit department is 
essential for effective monitoring of the operating performance of internal controls. To 
be effective, the internal audit function must be performed by staff independent of 
both the operating and accounting departments and report directly to a high level of 
authority within the organization, either top management or the audit committee of 
the board of directors. 

In addition to its role in monitoring an entity’s internal control, an adequate internal 
audit staff can reduce external audit costs by providing direct assistance to the external 
auditor. PCAOB Standard 5 defines the extent that auditors can use the work done by 
internal auditors when reporting on internal control under Section 404. Auditing 


Information and 
Communication 


Monitoring 
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standards provide guidance to help the external auditor obtain evidence that supports 
the competence, integrity, and objectivity of internal auditors, which allows the 
external auditor to rely on the internal auditor’s work in a number of ways. 
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COSO’s five components of internal control discussed in the preceding sections are 
summarized in Table 10-2. Certain control elements within the five COSO control 
components have a pervasive effect on the entity’s system of internal control, and are 
referred to as entity-level controls in PCAOB auditing standards. Examples include 
the board and audit committee element of the control environment, the entity’s risk 
assessment process, and internal audit’s role in monitoring controls. 


OBTAIN AND DOCUMENT UNDERSTANDING OF INTERNAL CONTROL 


OBJECTIVE 10-4 





Obtain and document an 
understanding of internal 
control. 





Figure 10-3 (p. 304) provides an overview of the process of understanding internal 
control and assessing control risk for an integrated audit of the financial statements and 
the effectiveness of internal control over financial reporting. The figure shows that there 
are four phases in the process. Each of these four phases is discussed in this section. 

The level of understanding internal control and extent of testing required for the 
audit Apa oPtD Bcedtsyharveneited for an audit of only the financial 
statements. Therefore, when auditors first focus on the understanding and testing of 
internal control for the audit of internal controls, they will have met the requirements 
for assessing internal control for the financial statement audit. 

As discussed earlier, Section 404 requires management to document its processes 
for assessing the effectiveness of the company’s internal control over financial reporting. 
Management must document the design of controls, including all five control com- 
ponents, and also the results of its testing and evaluation. The types of information 
gathered by management to assess and document internal control effectiveness can 
take many forms, including policy manuals, flowcharts, narratives, documents, question- 
naires, and other paper and electronic forms. 








COSO 
MONITORING 
GUIDANCE 


The Committee of Sponsoring Organizations of 
the Treadway Commission (COSO) has developed 
guidance that provides more extensive under- 
standing of the monitoring component of the 
COSO Internal Control-Integrated Framework. 
This guidance is in response to observations that 
organizations are often not fully utilizing the 
monitoring component of internal control. For 
example, some public companies perform 
separate procedures to evaluate the operating 
effectiveness of internal control over financial 
reporting to comply with Section 404 


COSO's Guidance on Monitoring Internal 
Control Systems is intended to help organizations 
improve the effectiveness and efficiency of their 
internal control systems, through more efficient 
and effective monitoring procedures. The guidance 
helps management, boards of directors, and 
internal and external auditors recognize effective 
monitoring where it exists and identify and 
correct weaknesses in the monitoring component 
of internal control. 


Source: Guidance on Monitoring Internal Control 


responsibilities, even though the entity's existing 
monitoring activities generate sufficient evidence 
for management's Section 404 reporting. 


Systems, Committee of Sponsoring Organizations 
of the Treadway Commission (COSO), 2009 
(www.coso.org). 
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COSO Components of Internal Control 





INTERNAL CONTROL 





Component 


Description of Component 


Further Subdivision (if applicable) 





Control environment 


Actions, policies, and procedures that reflect 
the overall attitude of top management, 
directors, and owners of an entity about 
internal control and its importance 


Subcomponents of the control environment: 
* Integrity and ethical values 
* Commitment to competence 
¢ Board of director and audit committee participation 
* Management's philosophy and operating style 
* Organizational structure 
* Human resource policies and practices 





Risk assessment 


Control activities 


Management's identification and analysis of 
risks relevant to the preparation of financial 
statements in accordance with appropriate 
accounting frameworks such as GAAP or IFRS 


Policies and procedures that management 
has established to meet its objectives for 
financial reporting 


Risk assessment processes: 
« Identify factors affecting risks 
* Assess significance of risks and likelihood of occurrence 
* Determine actions necessary to manage risks 


Categories of management assertions that must be satisfied: 
* Assertions about classes of transactions and other events 
* Assertions about account balances 
« Assertions about presentation and disclosure 


Types of specific control activities: 
* Adequate separation of duties 
* Proper authorization of transactions and activities 
* Adequate documents and records 
¢ Physical control over assets and records 
¢ Independent checks on performance 





Information and 
communication 


Methods used to initiate, record, process, 
and report an entity's transactions and to 
maintain accountability for related assets 


Transaction-related audit objectives that must be satisfied: 
° Occurrence 
* Completeness 
» Accuracy 
¢ Posting and summarization 
* Classification 
° Timing 





Monitoring 





Management's ongoing and periodic 
assessment of the quality of internal control 
performance to determine whether controls 
are operating as intended and are modified 
when needed 


Not applicable 








Auditing standards require auditors to obtain and document their understanding of 
internal control for every audit. This understanding is necessary for both the audit of 
internal controls over financial reporting and the audit of financial statements. Manage- 
ment’s documentation is a major source of information in gaining the understanding. 

As part of the auditor’s risk assessment procedures, the auditor uses procedures 
to obtain an understanding, which involve gathering evidence about the design of 
internal controls and whether they have been implemented, and then uses that 
information as a basis for the integrated audit. The auditor generally uses four of the 
eight types of evidence described in Chapter 7 to obtain an understanding of the design 
and implementation of controls: documentation, inquiry of entity personnel, observa- 
tion of employees performing control processes, and reperformance by tracing one or a 
few transactions through the accounting system from start to finish. 

Auditors commonly use three types of documents to obtain and document their 
understanding of the design of internal control: narratives, flowcharts, and internal 
control questionnaires. Because Section 404 requires management to assess and 


Obtain and Document 
Understanding of 
Internal Control 
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CONTROL 
GUIDANCE FOR 
SMALLER PUBLIC 
COMPANIES 
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Control Risk 


Process for Understanding Internal Control and Assessing 








Phase 1 








Obtain and document 
understanding of 
internal control 
design and operation 





Phase 2 





Assess control risk 








Phase 3 


Design, perform, 
and evaluate 
tests of controls 








Phase 4 








Decide planned 
detection risk and 
substantive tests 











document the design effectiveness of internal control over financial reporting, they 
have usually already ‘Apago.Pl ae ed this documentation. Narratives, flowcharts, and internal 


contrAAPaiGOa 
internal control, are discussed next. 


bya hh aNhC@e@eLtely or in combination to document 


Narrative A narrative is a written description of a client’s internal controls. A proper 
narrative of an accounting system and related controls describes four things: 


1. The origin of every document and record in the system. For example, the descrip- 
tion should state where customer orders come from and how sales invoices are 


generated. 


2. All processing that takes place. For example, if sales amounts are determined by 
a computer program that multiplies quantities shipped by standard prices 
contained in price master files, that process should be described. 


Smaller public companies face challenges in imple- 
menting effective internal controls due to limited 
resources, fewer internal personnel, and fewer 
revenues to cover the costs of regulatory compliance. 
These challenges often create internal control 
deficiencies due to limited staffing, resulting in a 
lack of segregated duties, potential override of 
controls due to dominance of key control processes 
by management, and inadequate staffing of key 
accounting positions with individuals trained and 
knowledgeable in accounting and controls. 

To help management of smaller public 
companies, the Committee of Sponsoring 
Organizations of the Treadway Commission 
(COSO) issued guidance in Internal Control Over 
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Financial Reporting for Smaller Public Companies 
that highlights core elements of an effective 
design and implementation of internal controls 
over financial reporting for smaller public 
companies. This guidance summarizes 20 key 
principles and related attributes required for 
effective internal control and provides detailed 
illustrations of approaches and examples of how 
those principles can be implemented in a small 
public company. 


Source: Committee of Sponsoring Organizations 

of the Treadway Commission, Internal Control Over 
Financial Reporting for Smaller Public Companies, 
July 2006, (www.coso.org). 





3. The disposition of every document and record in the system. The filing of docu- 
ments, sending them to customers, or destroying them should be described. 

4. An indication of the controls relevant to the assessment of control risk. These 
typically include separation of duties (such as separating recording cash 
from handling cash), authorizations and approvals (such as credit approvals), 
and internal verification (such as comparison of unit selling prices to sales 
contracts). 


Flowchart An internal control flowchart is a diagram of the client’s documents and 
their sequential flow in the organization. An adequate flowchart includes the same four 
characteristics identified for narratives. 

Well prepared flowcharts are advantageous primarily because they provide a 
concise overview of the client’s system, which helps auditors identify controls and 
deficiencies in the client’s system. Flowcharts have two advantages over narratives: 
typically they are easier to read and easier to update. It is unusual to use both a narra- 
tive and a flowchart to describe the same system because both present the same 
information. 


Internal Control Questionnaire An internal control questionnaire asks a series 
of questions about the controls in each audit area as a means of identifying internal 
control deficiencies. Most questionnaires require a “yes” or a “no” response, with “no” 
responses indicating potential internal control deficiencies. By using a questionnaire, 
auditors cover each audit area reasonably quickly. The two main disadvantages of 
questionnaires are their inability to provide an overview of the system and their inap- 
plicability for some audits, especially smaller ones. 

Figure 10-4 (p. 306) illustrates part of an internal control questionnaire for the 
sales and collection cycle of Hillsburg Hardware Co. Notice how the questionnaire 
incorporates the six transaction-related audit objectives A through F as each applies to 
sales transactions (see shaded portions). The same_is true forall gther audit areas. 

The use of questionnaires and ARAGQcck DE DF..Enhancer, the 
client’s internal control design and identifying internal controls and deficiencies. Flow- 
charts provide an overview of the system, while questionnaires offer useful checklists 
to remind the auditor of many different types of internal controls that should exist. 
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In addition to understanding the design of the internal controls, the auditor must Evaluating 
also evaluate whether the designed controls are implemented. In practice, the under- Internal Control 
standing of the design and implementation are often done simultaneously. Following Implementation 


are common methods. 


Update and Evaluate Auditor’s Previous Experience with the Entity Most audits 
of a company are done annually by the same CPA firm. After the first year’s audit, the 
auditor begins with a great deal of information from prior years about the client’s 
internal control. It is especially useful to determine whether controls that were not 
previously operating effectively have been improved. 


Make Inquiries of Client Personnel Auditors should ask management, supervisors, 
and staff to explain their duties. Careful questioning of appropriate personnel helps 
auditors evaluate whether employees understand their duties and do what is described 
in the client’s control documentation. 


Examine Documents and Records The five components of internal control all 
involve the creation of many documents and records. By examining completed 
documents, records, and computer files, the auditor can evaluate whether information 
described in flowcharts and narratives has been implemented. 

Observe Entity Activities and Operations When auditors observe client personnel 
carrying out their normal accounting and control activities, including their prepara- 
tion of documents and records, it further improves their understanding and knowledge 
that controls have been implemented. 
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Client _Adbbung Hardware Co. Audit Date 22/37/17 

Auditor MSW/_ Date Completed 9/30///__ Reviewed by Z2_ Date Completed /0///7// 
Objective (shaded) and Question Answer Remarks 

Sales Yes No N/A 





A. Recorded sales are for shipments actually 
made to existing customers. 


1. Is customers’ credit approved by a ay. Ly Chutich, the president 
responsible official and is access to 


change credit limit master files restricted? 








2. Is the recording of sales supported by VA Pam Dilley examines 
authorized shipping documents and underlying documentation. 
approved customer orders? 

3. Is there adequate separation of duties a 
between billing, recording sales, and 
handling cash receipts? 








4. Are sales invoices prenumbered and wW/ Prenumbered but not 
accounted for? accounted for. Additional 
pooh i / 
B. Existing sales transactions are recorded. 
1. Is a record of shipments maintained? w/ 
2. Are shipping documents controlled from w/ 


the office in a manner that helps ensure 
that all shipments are billed? 


3. Are shipping documents prenumbered Wi 
and accounted for? 


C. Recorded sales are for the amount of goods 
shipped and are correctly billed and recorded. 
1. Is there independent comparison of the 


quantity on the shipping documents to J 
the sales invoices? 


& 


2. Is an authorized price list used and is access 
to change the price master file restricted? 


3. Are monthly statements sent to customers? J 





D. Sales transactions are properly included in the 
master files and are correctly summarized. 








1. Does the computer automatically post 
transactions to the accounts receivable 
master file and general ledger? 


2. Is the accounts receivable master file reconciled w/ Ly Erma, the accountant 
with the general ledger on a monthly basis? 





E. Recorded sales transactions are properly 
































classified. 
1. Is there independent comparison of 
recorded sales to the chart of accounts? J All sales ane on account 
F. Sales are recorded on the correct dates. ee : 
1, Is there independent comparison of dates VS Vumathedond nected 
on shipping documents to dates recorded? by Ese eckLan 
= 4 
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Perform Walkthroughs of the Accounting System In a walkthrough, the auditor 
selects one or a few documents of a transaction type and traces them from initiation 
through the entire accounting process. At each stage of processing, the auditor makes 
inquiries, observes activities, and examines completed documents and records. Walk- 
throughs conveniently combine observation, documentation, and inquiry to assure that 
the controls designed by management have been implemented. 


ASSESS CONTROL RISK 


The auditor obtains an understanding of the design and implementation of internal 
control to make a preliminary assessment of control risk as part of the auditor’s overall 
assessment of the risk of material misstatements. As described in Chapter 9, the auditor 
uses this preliminary assessment of control risk to plan the audit for each material class 
of transactions. However, in some instances the auditor may learn that the control 
deficiencies are significant such that the client’s financial statements may not be 
auditable. So, before making a preliminary assessment of control risk for each material 
class of transactions, the auditor must first decide whether the entity is auditable. 


Two primary factors determine auditability: the integrity of management and the ade- 
quacy of accounting records. The importance of management integrity was discussed 
in Chapter 8 under client acceptance and continuance. If management lacks integrity, 
most auditors will not accept the engagement. 

The accounting records are an important source of audit evidence for most audit 
objectives. If the accounting records are deficient, necessary audit evidence may not be 
available. For example, if the client has not kept duplicate sales invoices and vendors’ 
invoices, it is usually impractical to do an audit. 

In complex IT environments, m pago' PDF Enhancer: only 
in electronic form without generating @ visible audit trail of documents and records. In 
that case, the company is usually still auditable; however, auditors must assess whether 
they have the necessary skills to gather evidence that is in electronic form and can 
assign personnel with adequate IT training and experience. 


After obtaining an understanding of internal control, the auditor makes a preliminary 
assessment of control risk as part of the auditor’s overall assessment of the risk of 
material misstatement. This assessment is a measure of the auditor’s expectation that 
internal controls will prevent material misstatements from occurring or detect and 
correct them if they have occurred. 

The starting point for most auditors is the assessment of entity-level controls. By 
nature, entity-level controls, such as many of the elements contained in the control 
environment, risk assessment, and monitoring components, have an overarching impact 
on most major types of transactions in each transaction cycle. For example, an inef- 
fective board of directors or management’s failure to have any process to identify, 
assess, or manage key risks, has the potential to undermine controls for most of the 
transaction-related audit objectives. Thus, auditors generally assess entity-level controls 
before assessing transaction specific controls. 

Once auditors determine that entity-level controls are designed and placed in 
operation, they next make a preliminary assessment for each transaction-related audit 
objective for each major type of transaction in each transaction cycle. For example, in 
the sales and collection cycle, the types of transactions usually involve sales, sales 
returns and allowances, cash receipts, and the provision for and write-off of 
uncollectible accounts. The auditor also makes the preliminary assessment for controls 
affecting audit objectives for balance sheet accounts and presentations and disclosures 
in each cycle. 


OBJECTIVE 10-5 


Assess control risk by linking 


key controls and control 
deficiencies to transaction- 
related audit objectives. 








Assess Whether the 
Financial Statements 
Are Auditable 


Determine 

Assessed Control Risk 
Supported by the 
Understanding Obtained 
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Use of a 
Control Risk Matrix to 
Assess Control Risk 


Many auditors use a control risk matrix to assist in the control risk assessment process 
at the transaction level. The purpose is to provide a convenient way to organize 
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assessing control risk for each audit objective. Figure 10-5 illustrates the use of a 
control risk matrix for sales transaction audit objectives of Hillsburg Hardware Co. 
While Figure 10-5 only illustrates the control risk matrix for transaction-related audit 
objectives, auditors use a similar control risk matrix format to assess control risk for 
balance-related and presentation and disclosure-related audit objectives. We now 
discuss the preparation of the matrix. 


Identify Audit Objectives The first step in the assessment is to identify the audit 
objectives for classes of transactions, account balances, and presentation and dis- 
closure to which the assessment applies. For example, this is done for classes of 
transactions by applying the specific transaction-related audit objectives introduced 
earlier, which were stated in general form, to each major type of transaction for the 
entity. For example, the auditor makes an assessment of the occurrence objective for 
sales and a separate assessment of the completeness objective. Transaction-related 
audit objectives are shown for sales transactions for Hillsburg Hardware at the top of 
Figure 10-5. 


Identify Existing Controls Next, the auditor uses the information discussed in the 
previous section on obtaining and documenting an understanding of internal control 
to identify the controls that contribute to accomplishing transaction-related audit 
objectives. One way for the auditor to do this is to identify controls to satisfy each 
objective. For example, the auditor can use knowledge of the client’s system to identify 
controls that are likely to prevent errors or fraud in the occurrence transaction-related 
audit objective. The same thing can be done for all other objectives. It is also helpful for 
the auditor to use the five control activities (separation of duties, proper authorization, 
adequate documents and records, physical control over assets and records, and 
independent checks eo nce) as reminders of controls. For example: Is there 
adequbPagQioBD inane Hhieved? Are transactions properly 
authorized? Are prenumbered documents properly accounted for? Are key master files 
properly restricted from unauthorized access? 

The auditor should identify and include only those controls that are expected to 
have the greatest effect on meeting the transaction-related audit objectives. These are 
often called key controls. The reason for including only key controls is that they will be 
sufficient to achieve the transaction-related audit objectives and also provide audit 
efficiency. Examples of key controls for Hillsburg Hardware are shown in Figure 10-5. 


Associate Controls with Related Audit Objectives Each control satisfies one or 
more related audit objectives. This can be seen in Figure 10-5 for transaction-related 
audit objectives. The body of the matrix is used to show how each control contributes 
to the accomplishment of one or more transaction-related audit objectives. In this 
illustration, a C was entered in each cell where a control partially or fully satisfied an 
objective. A similar control risk matrix would be completed for balance-related and 
presentation and disclosure-related audit objectives. For example, the mailing of 
statements to customers satisfies three objectives in the audit of Hillsburg Hardware, 
which is indicated by the placement of each C on the row in Figure 10-5 describing 
that control. 


Identify and Evaluate Control Deficiencies, Significant Deficiencies, and 
Material Weaknesses Auditors must evaluate whether key controls are absent in the 
design of internal control over financial reporting as a part of evaluating control risk 
and the likelihood of financial statement misstatements. Auditing standards define 
three levels of the absence of internal controls: 


1. Control deficiency. A control deficiency exists if the design or operation of 
controls does not permit company personnel to prevent or detect misstate- 
ments on a timely basis in the normal course of performing their assigned 
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Control Risk Matrix for Hillsburg Hardware Co. — Sales 








SALES TRANSACTION-RELATED AUDIT OBJECTIVES 


Recorded sales are for shipments actually made 


to nonfictitious customers (occurrence). 
accounts receivable master file and are correctly 


shipped and are correctly billed and recorded 
summarized (posting and summarization). 


(accuracy). 
Sales transactions are correctly included in the 


Existing sales transactions are recorded 
Recorded sales are for the amount of goods 


(completeness). 
Sales transactions are correctly classified 


(classification). 
Sales are recorded on the correct dates 


(timing). 


INTERNAL CONTROL 


Credit is approved automatically by computer by 
comparison to authorized credit limits (C1). 





Recorded sales are supported by authorized shipping 
documents and approved customer orders (C2). 


Separation of duties exists among billing, recording of 
sales, and handling of cash receipts (C3). 


Shipping documents are forwarded to billing daily 
and are billed the subsequent day (C4). 





Shipping documents are prenumbered and C 
accounted for weekly (C5). 


Batch totals of quantities shipped are compared 
with quantities billed (C6). 


CONTROLS 





Unit selling prices are obtained from the price list 
master file of approved prices (C7). 





Sales transactions are internally verified (C8). 


Statements are mailed to customers each month (C9). 





Computer automatically posts transactions to the 
accounts receivable subsidiary records and to the 
general ledger (C10). 





Accounts receivable master file is reconciled to the 
general ledger on a monthly basis (C11). 


There is a lack of internal verification for the 
possibility of sales invoices being recorded 
more than once (D1). 


There is a lack of control to test for timely recording (D2). D 


DEFICIENCIES 


Assessed control risk Med. 











*Because there are no cash sales, classification is not a problem. 

C = Control; D = Significant Deficiency or Material Weakness. 

Note: This matrix was developed using an internal control questionnaire, part of which is included in Figure 10-4 (p. 306), as well as 
flowcharts and other documentation of the auditor's understanding of internal control. 
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Identify Deficiencies, 
Significant Deficiencies, 
and Material Weaknesses 1. 


310 


faves Evaluating Significant Control Deficiencies ) 











SIGNIFICANCE 


Material 


Material Weakness 
LIKELIHOOD 





Remote Reasonably Possible 


Immaterial 


Source: Adapted from Michael Ramos, “Section 404 Compliance in the Annual Report,” Journal of 
Accountancy, October 2004, pp. 43-48. 








2. 


3. 


functions. A design deficiency exists if a necessary control is missing or not 
properly designed. An operation deficiency exists if a well-designed control 
does not operate as designed or if the person performing the control is 
insufficiently qualified or authorized. 

Significant deficiency. A significant deficiency exists if one or more control 
deficiencies exist that is less severe than a material weakness (defined below), 
but important enough to merit attention by those responsible for oversight of 
the company’s financial reporting. 

Material weakness. A material weakness exists if a significant deficiency, by 
itself, or in combination with other significant deficiencies, results in a reason- 
able possibility that internal control will not prevent or detect material financial 


statement See ona timely basis. 
Apag@er I a A REESKontrol deficiency or deficiencies are 


a material weakness, they must be evaluated along two dimensions: likelihood 
and significance. The horizontal line in Figure 10-6 depicts the likelihood of a 
misstatement resulting from the significant deficiency, while the vertical line 
depicts its significance. If there is more than a reasonable possibility (likelihood) 
that a material misstatement (significance) could result from the significant 
deficiency or deficiencies, then it is considered a material weakness. 


A five-step approach can be used to identify deficiencies, significant deficiencies, and 
material weaknesses: 


Identify existing controls. Because deficiencies and material weaknesses are the 
absence of adequate controls, the auditor must first know which controls exist. 
The methods for identifying controls have already been discussed. 

Identify the absence of key controls. Internal control questionnaires, flowcharts, 
and walkthroughs are useful tools to identify where controls are lacking and the 
likelihood of misstatement is therefore increased. It is also useful to examine the 
control risk matrix, such as the one in Figure 10-5 (p. 309), to look for objectives 
where there are no or only a few controls to prevent or detect misstatements. 
Consider the possibility of compensating controls. A compensating control is one 
elsewhere in the system that offsets the absence of a key control. A common example 
in a small business is the active involvement of the owner. When a compensating 
control exists, there is no longer a significant deficiency or material weakness. 
Decide whether there is a significant deficiency or material weakness. The likeli- 
hood of misstatements and their materiality are used to evaluate if there are 
significant deficiencies or material weaknesses. 

Determine potential misstatements that could result. This step is intended to 
identify specific misstatements that are likely to result because of the significant 
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deficiency or material weakness. The importance of a significant deficiency or 
material weakness is directly related to the likelihood and materiality of 
potential misstatements. 


Figure 10-7 for Hillsburg Hardware includes two significant deficiencies but no material 
weaknesses. 


Associate Significant Deficiencies and Material Weaknesses with Related 
Audit Objectives The same as for controls, each significant deficiency or material 
weakness can apply to one or more related audit objectives. In the case of Hillsburg 
Hardware in Figure 10-5 (p. 309), there are two significant deficiencies, and each 
applies to only one transaction-related objective. The significant deficiencies are 
shown in the body of the figure by a D in the appropriate objective column. 


Assess Control Risk for Each Related Audit Objective After controls, sig- 
nificant deficiencies, and material weaknesses are identified and associated with 
transaction-related audit objectives, the auditor can assess control risk for transaction- 
related audit objectives. This is the critical decision in the evaluation of internal control. 
The auditor uses all of the information discussed previously to make a subjective 
control risk assessment for each objective. There are different ways to express this 
assessment. Some auditors use a subjective expression such as high, moderate, or low. 
Others use numerical probabilities such as 1.0, 0.6, or 0.2. 

Again, the control risk matrix is a useful tool for making the assessment. Referring to 
Figure 10-5, the auditor assessed control risk for each objective for Hillsburg’s sales by 
reviewing each column for pertinent controls and significant deficiencies and asking, 
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Potential Effect on 

Deficiency Compensating Control Misstatement Materiality Audit Evidence 
1. Prenumbered None Duplicate Potentially Use audit software to 
sales invoices are sales material search for duplicate 
not accounted for. recorded sales invoice numbers. 


Perform analytical 
procedures of sales and 
gross margin. 


Consider the implication 
for the audit of internal 








control. 
2. There is no Unmatched 
independent and unrecorded 
comparison of shippers are N/A N/A N/A 
dates on reviewed 
shipping weekly. 
documents to 
dates recorded. 
<4 
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Communications To 
Those Charged With 
Governance and 
Management Letters 


“What is the likelihood that a material misstatement would not be prevented or 
detected, or corrected if it occurred, by these controls, and what is the effect of the 
deficiencies or weaknesses?” If the likelihood is low, then control risk is low, and so 
forth. Figure 10-5 (p. 309) for Hillsburg Hardware shows that all objectives are assessed 
as low except occurrence and timing, which are medium. 

This assessment is not the final one. Before making the final assessment at the end of 
the integrated audit, the auditor will test controls and perform substantive tests. These 
procedures can either support the preliminary assessment or cause the auditor to make 
changes. In some cases, management can correct deficiencies and material weaknesses 
before the auditor does significant testing, which may permit a reduction in control risk. 

After a preliminary assessment of control risk is made for sales and cash receipts, 
the auditor can complete the three control risk rows of the evidence-planning work- 
sheet that was introduced in Chapter 9 on page 272. If tests of controls results do not 
support the preliminary assessment of control risk, the auditor must modify the 
worksheet later. Alternatively, the auditor can wait until tests of controls are done to 
complete the three control risk rows of the worksheet. An evidence-planning worksheet 
for Hillsburg Hardware with the three rows for control risk completed is illustrated in 
Figure 15-6 on page 499. 


As part of understanding internal control and assessing control risk, the auditor is 
required to communicate certain matters to those charged with governance. This 
information and other recommendations about controls are also often communicated 
to management. 


Communications to Those Charged With Governance The auditor must 
communicate significant deficiencies and material weaknesses in writing to those 
charged with governance as soon as the auditor becomes aware of their existence. The 
communication is usually addressed to the audit committee and to management. 
TimelApPagoakRhDihy vik aN Gen an opportunity to address control 
deficiencies before management’s report on internal control must be issued. In some 
instances, deficiencies can be corrected sufficiently early such that both management 
and the auditor can conclude that controls are operating effectively as of the balance 
sheet date. Regardless, these communications must be made no later than 60 days 
following the audit report release. 


Management Letters In addition to these matters, auditors often identify less 
significant internal control-related issues, as well as opportunities for the client to 
make operational improvements. These should also be communicated to the client. 
The form of communication is often a separate letter for that purpose, called a 
management letter. Although management letters are not required by auditing 
standards, auditors generally prepare them as a value-added service of the audit. 


TESTS OF CONTROLS 


OBJECTIVE 10-6 


Describe the process of 


designing and performing 
tests of controls. 





Purpose of 
Tests of Controls 


We’ve examined how auditors link controls, significant deficiencies, and material 
weaknesses in internal control to related audit objectives to assess control risk for each 
objective. Now we'll address how auditors test those controls that are used to support a 
control risk assessment. For example, each key control in Figure 10-5 (p. 309) that the 
auditor intends to rely on to support a control risk of medium or low must be 
supported by sufficient tests of controls. We will deal with tests of controls for both 
audits of internal control for financial reporting and audits of financial statements. 


Assessing control risk requires the auditor to consider both the design and operation of 
controls to evaluate whether they will likely be effective in meeting related audit 
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objectives. During the understanding phase, the auditor will have already gathered 
some evidence in support of both the design of the controls and their implementation 
by using procedures to obtain an understanding (see pages 302-307). In most cases, the 
auditor will not have gathered enough evidence to reduce assessed control risk to a 
sufficiently low level. The auditor must therefore obtain additional evidence about the 
operating effectiveness of controls throughout all, or at least most, of the period under 
audit. The procedures to test effectiveness of controls in support of a reduced assessed 
control risk are called tests of controls. 

If the results of tests of controls support the design and operation of controls as 
expected, the auditor uses the same assessed control risk as the preliminary assessment. 
If, however, the tests of controls indicate that the controls did not operate effectively, 
the assessed control risk must be reconsidered. For example, the tests may indicate that 
the application of a control was curtailed midway through the year or that the person 
applying it made frequent misstatements. In such situations, the auditor uses a higher 
assessed control risk, unless compensating controls for the same related audit 
objectives are identified and found to be effective. Of course, the auditor must also 
consider the impact of those controls that are not operating effectively on the auditor’s 
report on internal control. 


The auditor is likely to use four types of procedures to support the operating effective- 
ness of internal controls. Management’s testing of internal control will likely include 
the same types of procedures. The four types of procedures are as follows: 


1. Make inquiries of appropriate client personnel. Although inquiry is not a highly 
reliable source of evidence about the effective operation of controls, it is still 
appropriate. For example, to determine that unauthorized personnel are 
denied access to computer files, the auditor may make inquiries of the person 
who controls the computer library and of the person who controls online 
access security password assf\i o PDF Enhancer 

2. Examine documents, records, and réports. Many controls leave a clear trail of 
documentary evidence that can be used to test controls. Suppose, for example, 
that when a customer order is received, it is used to create a customer sales 
order, which is approved for credit. (See the first and second key controls in 
Figure 10-5 on page 309.) Then the customer order is attached to the sales 
order as authorization for further processing. The auditor can test the control 
by examining the documents to make sure that they are complete and properly 
matched and that required signatures or initials are present. 

3. Observe control-related activities. Some controls do not leave an evidence trail, 
which means that it is not possible to examine evidence that the control was 
executed at a later date. For example, separation of duties relies on specific 
persons performing specific tasks, and there is typically no documentation 
of the separate performance. (See the third key control in Figure 10-5.) For 
controls that leave no documentary evidence, the auditor generally observes 
them being applied at various points during the year. 

4. Reperform client procedures. There are also control-related activities for which 
there are related documents and records, but their content is insufficient for the 
auditor’s purpose of assessing whether controls are operating effectively. For 
example, assume that prices on sales invoices are obtained from the master price 
list, but no indication of the control is documented on the sales invoices. (See the 
seventh key control in Figure 10-5.) In these cases, it is common for the auditor 
to reperform the control activity to see whether the proper results were 
obtained. For this example, the auditor can reperform the procedure by tracing 
the sales prices to the authorized price list in effect at the date of the transaction. 
If no misstatements are found, the auditor can conclude that the procedure is 
operating as intended. 
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Procedures for 
Tests of Controls 
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Extent of Procedures 


Relationship Between 
Tests of Controls and 

Procedures to Obtain 

an Understanding 


The extent to which tests of controls are applied depends on the preliminary assessed 
control risk. If the auditor wants a lower assessed control risk, more extensive tests of 
controls are applied, both in terms of the number of controls tested and the extent of 
the tests for each control. For example, if the auditor wants to use a low assessed 
control risk, a larger sample size for documentation, observation, and reperformance 
procedures should be applied. The extent of testing also depends on the frequency of 
the operation of the controls, and whether it is manual or automated. 


Reliance on Evidence from the Prior Year’s Audit When auditors plan to use 
evidence about the operating effectiveness of internal control obtained in prior audits, 
auditing standards require tests of the controls’ effectiveness at least every third year. If 
auditors determine that a key control has been changed since it was last tested, they 
should test it in the current year. When there are a number of controls tested in prior 
audits that have not been changed, auditing standards require auditors to test some of 
those controls each year to ensure there is a rotation of controls testing throughout the 
three year period. 


Testing of Controls Related to Significant Risks Significant risks are those risks 
that the auditor believes require special audit consideration. When the auditor’s risk 
assessment procedures identify significant risks, the auditor is required to test the 
operating effectiveness of controls that mitigate these risks in the current year audit, if 
the auditor plans to rely on those controls to support a control risk assessment below 
100%. The greater the risk, the more audit evidence the auditor should obtain that 
controls are operating effectively. 


Testing Less Than the Entire Audit Period Recall that management’s report on 
internal control deals with the effectiveness of internal controls as of the end of the 
fiscal year. PCAOB Standard 5 requires the auditor to perform tests of controls that are 
adequate to determine whether controls are operating effectively at year-end. The 
timnApagaitPDEs TARAS efore depend on the nature of the 
controls and when the company uses them. For controls that are applied throughout 
the accounting period, it is usually practical to test them at an interim date. The auditor 
will then determine later if changes in controls occurred in the period not tested and 
decide the implication of any change. Controls dealing with financial statement prepa- 
ration occur only quarterly or at year-end and must therefore also be tested at quarter 
and year-end. 


There is a significant overlap between tests of controls and procedures to obtain an 
understanding. Both include inquiry, documentation, and observation. There are two 
primary differences in the application of these common procedures. 


1. In obtaining an understanding of internal control, the procedures to obtain an 
understanding are applied to all controls identified during that phase. Tests of 
controls, on the other hand, are applied only when the assessed control risk has 
not been satisfied by the procedures to obtain an understanding. 

2. Procedures to obtain an understanding are performed only on one or a few 
transactions or, in the case of observations, at a single point in time. Tests of 
controls are performed on larger samples of transactions (perhaps 20 to 100), 
and often, observations are made at more than one point in time. 


For key controls, tests of controls other than reperformance are essentially an 
extension of procedures to obtain an understanding. Therefore, assuming the auditors 
plan to obtain a low assessed control risk from the beginning of the integrated audit, 
they will likely combine both types of procedures and perform them simultaneously. 
Table 10-3 illustrates this concept in more detail. One option is to perform the audit 
procedures separately, as shown in Table 10-3, where minimum procedures to obtain 
an understanding of design and operation are performed, followed by additional tests 
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Relationship of Assessed Control Risk and Extent of Procedures 


TABLE 10-3 


Type of Procedure 
Inquiry 





Assessed Control Risk 





High Level: Procedures to Obtain an Understanding Lower Level: Tests of Controls* 





Yes—some 

Yes—using sampling 
Yes—at multiple times 
Yes—using sampling 


Yes—extensive 
Documentation Yes—with transaction walk-through 
Observation Yes—with transaction walk-through 


Reperformance No 
X 











*Note: In an integrated audit for a public company, the auditor will likely combine procedures to obtain an understanding with tests of controls and perform them 
simultaneously. 


of controls. An alternative is to combine both columns and do them simultaneously. The 
same amount of evidence is accumulated in the second approach, but more efficiently. 

The determination of the appropriate sample size for tests of controls is an 
important audit decision. That topic is covered in Chapter 15. 


DECIDE PLANNED DETECTION RISK AND DESIGN SUBSTANTIVE TESTS 


We’ve focused on how auditors assess control risk for each related audit objective and 
support control risk assessments with tests of controls. The completion of these 





Obtain and document 


activities is sufficient for the audit of internal control over financial reporting, even 
though the report will not be finalized until the auditor completes the audit of financial 
statements. 

The auditor uses the control ApagenPDRs Bnhancenttols to 
determine planned detection risk and related substantive tests for the audit of financial 
statements. The auditor does this by linking the control risk assessments to the balance- 
related audit objectives for the accounts affected by the major transaction types and to 
the four presentation and disclosure audit objectives. The appropriate level of detection 
risk for each balance-related audit objective is then decided using the audit risk model. 
The relationship of transaction-related audit objectives to balance-related audit 
objectives and the selection and design of audit procedures for substantive tests of 
financial statement balances are discussed and illustrated in Chapter 13. 


understanding of 
internal control 
design and operation 








Assess control risk 











Design, perform, 
and evaluate 
tests of controls 














Decide planned 
detection risk and 
substantive tests 











SECTION 404 REPORTING ON INTERNAL CONTROL 


OBJECTIVE 10-7 





Based on the auditor’s assessment and testing of internal control, the auditor is 
required to prepare an audit report on internal control over financial reporting for 
accelerated filer public companies subject to Section 404(b) reporting requirements. 
As described in Chapter 3, the auditor may issue separate or combined audit reports 
on the financial statements and on internal control over financial reporting. An 
example of a separate report is illustrated in Figure 3-3 on page 50. 

The scope of the auditor’s report on internal control is limited to obtaining 
reasonable assurance that material weaknesses in internal control are identified. Thus, 
the audit is not designed to detect deficiencies in internal control that individually, or 
in the aggregate, are less severe than a material weakness. The distinction between 
deficiencies, significant deficiencies, and material weaknesses was discussed earlier. 


Understand Section 404 


requirements for auditor 
reporting on internal control. 





Unqualified Opinion The auditor will issue an unqualified opinion on internal Types of Opinions 


control over financial reporting when two conditions exist: 
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* There are no identified material weaknesses. 
* There have been no restrictions on the scope of the auditor’s work. 


Adverse Opinion When one or more material weaknesses exist, the auditor must 
express an adverse opinion on the effectiveness of internal control. The most common 
cause of an adverse opinion in the auditor’s report on internal control is when 
management identified a material weakness in its report. 


Qualified or Disclaimer of Opinion A scope limitation requires the auditor to 
express a qualified opinion or a disclaimer of opinion on internal control over financial 
reporting. This type of opinion is issued when the auditor is unable to determine if 
there are material weaknesses, due to a restriction on the scope of the audit of internal 
control over financial reporting or other circumstances where the auditor is unable to 
obtain sufficient appropriate evidence. 

Because the audit of the financial statements and the audit of internal control over 
financial reporting are integrated, the auditor must consider the results of audit pro- 
cedures performed to issue the audit report on the financial statements when issuing 
the audit report on internal control. For example, assume the auditor identifies a 
material misstatement in the financial statements that was not initially identified by 
the company’s internal controls. The following four responses to this finding are 
likely: 

1. Because there is a material error in the financial statements, the auditor should 
consider whether the misstatement indicates the existence of a material weakness. 
Determining if the misstatement is in fact a material weakness or a significant 
deficiency involves judgment and depends on the nature and size of the mis- 
statement. 

2. The auditor can issue an unqualified opinion on the financial statements if the 
client adjusts the statements to correct the misstatement prior to issuance. 


Apago PDF Enhancer 


ites oC) Partial Section 404 Auditor Report on Internal Control when 
Material Weaknesses Exist (bold added)* 





Report of Independent Registered Public Accounting Firm 


[Definition of material weakness paragraph] 


A material weakness is a deficiency, or combination of deficiencies, in internal control over 
financial reporting, such that there is a reasonable possibility that a material misstatement of the 
company’s interim or annual financial statements will not be prevented or detected on a timely 
basis. 


[Opinion paragraph] 


In our opinion, because of the effect of the material weakness described above on the 
achievement of the objectives of the control criteria, Kincannon Company has not 
maintained effective internal control over financial reporting as of December 31, 2011, based on 
criteria established in /nternal Control—Integrated Framework issued by the Committee of 
Sponsoring Organizations of the Treadway Commission (COSO). 


Kellum & Kellum, LLP 
Brentwood, Tennessee 








February 2, 2012 
€ y 





*The introductory, scope, definition of internal control, inherent limitations of internal control, and reference to the 
opinion on the financial statements paragraphs use standard wording and are not included. The explanatory paragraph 
describing the nature of the weakness is also not included. 
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3. Management is likely to change its report on internal control to assert that the 
controls are not operating effectively. 

4. The auditor must issue an adverse opinion on internal control over financial 
reporting if the deficiency is considered a material weakness. 


Figure 10-8 illustrates the definition of material weakness and opinion paragraphs 
from an auditor’s separate report on internal control when the auditor expresses an 
adverse opinion on the effectiveness of internal control over financial reporting 
because of the existence of a material weakness. If the material weakness has not been 
included in management’s assessment, the report should note that a material weakness 
has been identified but not included in management’s assessment. 


EVALUATING, REPORTING, AND TESTING INTERNAL CONTROL 


FOR NONPUBLIC COMPANIES 





The chapter to this point has discussed internal control and an integrated audit of 
internal control and financial statements for public companies under the Sarbanes— 
Oxley Act. Most of the concepts in the chapter also apply equally to nonpublic 
companies. This section deals with the differences in evaluating, reporting, and testing 
internal control for nonpublic companies. 

A common misconception of nonpublic companies is that they are automatically 
small and less sophisticated than public companies. While it is true that many non- 
public companies are small, others are large and have sophisticated internal controls. 
This section assumes there is considerable variation in the size and complexity of the 
controls in nonpublic companies. 

The following identifies and discusses the most important differences in evaluating, 


reporting, and testing internal cnt ApagolliPDBaknhance r 


1. Reporting requirements. In audits of nonpublic companies, there is no requirement 
for an audit of internal control over financial reporting. The auditor, therefore, focuses 
on internal control only to the extent needed to do a quality audit of financial statements. 
Attestation standards provide guidance when nonpublic entities engage the auditor to 
conduct an examination of the design and operating effectiveness of internal controls 
over financial reporting that is integrated with the audit of the financial statements. 
The approach for an integrated audit of a nonpublic company under the attestation 
standards is consistent with the approach to an integrated audit of a public company 
under PCAOB Standard 5. 

The auditor is required by auditing standards to issue a written report on significant 
deficiencies and material weaknesses in internal control to those charged with govern- 
ance and management, the same as for public companies. The report in Figure 10-9 
(p. 318) is used in the audit of a nonpublic company. 

2. Extent of required internal controls. Management, not the auditor, is responsible 
for establishing adequate internal controls in nonpublic companies, just like manage- 
ment for public companies. If the control environment or documentation is inadequate, 
the auditor may decide to withdraw from the engagement or issue a disclaimer of 
opinion on the financial statements. Also, well-run nonpublic companies understand 
the importance of effective controls to reduce the likelihood of errors and fraud, and to 
improve effectiveness and efficiency. 

A company’s size has a significant effect on the nature of internal control and the 
specific controls that are implemented. Obviously, it is more difficult to establish 
adequate separation of duties in a small company. It is also unreasonable to expect a 
small firm to have internal auditors. However, if the various components of internal 
control are examined, it becomes apparent that most are applicable to both large and 


OBJECTIVE 10-8 


Describe the differences i 


evaluating, reporting, and 





n 


testing internal control for 


nonpublic companies. 
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Letter Regarding Significant Deficiencies in Internal Control 





JOHNSON AND SEYGROVES 
Certified Public Accountants 
2016 Village Boulevard 
Troy, Michigan 48801 


February 12, 2012 


Audit Committee 

Airtight Machine Company 
1729 Athens Street 

Troy, MI 48801 


In planning and performing our audit of the financial statements of Airtight Machine 
Company as of and for the year ended December 31, 2011, in accordance with auditing 
standards generally accepted in the United States of America, we considered Airtight 
Machine Company's internal control over financial reporting (internal control) as a basis for 
designing our audit procedures for the purpose of expressing our opinion on the financial 
statements, but not for the purpose of expressing an opinion on the effectiveness of Airtight 
Machine Company's internal control. Accordingly, we do not express an opinion on the 
effectiveness of the company’s internal control. 


Our consideration of internal control was for the limited purpose described in the 
preceding paragraph and would not necessarily identify all deficiencies in internal control 
that might be significant deficiencies or material weaknesses. However, as discussed 
below, we identified certain deficiencies in internal control that we consider to be 
significant deficiencies. 


A control deficiency exists when the design or operation of a control does not allow 
management or employees, in the normal course of performing their assigned functions, to 
prevent or detect misstatements on a timely basis. A significant deficiency is a control 
deficiency, or combination of control deficiencies, that adversely affects the entity’s ability to 
initiate, authorize, record, process, or report financial data reliably in accordance with 
generally accepted accounting principles that is less severe than a material weakness, yet 
important enough to merit attention by those charged with governance. We consider the 
following deficiency to be a significant deficiency in internal control: 


There is a lack of independent verification of the key entry of the customer's name, 
product number, quantity shipped, prices used, and the related mathematical 
extensions on sales invoices and credit memos. As a consequence, errors in these 
activities could occur and remain uncorrected, adversely affecting both recorded net 
sales and accounts receivable. This deficiency is significant because of the large size of 
the average sale at Airtight Machine Company. 


This communication is intended solely for the information and use of management and the 
board of directors and is not intended to be and should not be used by anyone other than 
these specified parties. 


Very truly yours, 


fohnson and Seygroues 


Johnson and Seygroves, CPAs 











small companies. Even though it may not be common to formalize policies in manuals, 
it is certainly possible for a small company to have (1) competent, trustworthy personnel 
with clear lines of authority; (2) proper procedures for authorization, execution, and 
recording of transactions; (3) adequate documents, records, and reports; (4) physical 
controls over assets and records; and, to a limited degree, (5) independent checks on 
performance. 

A major control available in a small company is the knowledge and concern of the 
top operating person, who is often an owner—manager. A personal interest in the 
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organization and a close relationship with personnel make careful evaluation of the 
competence of the employees and the effectiveness of the overall system possible. For 
example, internal control can be significantly strengthened if the owner conscien- 
tiously performs such duties as signing all checks after carefully reviewing supporting 
documents, reviewing bank reconciliations, examining accounts receivable statements 
sent to customers, approving credit, examining all correspondence from customers and 
vendors, and approving bad debts. 

Some nonpublic companies are unwilling to implement ideal internal control 
systems because of costs. For a small nonpublic company, hiring additional personnel 
might achieve only small improvements in the reliability of accounting data. Instead, it 
is often less expensive for nonpublic companies to have auditors do more extensive 
auditing than to incur higher internal control costs. 

3. Extent of understanding needed. Auditing standards require that the auditor obtain 
a sufficient understanding of internal control to assess control risk. In practice, the 
procedures to gain an understanding of internal control vary considerably from client to 
client. For smaller nonpublic clients, many auditors obtain a level of understanding suffi- 
cient only to assess whether the statements are auditable and to evaluate the control 
environment for management’s attitude toward internal control. If the auditor deter- 
mines that the overall attitude of management about the importance of internal control is 
inadequate to support the other four components of internal control, the auditor assesses 
control risk at maximum and designs and performs detailed substantive procedures. For 
larger clients, the understanding can be the same as that described for public companies. 

4. Assessing control risk. The most important difference in a nonpublic company 
in assessing control risk is the assessment of control risk at maximum for any or all 
control-related objectives when internal controls for the objective or objectives are 
nonexistent or ineffective. Because of the expectation that public companies should 
have effective internal controls for all significant transactions and accounts, there is an 
initial presumption that control Apago “PDE Eriparree pen 
statements. Thus, it is unlikely that a publictompany auditor will make a preliminary 
assessment of control risk at maximum. 

As with public company audits, it is useful for auditors to use a control risk matrix 
for nonpublic company audits. The same format suggested in Figure 10-5 (p. 309) is 
appropriate. 

5. Extent of tests of controls needed. The auditor will not perform tests of controls 
when the auditor assesses control risk at maximum because of inadequate controls. 
When control risk is assessed below the maximum for a nonpublic company, the 
auditor designs and performs a combination of tests of controls and substantive 
procedures to obtain reasonable assurance that the financial statements are fairly stated. 

In contrast, the number of controls tested by auditors to express an opinion on 
internal controls for a public company is significantly greater than that tested solely to 
express an opinion on the financial statements. This is illustrated in Figure 10-10 
(p. 320). To express an opinion on internal controls for a public company, the auditor 
obtains an understanding of and performs tests of controls for all significant account 
balances, classes of transactions, and disclosures and related assertions in the financial 
statements. Those controls might or might not be tested in a financial statement audit 
of a nonpublic company. 


SUMMARY 


This chapter focused on management’s and the auditor’s responsibility for understanding, 
evaluating, and testing internal control for an integrated audit of financial statements and 
internal control over financial reporting under Section 404 of the Sarbanes—Oxley Act and 
PCAOB requirements. To rely on a client’s internal controls to report on internal control 
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Differences in Scope of Controls Tested in an Audit of Internal 
Control and an Audit of Financial Statements 













Internal Controls Over Financial Reporting 














Internal Controls Used to Assess Control 
Risk Below Maximum 

















Controls that must be tested in an Controls that must be tested in an 
audit of internal controls audit of financial statements 





























over financial reporting and to reduce planned audit evidence for audits of financial 
statements, the auditor must first obtain an understanding of each of the five components 
of internal control. Knowledge about the design of the client’s control environment, risk 
assessment, control activities, information and communication, and monitoring activities 
and information about whether internal control components have been implemented 
assist the auditor in assessing control risk for each transaction-related audit objective. 

The chapter ended with a discussion of the differences in the audit of nonpublic 
companies because they are not subject to Section 404 and PCAOB requirements to 
report on internal control ah financial reporting. For nonpublic companies, auditors 
have the option of assessi igher level of control risk, depending on the quality of 
the iApagal “PDF aE ANCE Kiderations. 

The process followed by auditors in assessing control risk for integrated audits of finan- 
cial statements and internal control over financial reporting and audits of the financial 
statements only is summarized in Figure 10-11. 


ESSENTIAL TERMS 


Assessment of control risk—a measure of 
the auditor’s expectation that internal 
controls will neither prevent material 
misstatements from occurring nor detect 
and correct them if they have occurred; 
control risk is assessed for each trans- 
action-related audit objective in a cycle or 
class of transactions 

Chart of accounts—a listing of all the 
entity’s accounts, which classifies trans- 
actions into individual balance sheet and 
income statement accounts 
Compensating control—a control else- 
where in the system that offsets the absence 
of a key control 

Collusion—a cooperative effort among 
employees to steal assets or misstate records 
Control activities—policies and procedures, 
in addition to those included in the other 
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four components of internal control, that 
help ensure that necessary actions are taken 
to address risks in the achievement of the 
entity’s objectives; they typically include the 
following five specific control activities: (1) 
adequate separation of duties, (2) proper 
authorization of transactions and activities, 
(3) adequate documents and records, (4) 
physical control over assets and records, and 
(5) independent checks on performance 


Control deficiency—a deficiency in the 
design or operation of controls that does 
not permit company personnel to prevent 
or detect misstatements on a timely basis 


Control environment—the actions, policies, 
and procedures that reflect the overall 
attitudes of top management, directors, 
and owners of an entity about internal 
control and its importance to the entity 





Summary of Understanding Internal Control and Assessing Control Risk 





Integrated Audit of 
Financial Statements 
and Internal Control 


Financial Statement Audit over Financial Reporting 





Sufficient to audit 
internal control over PHASE 1 
financial reporting 


Sufficient to audit 
financial statements 


Obtain an understanding 
of internal control 
design and operation 








Varies depending on extent Decide control risk at Decide low for all objectives 

and effectiveness of controls the objective level for unless there are significant 

and the auditor's planned each transaction type deficiencies or material 

reliance on controls weaknesses PHASE 2 


Three alternatives 


Maximum Intermediate Low 











Varies depending Plan and perform tests Extensive tests for all 











on assessed level of controls and evaluate objectives 
of control risk results 
PHASE 3 
Revise for tests of Revise assessed control Revise for tests of controls 
controls results risk if appropriate results 
Likely to be more Plan detection risk and Likely to be less reliance on 
reliance on substantive perform substantive substantive tests due to 
tests, depending on tests considering control extensive tests of controls 
assessed control risk risk and other audit 
option selected risk model factors 
PHASE 4 





Must communicate 

in writing to those charged 
with governance describing 
significant deficiencies or 
material weaknesses. 


Issue internal control Must issue report on 

report or letter internal control over financial 
reporting and issue a written 
communication to audit 
committee describing 
significant deficiencies or 
material weaknesses 





| 











Control risk matrix—a methodology 
used to help the auditor assess control 
risk by matching key internal controls 
and internal control deficiencies with 
transaction-related audit objectives 


Entity-level controls—Controls that have 
a pervasive effect on the entity’s system 
of internal control; also referred to as 
“company-level controls” 


Flowchart—a diagrammatic represen- 
tation of the client’s documents and 
records and the sequence in which they 
are processed 


General authorization—companywide 
policies for the approval of all transactions 
within stated limits 
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Independent checks—internal control 
activities designed for the continuous 
internal verification of other controls 
Information and communication—the 
set of manual and/or computerized pro- 
cedures that initiates, records, processes, 
and reports an entity’s transactions and 
maintains accountability for the related 
assets 

Internal control—a process designed 
to provide reasonable assurance regard- 
ing the achievement of management’s 
objectives in the following categories: 
(1) reliability of financial reporting, 
(2) effectiveness and efficiency of opera- 
tions, and (3) compliance with applicable 
laws and regulations 
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Internal control questionnaire—a series 
of questions about the controls in each 
audit area used as a means of indicating 
to the auditor aspects of internal control 
that may be inadequate 


Key controls—controls that are expected 
to have the greatest effect on meeting the 
transaction-related audit objectives 


Management letter—an optional letter 
written by the auditor to a client’s 
management containing the auditor’s 
recommendations for improving any 
aspect of the client’s business 


Material weakness—a significant defi- 
ciency in internal control that, by itself, or 
in combination with other significant 
deficiencies, results in a reasonable possi- 
bility that a material misstatement of the 
financial statements will not be prevented 
or detected 


Monitoring—management’s ongoing and 
periodic assessment of the quality of inter- 
nal control performance to determine that 
controls are operating as intended and are 
modified when needed 


Narrative—a written description of a 
client’s internal controls, including the 


accordance with an applicable accounting 
framework 

Separation of duties—separation of the 
following activities in an organization: 
(1) custody of assets from accounting, (2) 
authorization from custody of assets, (3) 
operational responsibility from record 
keeping, and (4) IT duties from outside 
users of IT 

Significant deficiency—one or more con- 
trol deficiencies exist that is less severe 
than a material weakness, but important 
enough to merit attention by those 
responsible for oversight of the company’s 
financial reporting 

Significant risks—risks the auditor believes 
require special audit consideration; the 
auditor is required to test the operating 
effectiveness of controls that mitigate these 
risks in the current year audit if control 
risk is to be assessed below the maximum 
Specific authorization—case-by-case 
approval of transactions not covered by 
companywide policies 

Tests of controls—audit procedures to 
test the operating effectiveness of controls 
in support of reduced assessed control risk 


orien APago: PDFpoinhancerse charged with governance—the 


documents an@ records, and the relevant 
control procedures 


Procedures to obtain an understanding— 
procedures used by the auditor to gather 
evidence about the design and imple- 
mentation of specific controls 

Risk assessment—management’s identi- 
fication and analysis of risks relevant to 
the preparation of financial statements in 


person(s) with responsibility for over- 
seeing the strategic direction of the entity 
and its obligations related to the account- 
ability of the entity, including overseeing 
the financial reporting and disclosure 
process 

Walkthrough—the tracing of selected trans- 
actions through the accounting system to 
determine that controls are in place 


REVIEW QUESTIONS 


10-1 (Objective 10-1) Describe the three broad objectives management has when design- 
ing effective internal control. 

10-2 (Objective 10-1) Describe which of the three categories of broad objectives for 
internal controls are considered by the auditor in an audit of both the financial statements 
and internal control over financial reporting. 

10-3 (Objective 10-2) Section 404(a) of the Sarbanes—Oxley Act requires management to 
issue a report on internal control over financial reporting. Identify the specific Section 
404(a) reporting requirements for management. 

10-4 (Objective 10-2) What two aspects of internal control must management assess when 
reporting on internal control to comply with Section 404 of the Sarbanes—Oxley Act? 

10-5 (Objective 10-2) Chapter 8 introduced the eight parts of the planning phase of audits. 
Which part is understanding internal control and assessing control risk? What parts precede 
and follow that understanding and assessing control risk? 
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10-6 (Objectives 10-2, 10-4, 10-8) What is the auditor’s responsibility for obtaining an 
understanding of internal control? How does that responsibility differ for audits of public 
and nonpublic companies? 

10-7 (Objective 10-2) When performing an integrated audit of a public company, what are 
the auditor’s responsibilities related to internal control as required by PCAOB standards? 
10-8 (Objectives 10-2, 10-5) State the six transaction-related audit objectives. 

10-9 (Objectives 10-2, 10-3) Management must identify the framework used to evaluate 
the effectiveness of internal control over financial reporting. What framework is used by 
most U.S. public companies? 

10-10 (Objective 10-3) What are the five components of internal control in the COSO 
internal control framework? 

10-11 (Objective 10-3) What is meant by the control environment? What are the factors 
the auditor must evaluate to understand it? 

10-12 (Objective 10-3) What is the relationship among the five components of internal 
control? 

10-13 (Objective 10-3) List the types of specific control activities and provide one specific 
illustration of a control in the sales area for each control activity. 

10-14 (Objective 10-3) The separation of operational responsibility from record keeping is 
meant to prevent different types of misstatements than the separation of the custody of 
assets from accounting. Explain the difference in the purposes of these two types of 
separation of duties. 

10-15 (Objective 10-3) For each of the following, give an example of a physical control the 
client can use to protect the asset or record: 


1. Petty cash 5. Perishable tools 
2. Cash received by retail clerks 6. Manufacturing equipment 
3. Accounts receivable records 7. Marketable securities 


4, Raw material inventory Apago PDF Enhancer 
10-16 (Objective 10-3) Explain what is meant by independent checks on performance and 
give five specific examples. 


10-17 (Objective 10-4) Describe the four phases performed by the auditor when obtaining 
an understanding of internal control and assessing control risk. 


10-18 (Objective 10-4) What two aspects of internal control must the auditor assess when 
performing procedures to obtain an understanding of internal control? 


10-19 (Objective 10-4) What is a walkthrough of internal control? What is its purpose? 


10-20 (Objective 10-4) Describe how the nature of evidence used to evaluate the control 
environment differs from the nature of evidence used to evaluate control activities. 


10-21 (Objectives 10-5, 10-7) Distinguish a significant deficiency in internal control from 
a material weakness in internal control. How will the presence of one significant deficiency 
affect an auditor’s report on internal control under PCAOB standards? How will the 
presence of one material weakness affect an auditor’s report on internal control under 
PCAOB standards? 


10-22 (Objectives 10-3, 10-5) Frank James, a highly competent employee of Brinkwater 
Sales Corporation, had been responsible for accounting-related matters for two decades. 
His devotion to the firm and his duties had always been exceptional, and over the years, he 
had been given increased responsibility. Both the president of Brinkwater and the partner 
of an independent CPA firm in charge of the audit were shocked and dismayed to discover 
that James had embezzled more than $500,000 over a 10-year period by not recording 
billings in the sales journal and subsequently diverting the cash receipts. What major 
factors permitted the embezzlement to take place? 

10-23 (Objective 10-5) Jeanne Maier, CPA, believes that it is appropriate to obtain an 
understanding of internal control about halfway through the audit, after she is familiar 
with the client’s operations and the way the system actually works. She has found through 
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experience that filling out internal control questionnaires and flowcharts early in the 
engagement is not beneficial because the system rarely functions the way it is supposed to. 
Later in the engagement, the auditor can prepare flowcharts and questionnaires with relative 
ease because of the knowledge already obtained on the audit. Evaluate her approach. 
10-24 (Objectives 10-6, 10-8) Distinguish the auditor’s responsibility for testing controls in 
an integrated audit of a public company from the responsibility to test controls in an audit 
of a nonpublic company. 

10-25 (Objective 10-6) Describe why auditors generally evaluate entity-level controls 
before evaluating transaction-level controls. 

10-26 (Objective 10-6) During the prior-year audits of McKimmon Inc., a private company, 
the auditor did tests of controls for all relevant financial statement assertions. Some of the 
related controls are manual while others are automated. Describe the extent the auditor can 
rely on tests of controls performed in prior years. 

10-27 (Objective 10-6) The auditor’s risk assessment procedures identified several risks 
that the auditor deems to be significant risks. Several internal controls exist that are designed 
to mitigate the risks identified. Describe the auditor’s responsibilities for considering those 
controls in the current audit. 

10-28 (Objective 10-7) What two conditions must be present for the auditor to issue an 
unqualified opinion on internal control over financial reporting? What type of condition 
will cause the auditor to issue a qualified or disclaimer of opinion on internal control over 
financial reporting? 

10-29 (Objective 10-7) Describe the concept of an integrated audit of the financial state- 
ments and internal control required by PCAOB standards. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


10-30 Apags PDE ‘ens heer general questions about internal 


contro best'TeSponse. 
a. When considering internal control, an auditor must be aware of the concept of reason- 
able assurance, which recognizes that the 
(1) employment of competent personnel provides assurance that management’s control 
objectives will be achieved. 

(2) establishment and maintenance of internal control is an important responsibility 
of management and not of the auditor. 

(3) cost of internal control should not exceed the benefits expected to be derived therefrom. 

(4) separation of incompatible functions is necessary to ascertain that the internal 
control is effective. 

b. Actions, policies, and procedures that reflect the overall attitude of management, 
directors and owners of the entity about internal control relate to which of the following 
internal control components? 

(1) Control environment (3) Risk assessment 
(2) Information and communication (4) Monitoring 


c. Vendor account reconciliations are performed by three clerks in the accounts payable 
department on Friday of each week. The accounts payable supervisor reviews the 
completed reconciliations the following Monday to ensure they have been completed. 
The work performed by the supervisor is an example of which COSO component? 
(1) Control activities (3) Risk assessment 
(2) Information and communication (4) Monitoring 

d. What is the independent auditor’s principal purpose for obtaining an understanding 
of internal control and assessing control risk in a financial statement audit? 

(1) To comply with generally accepted accounting principles. 

(2) To obtain a measure of assurance of management’s efficiency. 

(3) To maintain a state of independence in mental attitude during the audit. 
(4) To determine the nature, timing, and extent of subsequent audit work. 
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10-31 (Objectives 10-5, 10-7) The following questions deal with deficiencies in internal 
control. Choose the best response. 
a. Which of the following is an example of an operation deficiency in internal control? 
(1) The company does not have a code of conduct for employees to consider. 
(2) The cashier has online ability to post write-offs to accounts receivable accounts. 
(3) Clerks who conduct monthly reconciliation of intercompany accounts do not 
understand the nature of misstatements that could occur in those accounts. 
(4) Management does not have a process to identify and assess risks on a recurring 
basis. 
b. A material weakness in internal control represents a control deficiency that 
(1) more than remotely adversely affects a company’s ability to initiate, authorize, 
record, process, or report external financial statements reliably. 
(2) results in a reasonable possibility that internal control will not prevent or detect 
material financial statement misstatements. 
(3) exists because a necessary control is missing or not properly designed. 
(4) reduces the efficiency and effectiveness of the entity’s operations. 
c. An auditor of a large public company identifies a material weakness in internal control. 
The auditor 
(1) will be unable to issue an unqualified opinion on the financial statements. 
(2) must issue a qualified or disclaimer of opinion on internal control over financial 
reporting. 
(3) may still be able to issue an unqualified opinion on internal control over financial 
reporting. 
(4) must issue an adverse opinion on internal control over financial reporting. 
d. When a nonpublic company auditor’s tests of controls identify deficiencies in internal 
control over financial reporting, the auditor 
(1) must communicate to management all deficiencies identified. 
(2) must communicate both signjficant deficien, sip erial weaknesses to those 
charged with governance. pago nnancer 
(3) may communicate orally or in writing to the board all significant deficiencies and 
material weaknesses identified. 
(4) must issue an adverse opinion on the financial statements. 


10-32 (Objectives 10-5, 10-6, 10-8) The following questions deal with assessing control 
risk in a financial statement audit. Choose the best response. 

a. The auditor’s tests of controls revealed that required approvals of cash disbursements 
were absent for a large number of sample transactions examined. Which of the follow- 
ing is least likely to be the appropriate auditor response? 

(1) The auditor will communicate the deficiency to those charged with governance. 

(2) The auditor will increase the planned detection risk. 

(3) The auditor will not select more sample items to audit. 

(4) The auditor will perform more extensive substantive tests surrounding cash dis- 
bursements. 

b. An auditor uses assessed control risk to 
(1) evaluate the effectiveness of the entity’s internal controls. 

(2) identify transactions and account balances where inherent risk is at the maximum. 

(3) indicate whether materiality thresholds for planning and evaluation purposes are 
sufficiently high. 

(4) determine the acceptable level of detection risk for financial statement assertions. 

c. On the basis of audit evidence gathered and evaluated, an auditor decides to increase 
assessed control risk from that originally planned. To achieve an audit risk level (AcAR) 
that is substantially the same as the planned audit risk level (AAR), the auditor will 
(1) increase inherent risk. 

(2) increase materiality levels. 
(3) decrease substantive testing. 
(4) decrease planned detection risk. 
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d. Which of the following statements about tests of controls is incorrect? Tests of controls 

(1) must be done in every audit of an accelerated filer public company’s financial 
statements. 

(2) provide persuasive evidence that a material misstatement exists when the auditor 
determines that the control is not being consistently applied. 

(3) are often based on the same types of audit techniques used to gain an understanding 
of internal controls, except the extent of testing is generally greater when testing controls. 

(4) allow a reduction in the extent of substantive testing, as long as the results of the 
tests of controls are equal to or better than what the auditor expects. 


DISCUSSION QUESTIONS AND PROBLEMS 


10-33 (Objective 10-3) Following are descriptions of ten internal controls. 

1. The company’s computer systems track individual transactions and automatically 
accumulate transactions to create a trial balance. 

2. The company must receive university transcripts documenting all college degrees 
earned before an individual can begin their first day of employment with the company. 

3. Senior management obtains data about external events that might affect the entity 
and evaluates the impact of that information on its existing accounting processes. 

4, Each quarter, department managers are required to perform a self-assessment of the 
department’s compliance with company policies. Reports summarizing the results 
are to be submitted to the senior executive overseeing that department. 

5. Before a cash disbursement can be processed, all payee information must be verified 
by matching the payee to the company’s approved vendor listing. 

6. The system automatically reconciles the detailed accounts receivable subsidiary 
ledger to the accounts receivable general ledger account on daily basis. 

7. The company has developed a detailed series of accounting policy and procedures 
Apa ' PDE“ Heal SHEEE to employees about how controls are 

0 Be performed. 

8. The company has an organizational chart that establishes the formal lines of reporting 
and authorization protocols. 

9. The compensation committee reviews compensation plans for senior executives to 
determine if those plans create unintended pressures that might lead to distorted 
financial statements. 

10. On a monthly basis, department heads review a budget to actual performance report 
and investigate unusual differences. 


Required — Indicate which of the five COSO internal control components is best represented by each 
internal control. 
a. Control environment d. Information and communication 
b. Risk assessment e. Monitoring 
c. Control activities 


10-34 (Objectives 10-3, 10-4, 10-5, 10-6) Each of the following internal controls has been 
taken from a standard internal control questionnaire used by a CPA firm for assessing 
control risk in the payroll and personnel cycle. 

1. Approval of department head or foreman on time cards is required before preparing 
payroll. 

2. All prenumbered time cards are accounted for before beginning data entry for 
preparation of checks. 

3. The computer calculates gross and net pay based on hours inputted and information 
in employee master files, and payroll accounting personnel double-check the mathe- 
matical accuracy on a test basis. 

4. All voided and spoiled payroll checks are properly mutilated and retained. 

5. Human resources policies require an investigation of an employment application 
from new employees. Investigation includes checking the employee’s background, 
former employers, and references. 
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. The payroll accounting software application will not accept data input for an employee 
number not contained in the employee master file. 

. Persons preparing the payroll do not perform other payroll duties (timekeeping, dis- 
tribution of checks) or have access to payroll data master files or cash. 

. Written termination notices, with properly documented reasons for termination, 
and approval of an appropriate official are required. 

. All checks not distributed to employees are returned to the treasurer for safekeeping. 

. Online ability to add employees or change pay rates to the payroll master file is 
restricted via passwords to authorized human resource personnel. 


. For each internal control, identify the type(s) of specific control activity (activities) to 


which it applies (such as adequate documents and records or physical control over 
assets and records). 


. For each internal control, identify the transaction-related audit objective(s) to which 


it applies. 


. For each internal control, identify a specific misstatement that is likely to be prevented 


if the control exists and is effective. 


. For each control, list a specific misstatement that could result from the absence of the 


control. 


. For each control, identify one audit test that the auditor could use to uncover mis- 


statements resulting from the absence of the control. 


10-35 (Objectives 10-3, 10-4, 10-5) The following are misstatements that have occurred in 
Fresh Foods Grocery Store, a retail and wholesale grocery company: 


1 


a. 


b. 


(on 


. The incorrect price was used on sales invoices for billing shipments to customers 
because the wrong price was entered into the computer master file of prices. 

. A vendor invoice was paid even though no merchandise was ever received. The 
accounts payable software application does not require the input of a valid receiving 
report number before payment can be made. 

. Employees in the receiving depApaGeOsidR DE- Enhances when 
a shipment of meat was received, the receiving department filled out a receiving report 
and forwarded it to the accounting department for the amount of goods actually 
received. At that time, two sides of beef were put in an employee’s pickup truck rather 
than in the storage freezer. 

. During the physical count of inventory of the retail grocery, one counter wrote down 
the wrong description of several products and miscounted the quantity. 

. A salesperson sold an entire carload of lamb at a price below cost because she did not 
know the cost of lamb had increased in the past week. 

. A vendor’s invoice was paid twice for the same shipment. The second payment arose 
because the vendor sent a duplicate copy of the original 2 weeks after the payment 
was due. 

. On the last day of the year, a truckload of beef was set aside for shipment but was not 
shipped. Because it was still on hand the inventory was counted. The shipping docu- 
ment was dated the last day of the year, so it was also included as a current-year sale. 

. An accounts payable clerk processed payments to himself by adding a fictitious 
vendor address to the approved vendor master file. 


For each misstatement, identify one or more types of controls that were absent. 


For each misstatement, identify the transaction-related audit objectives that have not 
been met. 


For each misstatement, suggest a control to correct the deficiency. 


10-36 (Objective 10-3) The division of the following duties is meant to provide the best 
possible controls for the Meridian Paint Company, a small wholesale store: 


Tl 
12 


3 


. Approve credit for customers included in the customer credit master file. 

. Input shipping and billing information to bill customers, record invoices in the sales 
journal, and update the accounts receivable master file. 

. Open the mail and prepare a prelisting of cash receipts. 
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Required 


Required 


+4. Enter cash receipts data to prepare the cash receipts journal and update the accounts 
receivable master file. 
+5. Prepare daily cash deposits. 
+6. Deliver daily cash deposits to the bank. 
+7. Assemble the payroll time cards and input the data to prepare payroll checks and 
update the payroll journal and payroll master files. 
+8. Sign payroll checks. 
+9. Assemble supporting documents for general and payroll cash disbursements. 
+10. Sign general cash disbursement checks. 
+11. Input information to prepare checks for signature, record checks in the cash dis- 
bursements journal, and update the appropriate master files. 
+12. Mail checks to suppliers and deliver checks to employees. 
13. Cancel supporting documents to prevent their reuse. 
14. Update the general ledger at the end of each month and review all accounts for un- 
expected balances. 
15. Reconcile the accounts receivable master file with the control account and review 
accounts outstanding more than 90 days. 
16. Prepare monthly statements for customers by printing the accounts receivable 
master file; then mail the statements to customers. 
17. Reconcile the monthly statements from vendors with the accounts payable master 
file. 
18. Reconcile the bank account. 


You are to divide the accounting-related duties 1 through 18 among Robert Smith, James 
Cooper, and Bill Miller. All of the responsibilities marked with a dagger are assumed to take 
about the same amount of time and must be divided equally between Smith and Cooper. 
Both employees are equally competent. Miller, who is president of the company, is not 
willing to perform any functions designated by a dagger and will perform only a maximum 
of two of the other functions.* 


10.37 AR age PDF, Enha Hoer and Vera Collier are friends who are 


employed by different CPA firms. One day during lunch they are discussing the importance 
of internal control in determining the amount of audit evidence required for an engage- 
ment. Pherson expresses the view that internal control must be evaluated carefully in all 
companies, regardless of their size or whether they are publicly held, in a similar manner. 
His CPA firm requires a standard internal control questionnaire on every audit as well as 
a flowchart of every transaction area. In addition, he says the firm requires a careful 
evaluation of the system and a modification in the evidence accumulated based on the 
controls and deficiencies in the system. 

Collier responds by saying she believes that internal control cannot be adequate in many 
of the small companies she audits; therefore, she simply ignores internal control and acts 
under the assumption of inadequate controls. She goes on to say, “Why should I spend a lot 
of time obtaining an understanding of internal control and assessing control risk when I 
know it has all kinds of weaknesses before I start? I would rather spend the time it takes to 
fill out all those forms in testing whether the statements are correct.” 


a. Express in general terms the most important difference between the nature of the 
potential controls available for large and small companies. 


b. Criticize the positions taken by Pherson and Collier, and express your own opinion 
about the similarities and differences that should exist in understanding internal 
control and assessing control risk for different-sized companies. 


c. Discuss whether Collier’s approach is acceptable under existing auditing standards for 
either public or nonpublic companies. 


d. Describe what additional procedures Pherson must perform if auditing the financial 
statements of a public company. 


*AICPA adapted. 
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10-38 (Objectives 10-3, 10-5) The following are partial descriptions of internal controls for 
companies engaged in the manufacturing business: 

1. When Mr. Clark orders materials, he sends a duplicate purchase order to the receiving 
department. During the delivery of materials, Mr. Smith, the receiving clerk, records 
the receipt of shipment on this purchase order and then sends the purchase order to 
the accounting department, where it is used to record materials purchased and 
accounts payable. The materials are transported to the storage area by forklifts. The 
additional purchased quantities are recorded on storage records. 

2. Every day, hundreds of employees clock in using time cards at Generous Motors 
Corporation. The timekeepers collect these cards once a week and deliver them to 
the computer department, which handles data entry. There, the data on these time 
cards are entered into the computer. The entered data is used in the preparation of 
the labor cost distribution records, the payroll journal, and the payroll checks. The 
treasurer, Mrs. Webber, compares the payroll journal with the payroll checks, signs 
the checks, and returns them to Mr. Strode, the supervisor of the computer depart- 
ment. The payroll checks are distributed to the employees by Mr. Strode. 

3. The smallest branch of Connor Cosmetics employs Mary Cooper, the branch manager, 
and her sales assistant, Janet Hendrix. The branch uses a bank account to pay expenses. 
The account is kept in the name of “Connor Cosmetics—Special Account.” To pay 
expenses, checks must be signed by Mary Cooper or by the treasurer, John Winters. 
Cooper receives the cancelled checks and bank statements. She reconciles the branch 
account herself and files cancelled checks and bank statements in her records. She also 
periodically prepares reports of cash disbursements and sends them to the home office. 


a. List the deficiencies in internal control for each of these situations. To identify the 
deficiencies, use the methodology that was discussed in this chapter. 


b. For each deficiency, state the type(s) of misstatement(s) that is (are) likely to result. Be 
as specific as possible. 


c. How would you improve interna py uy gr cag pee PRRBweSr 
10-39 (Objective 10-5) Anthony, CPA, de en the flowchart (p. 330) which portrays the raw 
materials purchasing function of one of Anthony’s clients, Medium-Sized Manufacturing 
Company, from the preparation of initial documents through the vouching of invoices for 
payment in accounts payable. Assume that all documents are prenumbered. 


Identify the deficiencies in internal control that can be determined from the flowchart. Use 
the methodology discussed in this chapter. Include internal control deficiencies resulting 
from activities performed or not performed.* 


10-40 (Objective 10-6) The following internal controls were tested in prior audits. Evaluate 
each internal control independently and determine which controls must be tested in the 
current year’s audit of the December 31, 2011 financial statements. Be sure to explain why 
testing is or is not required in the current year. 

1. The general ledger accounting software system automatically reconciles totals in 
each of the subsidiary master files for accounts receivable, accounts payable, and 
inventory accounts to the respective general ledger accounts. This control was most 
recently tested in the prior year. No changes to the software have been made since 
testing and there are strong controls over IT security and software program changes. 

2. The accounts payable clerk matches vendor invoices with related purchaser orders 
and receiving reports and investigates any differences noted. This control was tested 
in the 2010 fiscal year end audit. No changes to this control or personnel involved 
have occurred since testing was performed. 

3. The sales system automatically determines whether a customer’s purchase order and 
related accounts receivable balance are within the customer’s credit limit. The risk of 
shipping goods to customers who exceed their credit limit is deemed to be a significant 
risk. This control was last tested in the December 31, 2009 financial statement audit. 


*AICPA adapted. 
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MEDIUM-SIZED MANUFACTURING COMPANY 
FLOWCHART OF RAW MATERIALS PURCHASING FUNCTION 


Date 


Prepared by 
Approved by 





MANUFACTURING DIVISION 


ACCOUNTS PAYABLE 





STORES 


PURCHASE OFFICE 


RECEIVING ROOM 


CONTROLLER'S DIVISION 





Purchase 
requisition , Ay 
By 
requisition 
no. 


Purchase 
order 5 

Purchase 
requisitions 






Purchase 
order 5 


Explanatory Notes 





A. Prepare purchase 
requisition (3 copies) 
as needed. 

B. Prepare purchase 
order (6 copies). 

C. Attach purchase 
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Merchandise received, 
counted, and receiving 
report (3 copies) 
prepared based on 
count and purchase 
order. 

E. Match purchase order, 
purchase requisition, 
receiving report, and 
invoice. 


To 
vendor 


Purchase 
requisition , 
EE 





From 
vendor 


Invoice 


Purchase 
order u 
7m Purchase 
MG order 3 


Purchase 
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Receiving 
report 











Purchase 
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Purchase 
order 3 
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order 3 
Receiving 

report aA 
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F. Prepare voucher after 
comparing data on 
purchase order, 
invoice, receiving 
report. 

G. To cash disbursements 
in controller's division 
for payment. 

Req. = Purchase 
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P.O. = Purchase order 
Inv. = Invoice 








Receiving 


report 2 





Receiving 




















Purchase 
order 4 











Purchase 
order 4 
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4. The perpetual inventory system automatically extends the unit price times quantity 
for inventory on hand. This control was last tested in the audit of December 31, 2009 
financial statements. During 2011, the client made changes to this software system. 

5. The client’s purchase accounting system was acquired from a reputable software 
vendor several years ago. This system contains numerous automated controls. The 
auditor tested those controls most recently in the 2010 audit. No changes have been 
made to any of these controls since testing and the client’s controls over IT security 


and software program changes are excellent. 
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10-41 (Objective 10-7) The following are independent situations for which you will 
recommend an appropriate audit report on internal control over financial reporting as 
required by PCAOB auditing standards: 





1. The auditor identified a material misstatement in the financial statements that was 
not detected by management of the company. 

2. The auditor was unable to obtain any evidence about the operating effectiveness of 
internal control over financial reporting. 

3. The auditor determined that a deficiency in internal control exists that will not 
prevent or detect a material misstatement in the financial statements. 

4, During interim testing, the auditor identified and communicated to management a 
significant control deficiency. Management immediately corrected the deficiency 
and the auditor was able to sufficiently test the newly-instituted internal control 
before the end of the fiscal period. 

5. As a result of performing tests of controls, the auditor identified a significant 
deficiency in internal control over financial reporting; however, the auditor does not 
believe that it represents a material weakness in internal control. 


For each situation, state the appropriate audit report from the following alternatives: 
* Unqualified opinion on internal control over financial reporting 

* Qualified or disclaimer of opinion on internal control over financial reporting 

» Adverse opinion on internal control over financial reporting 


CASE 


10-42 (Objective 10-5) The following is the description of sales and cash receipts for the 
Lady’s Fashion Fair, a retail store dealing in expensive women’s clothing. Sales are for cash 
or credit, using the store’s own billing rather than credit cards. 

Each salesclerk has her own sales book with prenumbered, three-copy, multicolored 
sales slips attached, but perforated. Only a central cash register is used. It is operated by the 
store supervisor, who has been employed for 10 years by Alice Olson, the store owner. The 
cash register is at the store entrance to control theft of clothes. 

Salesclerks prepare the sales ne AA BGO": iginfp thy nee py are 
given to the cashier. The third copy is retainedy the salesclerk in the sales book. When the 
sale is for cash, the customer pays the salesclerk, who marks all three copies “paid” and 
presents the money to the cashier with the invoice copies. 

All clothing is put into boxes or packages by the supervisor after comparing the clothing 
to the description on the invoice and the price on the sales tag. She also rechecks the clerk’s 
calculations. Any corrections are approved by the salesclerk. The clerk changes her sales 
book at that time. 

A credit sale is approved by the supervisor from an approved credit list after the 
salesclerk prepares the three-part invoice. Next, the supervisor enters the sale in her cash 
register as a credit or cash sale. The second copy of the invoice, which has been validated by 
the cash register, is given to the customer. 

At the end of the day, the supervisor recaps the sales and cash and compares the totals to 
the cash register tape. The supervisor deposits the cash at the end of each day in the bank’s 
deposit box. The cashier’s copies of the invoices are sent to the accounts receivable clerk 
along with a summary of the day’s receipts. The bank mails the deposit slip directly to the 
accounts receivable clerk. 

Each clerk summarizes her sales each day on a daily summary form, which is used in part 
to calculate employees’ sales commissions. Marge, the accountant, who is prohibited from 
handling cash, receives the supervisor’s summary and the clerk’s daily summary form. Daily, 
she puts all sales invoice information into the firm’s computer, which provides a complete 
printout of all input and summaries. The accounting summary includes sales by salesclerk, 
cash sales, credit sales, and total sales. Marge compares this output with the supervisor’s 
and salesclerks’ summaries and reconciles all differences. 

The computer updates accounts receivable, inventory, and general ledger master files. 
After the update procedure has been run on the computer, Marge’s assistant files all sales 
invoices by customer number. A list of the invoice numbers in numerical sequence is 
included in the sales printout. 
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The mail is opened each morning by a secretary in the owner’s office. All correspon- 
dence and complaints are given to the owner. The secretary prepares a prelist of cash 
receipts. He totals the list, prepares a deposit slip, and deposits the cash daily. A copy of the 
prelist, the deposit slip, and all remittances returned with the cash receipts are given to 
Marge. She uses this list and the remittances to record cash receipts and update accounts 
receivable, again by computer. She reconciles the total receipts on the prelist to the deposit 
slip and to her printout. At the same time, she compares the deposit slip received from the 
bank for cash sales to the cash receipts journal. 

A weekly aged trial balance of accounts receivable is automatically generated by the 
computer. A separate listing of all unpaid bills over 60 days is also automatically prepared. 
These are given to Mrs. Olson, who acts as her own credit collector. She also approves all 
write-offs of uncollectible items and forwards the list to Marge, who writes them off. 

Each month Marge mails statements generated by the computer to customers. Complaints 
and disagreements from customers are directed to Mrs. Olson, who resolves them and 
informs Marge in writing of any write-downs or misstatements that require correction. 

The computer system also automatically totals the journals and posts the totals to the 
general ledger. A general ledger trial balance is printed out, from which Marge prepares 
financial statements. Marge also prepares a monthly bank reconciliation and reconciles the 
general ledger to the aged accounts receivable trial balance. 

Because of the importance of inventory control, Marge prints out the inventory perpetual 
totals monthly, on the last day of each month. Salesclerks count all inventory after store 
hours on the last day of each month for comparison with the perpetuals. An inventory 
shortages report is provided to Mrs. Olson. The perpetuals are adjusted by Marge after Mrs. 
Olson has approved the adjustments. 

Required a. For each sales transaction-related audit objective, identify one or more existing controls. 


b. For each cash receipts transaction-related audit objective, identify one or more existing 
controls. 


c. Identify deficiencies in internal control for sales and cash receipts. 


Apago PDF Enhancer 
INTEGRATED CASE APPLICATION — 


PINNACLE MANUFACTURING: PART Ill 





10-43 (Objective 10-5) In Parts I and II of this case, you performed preliminary analytical 
procedures and assessed acceptable audit risk and inherent risk for Pinnacle Manufacturing. 
Your team has been assigned the responsibility of auditing the acquisition and payment 
cycle and one related balance sheet account, accounts payable. The general approach to be 
taken will be to reduce assessed control risk to a low level, if possible, for the two main types 
of transactions affecting accounts payable: acquisitions and cash disbursements. The 
following are furnished as background information: 

- A summary of key information from the audit of the acquisition and payment cycle 
and accounts payable in the prior year, which was extracted from the previous audit 
firm’s audit files (Figure 10-12) 

* A flowchart description of the accounting system and internal controls for the 
acquisition and payment cycle (Figure 10-13, p. 334)—the flowchart shows that 
although each of the company’s three divisions has its own receiving department, the 
purchasing and accounts payable functions are centralized 

The purpose of Part III is to obtain an understanding of internal control and assess control 
risk for Pinnacle Manufacturing’s acquisition and cash disbursement transactions. 
Required a. Familiarize yourself with the internal control system for acquisitions and cash dis- 
bursements by studying the information in Figure 10-12 and Figure 10-13. 

b. Prepare a control risk matrix for acquisitions and a separate one for cash disbursements 
using Figure 10-5 on page 309 as a guide. A formatted control risk matrix is provided on 
the textbook Web site. The objectives should be specific transaction-related audit objec- 
tives for acquisitions for the first matrix and cash disbursements for the second matrix. 
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ao Information for Audit of Accounts Payable — Previous Year ) 


Accounts payable, 12-31-10 





Number of accounts 452 
Total accounts payable $9,460,776 
Range of individual balances $33.27-$677,632.97 
Tolerable misstatement for accounts payable $230,000 





Transactions, 2010 


Acquisitions: 
Number of acquisitions 16,243 
Total acquisitions $92,883,712 
Cash disbursements: 
Number of disbursements 23,661 
Total cash disbursements $87,280,031 





Results of audit procedures—tests of controls and substantive tests of 
transactions for acquisitions (sample size of 100): 
Purchase order not approved 
Purchase quantities, prices, and/or extensions not correct 
Transactions charged to wrong general ledger account 
Transactions recorded in wrong period 
No other exceptions 


tO al 





Results of audit procedures—cash disbursements (sample size of 100): 
Cash disbursement recorded in wrong period 2 
No other exceptions 





Results of audit procedures—accounts payable: 
(50% of vendors’ balances were verified; combined net 
understatement amounts were projected to the population as follows): 
Three cutoff misstatements $52,349 
One difference in amounts due to disputes and discounts $9,552 
No adjustment was necessary because the total projected misstatement 
was not material. 











See pages 608-612 in Chapter 18 for transaction-related audit objectives for acquisitions 
and cash disbursements. In doing Part III, the following steps are recommended: 
(1) Controls 
a. Identify key controls for acquisitions and for cash disbursements. After you 
decide on the key controls, include each control in one of the two matrices. 
b. Include a “C” in the matrix in each column for the objective(s) to which each 
control applies. Several of the controls should satisfy multiple objectives. 
(2) Deficiencies 
a. Identify key deficiencies for acquisitions and for cash disbursements. After you 
decide on the deficiencies, include each significant deficiency or material weak- 
ness in the bottom portion of one of the two matrices. 
b. Include a “D” in the matrix in each column for the objective(s) to which each 
significant deficiency or material weakness applies. 
(3) Assess control risk as high, medium, or low for each objective using your best 
judgment. Do this for both the acquisitions and cash disbursements matrices. 


INTERNET PROBLEM 10-1: DISCLOSURE OF MATERIAL 


WEAKNESSES IN INTERNAL CONTROL OVER FINANCIAL REPORTING 





Section 404(a) of the Sarbanes—Oxley Act requires management of a public company to issue 
a report on internal control over financial reporting (ICOFR) as of the end of the company’s 
fiscal year. Many companies have reported that their ICOFR was operating effectively, while 
others have reported that such controls were not effective in design or operation. 
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Pinnacle Manufacturing — Acquisition and Payment Cycle 





CENTRALIZED 
PURCHASING RECEIVING 
DEPARTMENT DEPARTMENTS 


ACCOUNTS CASH 
PAYABLE DISBURSEMENTS 
CLERK CLERK 





Prepare purchase 












Seed Receive 
requisition; audicneck 
goods 


P.O. approved 
by supervisor 







Purchase 


order i 
To 
vendor 


Notes on controls 

* Chart of accounts—the company uses an 
adequate detailed chart of accounts. 

* Prenumbered documents—all documents 


Receiving 






for by a function other than the preparer. 
* Bank reconciliation—done monthly by the 
treasurer. 
* Procedures are applied daily. Backlogs are 


* Accounts payable master file total is 
reconciled to the general ledger total 
monthly. 


File description 


1. Chronological 
2. Numerical 













report 
Goes 


shown are prenumbered. They are accounted 


resolved promptly by authorizing overtime. 
















Review document 


Receive package for 
vendor's completeness, 
invoice initial, and write 


date on invoice 








Key enter 
and process cash 
disbursement 
transaction data 



























Cash Voucher 
disbursement document 
Match documents fransaction package 


Check prices 
Check extensions 
Compute discounts 
Prepare voucher 


Key enter 
and process 
purchase 
transaction data 





file 














Print reports 





Cash 
disbursements 
journal 































Voucher 
document 
package* 






Purchase 
transaction 
file 









Update To vendor; 
accounts signed by 
payable treasurer 
Print master file (reviews support) 
reports 










Accounts 
payable 
master file 









Acquisitions 
journal 








*Includes voucher, vendor's invoice, receiving report, purchase order, and purchase requisition. 





Required 1. Visit the SEC’s website (www.sec.gov) and search for the Form 10-K filing for 
Organic Alliance Inc. for fiscal year ended December 31, 2009. 
2. Locate Management’s Annual Report on Internal Control Over Financial Reporting 
to answer the following questions: 


a. 


b 
C. 
d 


f. 


Who is responsible for establishing and implementing effective internal controls? 


. What type of internal controls is the report addressing? 


What framework did management use to evaluate its internal control? 


. What was management’s conclusion about the operating effectiveness of internal 


control? 


. What information is provided to help readers understand why management 


arrived at that conclusion? 
What changes, if any, has management made to improve internal controls? 


3. Locate the report of the independent registered public accounting firm. What 
information does the audit firm provide about its evaluation of internal controls 
over financial reporting? 
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FRAUD AUDITING 
Accounting Scandal Rocks Public Trust 


The accounting profession was under fire. Throughout the long hot summer, 


newspapers were filled with new details of a corporate accounting scandal. Alter studying this chapter, 


One of the largest, most respected companies in the United States had youshould beable t0 
been caught inflating earnings and assets through blatant manipulation of 11-1 Define fraud and distinguish 
the accounting rules. Thousands of investors and employees had suffered. between fraudulent financial 


reporting and misappropriation 


Congressional hearings were called to examine and understand the fraud, Breage 


and everyone asked, “Where were the auditors?” The accounting profession 
was under immense political pressure from reform-minded lawmakers, and 
the negative publicity surrounding the perceived audit failure cast all CPAs 
in the most unfavorable light. 


11-2 Describe the fraud triangle and 
identify conditions for fraud. 


11-3 Understand the auditor's 
responsibility for assessing 


The year was 1938. The corporate accounting scandal was McKesson- treriskio fraud anid ece cing 
material misstatements due to 


Robbins, and it arguably had a greater impact on the way audits are per- re 


formed than any subsequent scandal, including Enron and WorldCom. 114° (dentify corporate govemance 


and other control environment 


In 1924, Philip Musica, a high school dropout with fraud convictions and a Paar aaeredticanondncke 


prison record, reinvented himself as F. Donald Coster and awarded himself 
a medical degree. “Dr. Coster” took control of McKesson-Robbins and 
embarked on a massive fraud to inflate its share price. McKesson-Robbins se fraud risk 
inflated assets and earnings by sl ApPaqgeuPDEpkrhance r pe encore cere weer 


areas and develop procedures 


11-5 Develop responses to identified 
fraud risks. 











existent inventory and fictitious sales. Coster duped McKesson’s auditors, fo delea fraud: 

and the investing public, into believing that the company had a huge drug (eye lnderstand inenienitechnianes 
inventory, worth multimillions of dollars, that didn’t exist. Coster created Bndiothenactuites aderirald is 
phony purchase orders, sales invoices, and other documents, all of which suspected. 

McKesson’s auditors dutifully reviewed as evidence of the imaginary So 4 


inventory. The fraud succeeded because the auditing standards of the day 
permitted auditors to confine themselves to reviewing documents and talking to management. They were not 
required to physically observe and verify inventories. 


During an emergency board meeting, hastily called after the fraud came to light, word was received that Coster had 
committed suicide. An investment bank partner who served as a McKesson outside director, concerned about his 
responsibilities, responded to the news by exclaiming, “Let's fire him anyway!” 


Sources: Adapted from 1. Michael Ramos, Fraud Detection in a GAAS Audit: SAS No. 99 Implementation Guide, AICPA (2003), p. ix; 2. 
Presentation by PCAOB Board Member Daniel L. Goelzer at Investment Company Institute’s 2003 Tax & Accounting Conference, 
September 15, 2003 (www.pcaobus.org/News). 


he classic fraud at McKesson-Robbins illustrates that financial statement fraud is not just a recent occurrence. In 

the wake of that scandal, the auditing profession responded by setting the first formal standards for auditing 
procedures. Those standards required confirmation of receivables and observation of physical inventory, procedures 
that are standard today, plus guidance on the auditor’s responsibilities for detecting fraud. 

In response to more recent frauds, Congress passed the Sarbanes—Oxley Act in 2002 and the AICPA developed 
specific auditing standards to deal with fraud risk assessment and detection. In this chapter we will discuss the 
auditor’s responsibility to assess the risk of fraud and detect material misstatements due to fraud, and describe major 
areas of fraud risk, as well as controls to prevent fraud and audit procedures to detect fraud. 


TYPES OF FRAUD 


OBJECTIVE 11-1 





Define fraud and distinguish 

between fraudulent financial 
reporting and misappropriation 
of assets. 





Fraudulent 
Financial Reporting 


Misappropriation 
of Assets 


As a broad legal concept, fraud describes any intentional deceit meant to deprive 
another person or party of their property or rights. In the context of auditing financial 
statements, fraud is defined as an intentional misstatement of financial statements. The 
two main categories are fraudulent financial reporting and misappropriation of assets, 
which we introduced when defining the auditor’s responsibilities for detecting material 
misstatements in Chapter 6. 


Fraudulent financial reporting is an intentional misstatement or omission of amounts 
or disclosures with the intent to deceive users. Most cases involve the intentional 
misstatement of amounts, rather than disclosures. For example, WorldCom capitalized 
as fixed assets billions of dollars that should have been expensed. Omissions of amounts 
are less common, but a company can overstate income by omitting accounts payable 
and other liabilities. 

While most cases of fraudulent financial reporting involve an attempt to overstate 
income—either by overstatement of assets and income or by omission of liabilities and 
expnApag@icRDriitbnhan@ew¢tnicome. At privately held companies, 
this may be done in an attempt to reduce income taxes. Companies may also inten- 
tionally understate income when earnings are high to create a reserve of earnings or 
“cookie jar reserves” that may be used to increase earnings in future periods. Such 
practices are called income smoothing and earnings management. Earnings manage- 
ment involves deliberate actions taken by management to meet earnings objectives. 
Income smoothing is a form of earnings management in which revenues and expenses 
are shifted between periods to reduce fluctuations in earnings. One technique to 
smooth income is to reduce the value of inventory and other assets of an acquired 
company at the time of acquisition, resulting in higher earnings when the assets are 
later sold. Companies may also deliberately overstate inventory obsolescence reserves 
and allowances for doubtful accounts to counter higher earnings. 

Although less frequent, several notable cases of fraudulent financial reporting 
involve inadequate disclosure. For example, a central issue in the Enron case was whether 
the company adequately disclosed obligations to affiliates known as special-purpose 
entities. E. F Hutton, a now defunct brokerage firm, was charged with intentionally 
overdrawing accounts at various banks to increase interest earnings. These overdrafts 
were included as liabilities on the balance sheet, but the balance sheet description of the 
obligations did not clearly state the nature of the liabilities. 


Misappropriation of assets is fraud that involves theft of an entity’s assets. In many cases, 
but not all, the amounts involved are not material to the financial statements. However, 
the theft of company assets is often a management concern, regardless of the materiality 
of the amounts involved, because small thefts can easily increase in size over time. 

The term misappropriation of assets is normally used to refer to theft involving 
employees and others internal to the organization. According to estimates of the 
Association of Certified Fraud Examiners, the average company loses five percent of its 
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the period 1987-1997. 

There were 347 alleged cases of fraudulent 
financial reporting from 1998-2007, compared to 
294 cases from 1987-1997. The size of the 
companies and magnitude of the frauds were 
much larger in the later period. The companies 
alleged to have engaged in fraud had median 
assets and revenues of almost $100 million in the 


FRAUDULENT _ Atecent study commissioned by the Committee The most common fraud technique continued to 
of Sponsoring Organizations of the Treadway be improper revenue recognition, and represented 
FINANCIAL Commission (COSO) analyzes fraudulent financial 60% of the cases from 1998-2007 and 50% of the 
REPORTING reporting by U.S public companies over the period cases from 1987-1997. Eighty-nine percent of the 
1998-2007. The study updates an earlier study fraud cases involved the chief executive officer 
STATISTICS that analyzed fraudulent financial reporting for (CEO) and/or the chief financial officer (CFO), 


compared to 83% in the earlier period. 

Consequences of these frauds were significant. 
Initial news of the alleged fraud resulted in an 
average abnormal decline in the stock price of 
16.7%. Companies engaged in fraud often filed 
for bankruptcy, were delisted from stock exchanges, 
or had material assets sales following the discovery 
of the fraud. 


period 1998-2007. In contrast, the companies in 
the 1987-1997 period had median assets and 
revenues of under $16 million. The median fraud 
increased from $4.1 million in the earlier period 
to $12.1 million in the 1998-2007 period. The 
average fraud soared from $25 million in the 
earlier period to almost $400 million in the 

later period, influenced by the major frauds at 
companies such as Enron and WorldCom. 


Sources: Adapted from 1. Fraudulent Financial 
Reporting: 1998-2007, An Analysis of U.S. Public 
Companies, Committee of Sponsoring Organizations 
of the Treadway Commission, New York, 2010 
(www.coso.org); 2. Fraudulent Financial Reporting: 
1987-1997, An Analysis of U.S. Public Companies, 
Committee of Sponsoring Organizations of the 
Treadway Commission, New York, 1999 
(www.coso.org). 








revenues to fraud, although much of this fraud involves external parties, such as 
shoplifting by customers and cheating by suppliers. 

Misappropriation of assets is normally perpetrated at lower levels of the organi- 
zation hierarchy. In some notable cases, however, top management is involved in the 
theft of company assets. Because Op Uppr ARH Khencer! over 
organization assets, embezzlements inVolvuf% top management can involve significant 
amounts. In one extreme example, the former CEO of Tyco International was charged 
by the SEC with stealing over $100 million in assets. A fraud survey conducted by the 
Association of Certified Fraud Examiners found that asset misappropriations are the 
most common fraud scheme, although the size of the fraud is much greater for fraudu- 
lent financial reporting. 


CONDITIONS FOR FRAUD 


OBJECTIVE 11-2 


Three conditions for fraud arising from fraudulent financial reporting and misappro- 
priations of assets are described in SAS 99 (AU 316). As shown in Figure 11-1 (p. 338), 
these three conditions are referred to as the fraud triangle. 





Describe the fraud triangle 

and identify conditions for 

1. Incentives/Pressures. Management or other employees have incentives or pres- fraud. 
sures to commit fraud. 

2. Opportunities. Circumstances provide opportunities for management or 
employees to commit fraud. 

3. Attitudes/Rationalization. An attitude, character, or set of ethical values exists 
that allows management or employees to commit a dishonest act, or they are in 
an environment that imposes sufficient pressure that causes them to rationalize 
committing a dishonest act. 





Risk Factors 
for Fraudulent 
Financial Reporting 


An essential consideration by the auditor in uncovering fraud is identifying factors 
that increase the risk of fraud. Table 11-1 (p. 338) provides examples of these fraud 
risk factors for each of the three conditions of fraud for fraudulent financial 
reporting. In the fraud triangle, fraudulent financial reporting and misappropriation 
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The Fraud Triangle 








Incentives/Pressures 





























Opportunities Attitudes/Rationalization 

















of assets share the same three conditions, but the risk factors differ. We'll first address 
the risk factors for fraudulent financial reporting, and then discuss those for 
misappropriation of assets. Later in the chapter, the auditor’s use of the risk factors in 
uncovering fraud is discussed. 


Incentives/Pressures A common incentive for companies to manipulate financial 
statements is a decline in the company’s financial prospects. For example, a decline in 
earnings may threaten the company’s ability to obtain financing. Companies may also 
manipulate earnings to meet analysts’ forecasts or benchmarks such as prior-year 
earnings, to meet debt covenant restrictions, or to artificially inflate stock prices. In 
some cases, management may manipulate earnings just to preserve their reputation. 
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Examples of Risk Factors for Fraudulent Financial Reporting 





THREE CONDITIONS OF FRAUD 





Incentives/Pressures 


Opportunities 


Attitudes/Rationalization 





Management or other employees have 
incentives or pressures to materially 
misstate financial statements. 


Examples of Risk Factors 


Circumstances provide an opportunity 
for management or employees to 
misstate financial statements. 


Examples of Risk Factors 


An attitude, character, or set of ethical values 
exists that allows management or employees to 
intentionally commit a dishonest act, or they 
are in an environment that imposes sufficient 
pressure that causes them to rationalize 
committing a dishonest act. 


Examples of Risk Factors 





Financial stability or profitability is 
threatened by economic, industry, or 
entity operating conditions. Examples 
include significant declines in customer 
demand and increasing business failures 
in either the industry or overall economy. 

Excessive pressure for management to 
meet debt repayment or other debt 
covenant requirements. 

Management or the board of directors’ 
personal net worth is materially threatened 
by the entity's financial performance. 





Significant accounting estimates involve 
subjective judgments or uncertainties 
that are difficult to verify. 

Ineffective board of director or audit 
committee oversight over financial 
reporting. 

High turnover or ineffective accounting, 
internal audit, or information 
technology staff. 


Inappropriate or ineffective communication and 
support of the entity's values. 

Known history of violations of securities laws or 
other laws and regulations. 

Management's practice of making overly 
aggressive or unrealistic forecasts to analysts, 
creditors, and other third parties. 
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. 
enn Reasons Why Fraud Occurs 


When asked why executive fraud occurs, respondents 
overwhelming identify “pressure to meet goals” and “personal gain.” 


es 31% 


Pressures to do “whatever it takes” to meet goals 


Ss 72% 


Seek personal gain 


es 41% 


Think “I won't get caught” 


es 40% 


They do not consider their actions fraudulent 


21% 


Believe regulations are easily bypassed 


20% 
Fear losing their job if goals are not met 
8% 
Lack of resources causes corners to be cut 
5% 


Lack of understanding of laws and regulations 
, J 














Source: The 2007 Oversight System Report on Corporate Fraud, Oversight Systems, Inc., 2007. 
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Figure 11-2 highlights an Oversight Systems Inc. survey finding that the pressure to 
do “whatever it takes” to meet goals and the desire for personal gain are often cited as 
primary incentives to engage in fraudulent actions. 


Opportunities Although the financial statements of all companies are potentially 
subject to manipulation, the risk is greater for companies in industries where sig- 
nificant judgments and estimates are involved. For example, valuation of inventories is 
subject to greater risk of misstatement for companies with diverse inventories in many 
locations. The risk of misstatement of inventories is further increased if those 
inventories are at risk for obsolescence. 

A turnover in accounting personnel or other weaknesses in accounting and infor- 
mation processes can create an opportunity for misstatement. Many cases of 
fraudulent financial reporting were caused by ineffective audit committee and board of 
director oversight of financial reporting. 


Attitudes/Rationalization The attitude of top management toward financial 
reporting is a critical risk factor in assessing the likelihood of fraudulent financial 
statements. If the CEO or other top managers display a significant disregard for the 
financial reporting process, such as consistently issuing overly optimistic forecasts, or 
they are overly concerned about meeting analysts’ earnings forecasts, fraudulent 
financial reporting is more likely. Management’s character or set of ethical values also 
may make it easier for them to rationalize a fraudulent act. 


The same three conditions apply to misappropriation of assets. However, in assessing 
risk factors, greater emphasis is placed on individual incentives and opportunities for 
theft. Table 11-2 (p. 340) provides examples of fraud risk factors for each of the three 
conditions of fraud for misappropriation of assets. 


Risk Factors for 
Misappropriation 
of Assets 
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Examples of Risk Factors for Misappropriation of Assets 





THREE CONDITIONS OF FRAUD 





Incentives/Pressures 


Opportunities 


Attitudes/Rationalization 





Management or other employees 
have incentives or pressures to 
misappropriate material assets. 


Examples of Risk Factors 


Circumstances provide an opportunity 
for management or employees to 
misappropriate assets. 


Examples of Risk Factors 


An attitude, character, or set of ethical values 
exists that allows management or employees 
to intentionally commit a dishonest act, or 
they are in an environment that imposes 
sufficient pressure that causes them to 
rationalize committing a dishonest act. 


Examples of Risk Factors 





Personal financial obligations create 
pressure for those with access to cash 
or other assets susceptible to theft to 
misappropriate those assets. 

Adverse relationships between manage- 
ment and employees with access to 
assets susceptible to theft motivate 
employees to misappropriate those 
assets. Examples include the following: 


* Known or expected employee layoffs. 


* Promotions, compensation, or other 


Presence of large amounts of cash on 
hand or inventory items that are small, 
of high value, or are in high demand. 

Inadequate internal control over assets 
due to lack of the following: 

° Appropriate segregation of duties or 
independent checks. 

° Job applicant screening for employees 
with access to assets. 

° Mandatory vacations for employees 
with access to assets. 


Disregard for the need to monitor or reduce 
tisk of misappropriating assets. 

Disregard for internal controls by overriding 
existing controls or failing to correct known 
internal control deficiencies. 


rewards inconsistent with expectations. 








Incentives/Pressures Financial pressures are a common incentive for employees 
who misappropriate assets. Employees with excessive financial obligations, or those 
with ‘Apage SED P}RS PRY Rarities po meet their personal needs. In other 
cases, diSsatisffed employees may steal from a sense of entitlement or as a form of 
attack against their employers. 


Opportunities Opportunities for theft exist in all companies. However, oppor- 
tunities are greater in companies with accessible cash or with inventory or other 
valuable assets, especially if they are small or easily removed. For example, casinos 
handle extensive amounts of cash with little formal records of cash received. Similarly, 
thefts of laptop computers are much more frequent than thefts of desktop systems. 

Weak internal controls create opportunities for theft. Inadequate separation of 
duties is practically a license for employees to steal. Whenever employees have custody 
or even temporary access to assets and maintain the accounting records for those 
assets, the potential for theft exists. For example, if inventory storeroom employees also 
maintain inventory records, they can easily take inventory items and cover the theft by 
adjusting the accounting records. 

Fraud is more prevalent in smaller businesses and not-for-profit organizations 
because it is more difficult for these entities to maintain adequate separation of duties. 
However, even large organizations may fail to maintain adequate separation in critical 
areas. Barings Bank collapsed after incurring losses in excess of $1 billion from the 
activities of one trader because of inadequate separation of duties. 





A controller in a large company was well com- 
pensated and participated in bonus and profit- 
sharing plans. A routine internal audit of petty 
cash discovered that the controller had stolen 
approximately $2,000 from petty cash. He was 


immediately terminated. The amounts identified 
as stolen were trivial in relation to the controller's 
annual income. Some employees steal to meet 

a financial need, but for others the access to 
company assets is just too great a temptation. 


WHY DO 
THEY STEAL? 
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years. 
In a Ponzi scheme, people are enticed to 
invest by above-market returns that are paid from 
the investments of additional investors, rather 
than actual profits on investments. The scheme 
usually collapses under its own weight because it 
depends on a continuing supply of new investors. 
The scheme is named after Charles Ponzi, who 
used the scheme in the early 1920s. Although he 
did not invent the Ponzi scheme, it has become 
associated with his name because of the scale of 
his operation. Madoff's scandal lasted a long time, 
particularly for such a large scheme. Investigators 
believe the fraud may have begun in the 1970s, 
although Madoff maintains that his fraudulent 
activities began in the 1990s. Madoff mainly 


managed money for charities, many of them 
private foundations. Private foundations are 
required by IRS regulations to pay out 5% of their 
funds each year, and Madoff could easily meet 
these required payouts out of investments into 


MADOFE — OnMarch 12, 2009, Bernie Madoff pled guilty 
to the largest investor fraud ever, in a Ponzi 
CONVICTED scheme with losses estimated at almost $21 
IN LARGEST billion. By way of comparison, the massive fraud 
at WorldCom was approximately $11 billion. 
INVESTOR FRAUD Madoff was sentenced to a prison term of 150 the fund. 


Madoff was secretive about his trading practices, 
and marketed his funds to an exclusive clientele. 
Although concerns were raised over the years about 
the consistency of the returns generated, and the 
SEC investigated Madoff several times, his scheme 
was not revealed until the market plunge in 2008 
triggered investor withdrawals from the firm. The 
market downturn revealed what several critics had 
alleged, that Madoff was running an elaborate Ponzi 
scheme. 


Sources: Adapted from 1. Robert Frank, Amir Efrati, 
Aaron Luchetti, and Chad Bray, “Madoff Jailed After 
Admitting Epic Scam,” The Wall Street Journal 
(March 13, 20009); 2. Securities and Exchange 
Commission Litigation Complaint, December 11, 
2008 (www.sec.gov/litigation). 








Attitudes/Rationalization Management’s attitude toward controls and ethical 
conduct may allow employees and managers to rationalize the theft of assets. If 
management cheats customers through overcharging for goods or engaging in high- 
pressure sales tactics, employees may feel that it is acceptable for them to behave in the 
same fashion by cheating on expense or time reports. 
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ASSESSING THE RISK OF FRAUD 


SAS 99 provides guidance to auditors in assessing the risk of fraud. Auditors must 
maintain a level of professional skepticism as they consider a broad set of information, 
including fraud risk factors, to identify and respond to fraud risk. As we discussed in 
Chapter 6, the auditor has a responsibility to respond to fraud risk by planning and 
performing the audit to obtain reasonable assurance that material misstatements, 
whether due to errors or fraud, are detected. 


Auditing standards state that, in exercising professional skepticism, an auditor “neither 
assumes that management is dishonest nor assumes unquestioned honesty.” In practice, 
maintaining this attitude of professional skepticism can be difficult because, despite 
some recent high-profile examples of fraudulent financial statements, material frauds 
are infrequent compared to the number of audits of financial statements conducted 
annually. Most auditors will never encounter a material fraud during their careers. Also, 
through client acceptance and continuance evaluation procedures, auditors reject most 
potential clients perceived as lacking honesty and integrity. 


Questioning Mind Auditing standards emphasize consideration of a client’s 
susceptibility to fraud, regardless of the auditor’s beliefs about the likelihood of fraud 
and management’s honesty and integrity. During audit planning for every audit, the 
engagement team must discuss the need to maintain a questioning mind throughout 
the audit to identify fraud risks and critically evaluate audit evidence. There is always a 
risk that even an honest person can rationalize fraudulent actions when incentives or 
pressures become extreme. 


OBJECTIVE 11-3 


Understand the auditor's 
responsibility for assessing 


the risk of fraud and detecting 
material misstatements due 
to fraud. 





Professional 
Skepticism 
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CONSIDERATION 
OF FRAUD RISK IN 
INTEGRATED 
AUDITS 





Sources of 
Information to 
Assess Fraud Risks 
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As part of their inspections of integrated audits 
involving initial implementation of PCAOB 
Auditing Standard 5, PCAOB staff evaluated 
auditor consideration of fraud risk. In the areas of 
the engagements reviewed, inspectors evaluated 
whether the auditors applied their considerations 
of the risk of fraud throughout the audit, 
identified controls that addressed the assessed 
risk of fraud, and adequately evaluated the control 
environment and the period-end financial 
reporting process. Inspectors found cases where 
the nature, timing, and extent of auditors’ tests of 
controls were not sufficiently responsive to an 
identified fraud risk, including the following: 


@ In some cases, auditors either failed to alter 
the extent of testing in areas of greater risk, or 
they failed to identify and test compensating 
controls when identified controls did not 
completely address the identified risk. 

® Inspectors also observed instances where 
auditors either did not evaluate all the relevant 


processes of the company’s period-end 
financial reporting process or did not 
appropriately test the design or operating 
effectiveness of controls to address the risk of 
management override. 


Despite these concerns, inspectors did not 
identify major deficiencies in the majority of 
engagements reviewed, and also identified 
instances in which auditors were particularly 
effective in identifying and testing company 
controls that address fraud risk, including the risk 
of management override. For example, inspectors 
observed instances where auditors involved firm 
personnel with specialized skills and knowledge 
regarding fraud to assist them in their fraud risk 
assessment and controls evaluation. 


Source: Report on the First-Year Implementation of 
Auditing Standard No. 5, An Audit of Internal Control 
over Financial Report that is Integrated with an Audit 
of Financial Statements, PCAOB Release No. 2009- 
006, September 22, 2009 (www.pcaobus.org). 


Critical Evaluation of Audit Evidence Upon discovering information or other 
conditions that indicate a material misstatement due to fraud may have occurred, 
auditors should thoroughly probe the issues, acquire additional evidence as needed, and 
consult with other team members. Auditors must be careful not to rationalize or assume 
a misstatement is an isolated incident. For example, say an auditor uncovers a current- 
year sale that go." ected as a sale in the following year. The auditor 
shoul @. BHR? Rohan AGE Kictermine whether it was intentional 
or a fraud, . joe whether other such misstatements are likely to have occurred. 


Figure 11-3 summarizes the information used to assess fraud risk. The five sources of 
information to assess these fraud risks on the top of the figure are discussed further in 
this section. 


Communications Among Audit Team SAS 99 requires the audit team to con- 
duct discussions to share insights from more experienced audit team members and 
o “brainstorm” ideas that address the following: 


1. Howand where they believe the entity’s financial statements might be susceptible 
to material misstatement due to fraud. This should include consideration of 
known external and internal factors affecting the entity that might: 

* create an incentive or pressure for management to commit fraud. 

* provide the opportunity for fraud to be perpetrated. 

* indicate a culture or environment that enables management to rationalize 
fraudulent acts. 

2. How management could perpetrate and conceal fraudulent financial reporting. 

How anyone might misappropriate assets of the entity. 

4. How the auditor might respond to the susceptibility of material misstatements 
due to fraud. 


Sa 


These discussions about fraud risks will likely take place at the same time as dis- 
cussions about the susceptibility of the entity’s financial statements to other types of 
material misstatement, which was addressed in Chapter 8. 


Inquiries of Management SAS 99 requires the auditor to make specific inquiries 
about fraud in every audit. Inquiries of management and others within the company 
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provide employees with an opportunity to tell the auditor information that otherwise 
might not be communicated. Moreover, their responses to the auditor’s questions often 
reveal information on the likelihood of fraud. 

The auditor’s inquiries of management should address whether management has 
knowledge of any fraud or suspected fraud within the company. Auditors should also 
inquire about management’s process of assessing fraud risks, the nature of fraud risks 
identified by management, any inthpagas PDERnbnhancer risks, 
and any information about fraud risks and related controls that management has 
reported to the audit committee. 

The audit committee often assumes an active role in overseeing management’s fraud 
risk assessment and response processes. The auditor must inquire of the audit committee 
or others charged with governance about their views of the risks of fraud and whether 
they have knowledge of any fraud or suspected fraud. For entities with an internal audit 
function, the auditor should inquire about internal audit’s views of fraud risks and 
whether they have performed any procedures to identify or detect fraud during the year. 

SAS 99 also requires the auditor to make inquiries of others within the entity 
whose duties lie outside the normal financial reporting lines of responsibility. When 
coming into contact with company personnel, such as the inventory warehouse manager 
or purchasing agents, the auditor may inquire about the existence or suspicion of fraud. 
Throughout the audit, inquiries of executives and a wide variety of other employees 
provide opportunities for the auditor to learn about risks of fraud. When responses are 
inconsistent, the auditor should obtain additional audit evidence to resolve the 
inconsistency and to support or refute the original risk assessment. 


Risk Factors SAS 99 requires the auditor to evaluate whether fraud risk factors 
indicate incentives or pressures to perpetrate fraud, opportunities to carry out fraud, 
or attitudes or rationalizations used to justify a fraudulent action. Tables 11-1 (p. 338) 
and 11-2 (p. 340) outline examples of the fraud risk factors auditors consider. The 
existence of fraud risk factors does not mean fraud exists, but that the likelihood of 
fraud is higher. Auditors should consider these factors along with any other infor- 
mation used to assess the risks of fraud. 


Analytical Procedures As we discussed in Chapter 8, auditors must perform analyti- 
cal procedures during the planning and completion phases of the audit to help identify 
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>) 
a Horizontal Analysis of Income Statement 
HILLSBURG HARDWARE COMPANY 
HORIZONTAL ANALYSIS OF INCOME STATEMENT 
(in thousands) 
Year Ended 
December 31 % 

2011 2010 Change Change 
Net sales $143,086 $131,226 $11,860 9.0% 
Cost of sales 103,241 94,876 8,365 8.8% 
Gross profit 39,845 36,350 3,495 9.6% 
Selling, general and administrative expenses 32,475 29,656 2,819 9.5% 
Operating income 7,370 6,694 676 10.1% 

Other income and expense 
Interest expense 2,409 2,035 374 18.4% 
Gain on sale of assets (720) - (720) N/A 
Total other income/expense (net) 1,689 2,035 (346) -17.0% 
Earnings before income taxes 5,681 4,659 1,022 21.9% 
Provision for income taxes 1,747 1,465 282 19.2% 
Net income $ 3,934 $ 3,194 $ 740 23.2% 

S-= SS 











unusual transactions or events that might indicate the presence of material misstate- 
ments in the financial statements. When results from analytical procedures differ from the 
auditor’s expectations, the auditor evaluates those results in light of other information 
obtained about the likelihood of fraud to determine if fraud risk is heightened. 
hAgaqgeo hP DF aknihagnieeirchapter 8, the auditor may perform 
horizonta pep bed analysis of the financial statements. In horizontal analysis, the 
account balance is compared to the previous period, and the percentage change in the 
account balances for the period is calculated. Figure 11-4 is an example of horizontal 
analysis applied to the condensed income statement for Hillsburg Hardware. For example, 
sales increased $11,860 (in 000’s) from the prior year, which represents a 9.0% increase 
($11,860/$131,226). In vertical analysis, the financial statement numbers are converted 
to percentages. The common-size financial statement in Figure 8-7 on p. 229 is an 
example of vertical analysis applied to the detailed income statement for Hillsburg 
Hardware, with each income statement amount calculated as a percentage of sales. In 
vertical analysis of the balance sheet, balances are calculated as a percentage of total assets. 
Because occurrences of fraudulent financial reporting often involve manipulation of 
revenue, SAS 99 requires the auditor to perform analytical procedures on revenue accounts. 
The objective is to identify unusual or unexpected relationships involving revenue accounts 
that may indicate fraudulent financial reporting. By comparing the sales volume based 
on recorded revenue with actual production capacity, for example, the auditor can reveal 
revenues beyond the entity’s production capabilities. The auditor may review monthly 
sales in the general ledger, and may also review quarterly or monthly sales by product line. 
By reviewing sales trends, the auditor may identify unusual sales activity. For example, at one 
company the reversals of improperly recorded sales resulted in negative sales for a month. 


Other Information Auditors should consider all information they have obtained in 
any phase or part of the audit as they assess the risk of fraud. Many of the risk assessment 
procedures that the auditor performs during planning to assess the risk of material 
misstatement may indicate a heightened risk of fraud. For example, information about 
management’s integrity and honesty obtained during client acceptance procedures, 
inquiries and analytical procedures done in connection with the auditor’s review of the 
client’s quarterly financial statements, and information considered in assessing inherent 
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GUIDANCE FOR __ The American Institute of CPAs, The Institute of established, where feasible, to mitigate possible 
Internal Auditors, and the Association of Certified impacts on the organization. 
MANAGING Fraud Examiners jointly created Managing the _ Principle 4: Detection techniques should be 
FRAUD RISK ___ Business Risk of Fraud: A Practical Guide, to assist established to uncover fraud events when preven- 


boards, senior management and internal auditors 
in their management of fraud risk within organi- 
zations. The guide defines the following five 
principles for fraud risk management: 


Principle 1: As part of an organization’s 
governance structure, a fraud risk management 
program should be in place, including a written 
policy (or policies) to convey the expectations of 
the board of directors and senior management 
regarding managing fraud risk. 


Principle 2: Fraud risk exposure should be 
assessed periodically by the organization to 
identify specific potential schemes and events 
that the organization needs to mitigate. 


Principle 3: Prevention techniques to avoid 


tive measures fail or unmitigated risks are realized. 


Principle 5: A reporting process should be in 
place to solicit input on potential fraud, and a 
coordinated approach to investigation and correc- 
tive action should be used to help ensure potential 
fraud is addressed appropriately and timely. 


The guide describes how organizations of all 
sizes can establish their own fraud risk management 
programs and includes examples of key program 
components and resources that organizations can 
use as a starting point to develop an effective and 
efficient fraud risk management program. 

Source: Managing the Business Risk of Fraud: A 

Practical Guide, The Institute of Internal Auditors, The 

American Institute of Certified Public Accountants, 





potential key fraud risk events should be 


and the Association of Certified Fraud Examiners, 2008. 





and control risks may lead to auditor concerns about the likelihood of misstatements 
due to fraud. 


Documenting 
Fraud Assessment 


Auditing standards require that auditors document the following matters related to the 
auditor’s consideration of material misstatements due to fraud: 


* The discussion among gi carae team personnel in planning the audit about 
the susceptibility of the wet) age sta rial fra 

* Procedures performed to oi? AGO. Pik. era iter assess 
the risks of material fraud. 

* Specific risks of material fraud that were identified, and a description of the 
auditor’s response to those risks. 

* Reasons supporting a conclusion that there is not a significant risk of material 
improper revenue recognition. 

* Results of the procedures performed to address the risk of management over- 
ride of controls. 

* Other conditions and analytical relationships indicating that additional auditing 
procedures or other responses were required, and the actions taken by the auditor. 

* The nature of communications about fraud made to management, the audit 
committee, or others. 


After fraud risks are identified and documented, the auditor should evaluate factors 
that reduce fraud risk before developing an appropriate response to the risk of fraud. 
Corporate governance and other control factors that reduce fraud risks are discussed in 
the next section. 


CORPORATE GOVERNANCE OVERSIGHT TO REDUCE FRAUD RISKS 


OBJECTIVE 11-4 


Management is responsible for implementing corporate governance and control 
procedures to minimize the risk of fraud, which can be reduced through a combination 
of prevention, deterrence, and detection measures. Because collusion and false docu- 
mentation make detection of fraud a challenge, it is often more effective and economical 
for companies to focus on fraud prevention and deterrence. By implementing antifraud 
programs and controls, management can prevent fraud by reducing opportunity. By 





Identify corporate governance 
and other control environ- 
ment factors that reduce 
fraud risks. 
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EVERYDAY VALUES: 
THE HARLEY- 
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communicating fraud detection and punishment policies, management can deter 
employees from committing fraud. 

Guidance developed by the AICPA identifies three elements to prevent, deter, and 
detect fraud: 

1. Culture of honesty and high ethics 

2. Management’s responsibility to evaluate risks of fraud 

3. Audit committee oversight 


Let’s examine these elements closely, as auditors should have a thorough under- 
standing of each to assess the extent to which clients have implemented fraud-reducing 
activities. 


Research indicates that the most effective way to prevent and deter fraud is to implement 
antifraud programs and controls that are based on core values embraced by the company. 
Such values create an environment that reinforces acceptable behavior and expecta- 
tions that employees can use to guide their actions. These values help create a culture of 
honesty and ethics that provides the foundation for employees’ job responsibilities. 
Creating a culture of honesty and high ethics includes six elements. 


Setting the Tone at the Top Management and the board of directors are responsible 
for setting the “tone at the top” for ethical behavior in the company. Honesty and integrity 
by management reinforces honesty and integrity to employees throughout the organization. 
Management cannot act one way and expect others in the company to behave differently. 
Through its actions and communications, management can show that dishonest and 
unethical behaviors are not tolerated, even if the results benefit the company. 

A tone at the top based on honesty and integrity provides the foundation upon 
which a more detailed code of conduct can be developed to provide more specific 
guidance about permitted and prohibited behavior. Table 11-3 provides an example of 
the key contents of an effective code of conduct. 


CreaApag@ivPDF..Bbnhancenx: Research shows that wrongdoing 
occurs less frequently when employees have positive feelings about their employer than 
when they feel abused, threatened, or ignored. A positive workplace can generate 
improved employee morale, which may reduce employees’ likelihood of committing 
fraud against the company. 

Employees should also have the ability to obtain advice internally before making 
decisions that appear to have legal or ethical implications. Many organizations, including 
all U.S. public companies, have a whistle-blowing process for employees to report actual 
or suspected wrongdoing or potential violations of the code of conduct or ethics policy. 
Some organizations have a telephone hotline directed to or monitored by an ethics officer 
or other trusted individual responsible for investigating and reporting fraud or illegal acts. 





The Harley-Davidson Motor Company, founded 
over 100 years ago, has grown to be recognized 
as one of the leading U.S. companies. Both 
Fortune and Forbes magazines have named 
Harley-Davidson several times as one of their 
most admired companies. The company has an 
incredible following of avid motorcycle 
enthusiasts, often referred to as “H.0.G.s.” 

The company places tremendous emphasis 
on preserving the Harley-Davidson legacy. To help 
its employees make the right decisions on the job, 
management developed a detailed guide, Everyday 
Values: The Harley-Davidson Code of Business 
Conduct, which applies to the board of directors 
and all employees of the company. The guide is 
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built around these five basic Harley-Davidson 
values: 


® Tell the truth 

® Be fair 

® Keep your promises 

Respect the individual 
Encourage intellectual curiosity 


The guide is intended to promote honest and 
ethical conduct, and it addresses a wide range of 
activities and situations in which employees may 
need to make decisions. 


Source: Harley-Davidson, Inc., Everyday Values: The 
Harley-Davidson Code of Business Conduct 
(www.harley-davidson.com). 





fa Example Elements for a Code of Conduct ) 





Code of Conduct Element 


Description 





Organizational Code 
of Conduct 


The organization and its employees must at all times comply with all applicable laws and regulations, 
with all business conduct well above the minimum standards required by law. 





General Employee 
Conduct 


The organization expects its employees to conduct themselves in a businesslike manner and prohibits 
unprofessional activities, such as drinking, gambling, fighting, and swearing, while on the job. 





Conflicts of Interest 


The organization expects that employees will perform their duties conscientiously, honestly, and in 
accordance with the best interests of the organization and will not use their positions or knowledge 
gained for private or personal advantage. 





Outside Activities, 
Employment, and 
Directorships 


All employees share a responsibility for the organization's good public relations. Employees should 
avoid activities outside the organization that create an excessive demand on their time or create 
a conflict of interest. 





Relationships with 
Clients and Suppliers 


Employees should avoid investing in or acquiring a financial interest in any business organization that 
has a contractual relationship with the organization. 





Gifts, Entertainment, 
and Favors 


Employees must not accept entertainment, gifts, or personal favors that could influence or appear to 
influence business decisions in favor of any person with whom the organization has business dealings. 





Kickbacks and 
Secret Commissions 


Employees may not receive payment or compensation of any kind, except as authorized under 
organizational remuneration policies. 





Organization Funds 
and Other Assets 


Employees who have access to organization funds must follow prescribed procedures for recording, 
handling, and protecting money. 





Organization Records 
and Communications 


Employees responsible for accounting and record keeping must not make or engage in any false record 
or communication of any kind, whether external or internal. 





Dealing with Outside 
People and Organizations 


Employees must take care to separate their personal roles from their organizational positions when 
communicating on matters not involving the organization's business. 





Prompt Communications 


All employees must make every effort to achieve complete, accurate, and timely communications 
in all matters relevant to customers, suppliers, government authorities, the public, and others within 
the organization. 





Privacy and 
Confidentiality 





XS 


When handling financial and personal information about customers and others with whom the 
organization has dealings, employees should collect, use, and retain only the information necessary for 
the organization's business; internal access to information should be limited to those with a legitimate 
business reason for seeking that information. 








Source: Adapted from AICPA, “CPA’s Handbook of Fraud and Commercial Crime Prevention." 


Hiring and Promoting Appropriate Employees To be successful in preventing 
fraud, well-run companies implement effective screening policies to reduce the likeli- 
hood of hiring and promoting individuals with low levels of honesty, especially those 
who hold positions of trust. Such policies may include background checks on individuals 
being considered for employment or for promotion to positions of trust. Background 
checks verify a candidate’s education, employment history, and personal references, 
including references about character and integrity. After an employee is hired, con- 
tinuous evaluation of employee compliance with the company’s values and code of 
conduct also reduces the likelihood of fraud. 


Training All new employees should be trained about the company’s expectations of 
employees’ ethical conduct. Employees should be told of their duty to communicate 
actual or suspected fraud and the appropriate way to do so. In addition, fraud aware- 
ness training should be tailored to employees’ specific job responsibilities with, for 
example, different training for purchasing agents and sales agents. 


Confirmation Most companies require employees to periodically confirm their 
responsibilities for complying with the code of conduct. Employees are asked to state 
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that they understand the company’s expectations and have complied with the code, and 
that they are unaware of any violations. These confirmations help reinforce the code of 
conduct policies and also help deter employees from committing fraud or other ethics 
violations. By following-up on disclosures and non-replies, internal auditors or others 
may uncover significant issues. 


Discipline Employees must know that they will be held accountable for failing to 
follow the company’s code of conduct. Enforcement of violations of the code, regardless 
of the level of the employee committing the act, sends clear messages to all employees 
that compliance with the code of conduct and other ethical standards is important and 
expected. Thorough investigation of all violations and appropriate and consistent 
responses can be effective deterrents to fraud. 


Fraud cannot occur without a perceived opportunity to commit and conceal the act. 
Management is responsible for identifying and measuring fraud risks, taking steps to 
mitigate identified risks, and monitoring internal controls that prevent and detect fraud. 


Identifying and Measuring Fraud Risks Effective fraud oversight begins with 
management’s recognition that fraud is possible and that almost any employee is 
capable of committing a dishonest act under the right circumstances. This recognition 
increases the likelihood that effective fraud prevention, deterrence, and detection 
programs and controls are implemented. Figure 11-5 summarizes factors that manage- 
ment should consider that may contribute to fraud in an organization. 


Mitigating Fraud Risks Management is responsible for designing and implementing 
programs and controls to mitigate fraud risks, and it can change business activities and 
processes prone to fraud to reduce incentives and opportunities for fraud. For example, 
management can outsource certain operations, such as transferring cash collections 


Apago PDF Enhancer 
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Source: Fraud Survey 2003, KPMG Forensics. Copyright © 2003 KPMG LLP. Reprinted with permission. 
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from company personnel to a bank lockbox system. Other programs and controls may 
be implemented at a company-wide level, such as the training of all employees about 
fraud risks, and strengthening employment and promotion policies. 


Monitoring Fraud Prevention Programs and Controls For high fraud risk areas, 
management should periodically evaluate whether appropriate antifraud programs 
and controls have been implemented and are operating effectively. For example, 
management’s review and evaluation of results for operating units or subsidiaries 
increases the likelihood that manipulated results will be detected. 

Internal audit plays a key role in monitoring activities to ensure that antifraud 
programs and controls are operating effectively. Internal audit activities can both deter 
and detect fraud. Internal auditors assist in deterring fraud by examining and evaluating 
internal controls that reduce fraud risk. They assist in fraud detection by performing 
audit procedures that may uncover fraudulent financial reporting and misappropriation 


of assets. 
The audit committee has primary responsibility to oversee the organization’s financial Audit Committee 
reporting and internal control processes. In fulfilling this responsibility, the audit Oversight 


committee considers the potential for management override of internal controls and 
oversees management’s fraud risk assessment process, as well as antifraud programs 
and controls. The audit committee also assists in creating an effective “tone at the top” 
about the importance of honesty and ethical behavior by reinforcing management’s 
zero tolerance for fraud. 

Audit committee oversight also serves as a deterrent to fraud by senior management. 
For example, to increase the likelihood that any attempt by senior management to involve 
employees in committing or concealing fraud is promptly disclosed, oversight may include: 


* Direct reporting of key findings by internal audit to the audit committee 

* Periodic reports by ethics offigers about whi pe 

* Other reports about lack of AGG iok enhancer 

Because the audit committee plays an important role in establishing a proper tone at 
the top and in overseeing the actions of management, PCAOB Standard 5 requires the 
auditor of a public company to evaluate the effectiveness of the board and audit committee 
as part of the auditor’s evaluation of the operating effectiveness of internal control over 
financial reporting. As part of the evaluation, the auditor might consider the audit 
committee’s independence from management and the level of understanding between 
management and the audit committee regarding the latter’s responsibilities. An external 
auditor may gather insights by observing interactions between the audit team, the 
audit committee, and internal audit regarding the level of audit committee commitment 
to overseeing the financial reporting process. PCAOB Standard 5 notes that ineffective 
oversight by the audit committee may be a strong indicator of a material weakness in 
internal control over financial reporting. 


RESPONDING TO THE RISK OF FRAUD 


When risks of material misstatements due to fraud are identified, the auditor should OBJECTIVE 11-5 
first discuss these findings with management and obtain management’s views of the 





: fg : : Develop responses to 
potential for fraud and existing controls designed to prevent or detect misstatements. nei sales figks: 


As described in the last section, management may have programs designed to prevent, 
deter, and detect fraud, as well as controls designed to mitigate specific risks of fraud. 
Auditors should then consider whether such antifraud programs and controls mitigate 
the identified risks of material misstatements due to fraud or whether control defi- 
ciencies increase the risk of fraud. Auditor responses to fraud risk include the following: 





Chapter 11 / FRAUD AUDITING 349 


Change the 
Overall Conduct 
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Design and Perform 
Audit Procedures to 
Address Fraud Risks 


Design and 

Perform Procedures to 
Address Management 
Override of Controls 


1. Change the overall conduct of the audit 
2. Design and perform audit procedures to address fraud risks 
3. Design and perform procedures to address management override of controls 


Auditors can choose among several overall responses to an increased fraud risk. If the 
risk of misstatement due to fraud is increased, more experienced personnel may be 
assigned to the audit. In some cases, a fraud specialist may be assigned to the audit team. 

Fraud perpetrators are often knowledgeable about audit procedures. For this 
reason, SAS 99 requires auditors to incorporate unpredictability in the audit plan. For 
example, auditors may visit inventory locations or test accounts that were not tested in 
prior periods. Auditors should also consider tests that address misappropriation of 
assets, even when the amounts are not typically material. 


The appropriate audit procedures used to address specific fraud risks depend on the 
account being audited and type of fraud risk identified. For example, if concerns are 
raised about revenue recognition because of cutoff or channel stuffing, the auditor may 
review the sales journal for unusual activity near the end of the period and review the 
terms of sales. Later in this chapter, procedures for specific fraud risk areas are discussed. 
Auditors should also consider management’s choice of accounting principles. 
Careful attention should be placed on accounting principles that involve subjective 
measurements or complex transactions. Because auditors presume fraud risk in revenue 
recognition, they should also evaluate the company’s revenue recognition policies. 


The risk of management override of controls exists in almost all audits. Because manage- 
ment is in a unique position to perpetrate fraud by overriding controls that are otherwise 
operating effectively, auditors must perform procedures in every audit to address the risk 
of management override. Three procedures must be performed in every audit. 


Exa ago" DDFs aiken cdeygtments for Evidence of Possible 


Misstatémerits Due to Fraud Fraud often results from adjustments to amounts 
reported in the financial statements, even when effective internal controls exist over the 
rest of the recording processes. The auditor should first obtain an understanding of the 
entity’s financial reporting process, as well as controls over journal entries and other 
adjustments, and inquire of employees involved in the financial reporting process 
about inappropriate or unusual activity in processing journal entries and other 
adjustments. In some organizations, management uses spreadsheet software to make 
adjustments to financial information generated by the accounting system. These “top- 
side adjustments” have been used to manipulate financial statements. SAS 99 requires 
testing of journal entries and other financial statement adjustments. The extent of 
testing is affected by the effectiveness of controls and results of the inquiries. 


Review Accounting Estimates for Biases Fraudulent financial reporting is often 
accomplished through intentional misstatement of accounting estimates. SAS 99 
requires the auditor to consider the potential for management bias when reviewing 
current-year estimates. The auditor is required to “look back” at significant prior-year 
estimates to identify any changes in the company’s processes or management’s judgments 
and assumptions that might indicate a potential bias. For example, management’s 
estimates may have been clustered at the high end of the range of acceptable amounts in 
the prior year and at the low end in the current year. 

Accounting standards increasingly require that assets be recorded at fair value. 
Although market value is readily determinable for some assets, determining fair value 
often depends on estimates and judgment, creating opportunities for manipulation. 


Evaluate the Business Rationale for Significant Unusual Transactions SAS 99 
emphasizes understanding the underlying business rationale for significant unusual 
transactions that might be outside the normal course of business for the company. The 
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auditor should gain an understanding of the purposes of significant transactions to 
assess whether transactions have been entered into to engage in fraudulent financial 
reporting. For example, the company may engage in financing transactions to avoid 
reporting liabilities on the balance sheet. The auditor should determine whether the 
accounting treatment for any unusual transaction is appropriate in the circumstances, 
and whether information about the transaction is adequately disclosed in the financial 
statements. 


The auditor’s assessment of the risks of material misstatement due to fraud should be 
ongoing throughout the audit and coordinated with the auditor’s other risk assessment 
procedures. Auditors should be alert for the following conditions when doing the 
audit: 


* Discrepancies in the accounting records 

* Conflicting or missing audit evidence 

* Problematic or unusual relationships between the auditor and management 

* Results from substantive or final review stage analytical procedures that indicate 
a previously unrecognized fraud risk 

* Responses to inquiries made throughout the audit that are vague or implausible 
or that produce evidence that is inconsistent with other information 


Update Risk 
Assessment Process 


SPECIFIC FRAUD RISK AREAS 


Depending on the client’s industry, certain accounts are especially susceptible to manipu- 
lation or theft. Specific high-risk accounts are discussed next, including warning signs 
of fraud. But even when auditors are armed with knowledge of these warning signs, fraud 
remains extremely difficult to detest. Apa wh igns and 
other fraud detection techniques incf Ke fon 2 ae DF Rt ante E mis- 
statements due to fraud. 


Revenue and related accounts receivable and cash accounts are especially susceptible to 
manipulation and theft. A study sponsored by the Committee of Sponsoring Organi- 
zations (COSO) found that more than half of financial statement frauds involve 
revenues and accounts receivable. Similarly, because sales are often made for cash or are 
quickly converted to cash, cash is also highly susceptible to theft. 


Fraudulent Financial Reporting Risk for Revenue Asa result of the frequency of 
financial reporting frauds involving revenue recognition, the AICPA and SEC issued 
guidance dealing with revenue recognition. SAS 99 specifically requires auditors to 
identify revenue recognition as a fraud risk in most audits. 

Several reasons make revenue susceptible to manipulation. Most important, revenue 
is almost always the largest account on the income statement, therefore a misstatement 
only representing a small percentage of revenues can still have a large effect on income. 
An overstatement of revenues often increases net income by an equal amount, because 
related costs of sales are usually not recognized on fictitious or prematurely recognized 
revenues. Another reason revenue is susceptible to manipulation is the difficulty of 
determining the appropriate timing of revenue recognition in many situations. 

Three main types of revenue manipulations are: 


1. Fictitious revenues 
2. Premature revenue recognition 
3. Manipulation of adjustments to revenues 


Fictitious Revenues The most egregious forms of revenue fraud involve creating 
fictitious revenues. You may be aware of several recent cases involving fictitious revenues, 


OBJECTIVE 11-6 


Recognize specific fraud 


risk areas and develop 
procedures to detect fraud. 








Revenue and 
Accounts Receivable 
Fraud Risks 
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SHOE RETAILER 
UNABLE TO 
OUTRUN 
COMPETITION, 
JUSTICE 
DEPARTMENT 





Just for Feet was a fast-growing retail chain of 
athletic shoe stores. Despite high levels of compe- 
tition in the industry, the company continued to 
report record profits and growing sales, including 
21 consecutive quarters of growth in same-store 
sales, an important benchmark in the retail 
industry. In the late 1990s the chain continued its 
rapid growth, which triggered cash flow problems. 
To address this issue, the company issued $200 
million in high-yield bonds in April 1999. In 
September 1999 the company announced an 
unexpected quarterly loss of almost $26 million. 
By November 1999 the company was in bankruptcy, 


industries, Just for Feet received vendor allowances 
for promotion from the major athletic shoe 
manufacturers. Just for Feet was a major customer 
and maintained close relationships with these 
companies. Top executives of the company 
persuaded executives at five of these supplier 
companies to confirm fictitious receivables for 
vendor allowances. Several executives at Just for 
Feet pleaded guilty to criminal charges, as did the 
five executives at the vendors that had provided 
false confirmations. The audit firm involved also 
was fined and the partner and manager on the 
engagement were sanctioned for deficiencies in 


and entered into liquidation in February 2000. the audit. 
Subsequent investigations by the SEC, Justice 
Department and other authorities revealed that 
the company had inflated earnings over the 
period 1996 to 1999. 

Fraud is particularly difficult to detect when 
collusion is involved, and especially so when the 
collusion involves third parties. As in many retail 


Sources: 1. Securities and Exchange Commission 
Accounting and Enforcement Release 2026, 

June 1, 2004 (wwwsec.gov/litigation); 2. Securities 
and Exchange Commission Accounting and 
Enforcement Release 2238, April 26, 2005 
(www.sec.gov/litigation). 


but this type of fraud is not new. The 1931 Ultramares case described in Chapter 5 
(p. 121) involved fictitious revenue entries in the general ledger. 

Fraud perpetrators often go to great lengths to support fictitious revenue. Fraudu- 
lent activity at Equity Funding Corp. of America, which involved issuing fictitious 
insurance policies, lasted nearly a decade (from 1964 to 1973) and involved dozens of 
company employees. The Fran, held file-stuffing parties to create the fictitious 
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Premature Revenue Recognition Companies often accelerate the timing of revenue 
recognition to meet earnings or sales forecasts. Premature revenue recognition, the 
recognition of revenue before accounting standards requirements for recording revenue 
have been met, should be distinguished from cutoff errors, in which transactions are 
inadvertently recorded in the incorrect period. In the simplest form of accelerated 
revenue recognition, sales that should have been recorded in the subsequent period are 
recorded as current period sales. 

One method of fraudulently accelerating revenue is a “bill-and-hold” sale. Sales are 
normally recognized at the time goods are shipped, but in a bill-and-hold sale, the 
goods are invoiced before they are shipped. Another method involves issuing side 
agreements that modify the terms of the sales transaction. For example, revenue recog- 
nition is likely to be inappropriate if a major customer agrees to “buy” a significant 
amount of inventory at year-end, but a side agreement provides for more favorable 
pricing and unrestricted return of the goods if not sold by the customer. In some cases, 
as a result of the terms of the side agreement, the transaction does not qualify as a sale 
under accounting standards. 

Two notable examples of premature revenue recognition involve Bausch and Lomb 
and Xerox Corporation. In the Bausch and Lomb case, items were shipped that were 
not ordered by customers, with unrestricted right of return and promises that the 
goods did not have to be paid for until sold. The revenue recognition issues at Xerox 
were more complex. Capital equipment leases include sales, financing, and service 
components. Because the sales component is recognized immediately, Xerox attempted 
to maximize the amount allocated to this aspect of the transaction. 


Manipulation of Adjustments to Revenues The most common adjustment to revenue 
involves sales returns and allowances. A company may hide sales returns from the 
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Example of the Effect of Fictitious Receivables on Accounting ) 
Ratios Based on Regina Vacuum Company 
Year Ended June 30 
1988 1987 1986 
Sales $181,123 $126,234 $76,144 
Cost of sales (94,934) (70,756) (46,213) 
Gross profit 86,189 55,478 29,931 
Gross profit percentage 47.6% 43.9% 39.3% 
Year-end accounts receivable 51,076 27,801 14,402 
E Accounts receivable turnover? 3.55 4.54 5.29 J 











Accounts receivable turnover calculated as Sales/Ending accounts receivable 


auditor to overstate net sales and income. If the returned goods are counted as part of 
physical inventory, the return may increase reported income. In this case, an asset 
increase is recognized through the counting of physical inventory, but the reduction in 
the related accounts receivable balance is not made. 

Companies may also understate bad debt expense, in part because significant judg- 
ment is required to determine the correct amount. Companies may attempt to reduce 
bad debt expense by understating the allowance for doubtful accounts. Because the 
required allowance depends on the age and quality of accounts receivable, some com- 
panies have altered the aging of accounts receivable to make them appear more current. 


Warning Signs of Revenue Fraud Many potential warning signals or symptoms 
indicate revenue fraud. Two of thARAGAI ale Did CEM docu- 


mentary discrepancies. 


Analytical Procedures Analytical procedures often signal revenue frauds, especially 
gross margin percentage and accounts receivable turnover. Fictitious revenue over- 
states the gross margin percentage, and premature revenue recognition also overstates 
gross margin if the related cost of sales is not recognized. Fictitious revenues also lower 
accounts receivable turnover, because the fictitious revenues are also included in 
uncollected receivables. Table 11-4 includes comparative sales, cost of sales, and 
accounts receivable data for Regina Vacuum, including the year before the fraud and 
the two fraud years. Notice how both a higher gross profit percentage and lower accounts 
receivable turnover ratio in the most recent two years that include the fraud helped 
signal fictitious accounts receivable. 

In some frauds, management generated fictitious revenues to make analytical 
procedures results, such as gross margin, similar to the prior year. In frauds like this, 
analytical procedures are typically not useful to signal the fraud. 





POCKETING _ Sam Ralston was in charge of a university parking lot. After several years, the university rotated 

He was supposed to place a parking receipt on the Sam to another lot. An astute employee in the 

PARKING CASH dash of fe ee when bs ee oe en the driver, accounting office noticed that alee collected 
but he would often collect the cash and wave the from the lot seemed to increase after Sam’s 
driver in without a receipt, particularly for sporting departure. Further investigation revealed that 
events. The university considered it too expensive to average revenues declined at the new lot to 
have two employees handle parking, and it was diffi- which Sam had been assigned. Confronted with 
cult to count the paid vehicles in a lot because some the evidence, Sam confessed and was terminated 
cars were parked by university employees with passes. from employment. 
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Inventory Fraud Risks 


Documentary Discrepancies Despite the best efforts of fraud perpetrators, fictitious 
transactions rarely have the same level of documentary evidence as legitimate trans- 
actions. For example, in the well-known fraud at ZZZZ Best, insurance restoration 
contracts worth millions of dollars were supported by one or two page agreements and 
lacked many of the supporting details and evidence, such as permits, that are normally 
associated with these types of contracts. 

Auditors should be aware of unusual markings and alterations on documents, 
and they should rely on original rather than duplicate copies of documents. Because 
fraud perpetrators attempt to conceal fraud, even one unusual transaction in a 
sample should be considered to be a potential indicator of fraud that should be 
investigated. 


Misappropriation of Receipts Involving Revenue Although misappropriation of 
cash receipts is rarely as material as fraudulent reporting of revenues, such frauds can 
be costly to the organization because of the direct loss of assets. A typical misappro- 
priation of cash involves failure to record a sale or an adjustment to customer accounts 
receivable to hide the theft. 


Failure to Record a Sale One of the most difficult frauds to detect is when a sale is not 
recorded and the cash from the sale is stolen. Such frauds are easier to detect when 
goods are shipped on credit to customers. Tracing shipping documents to sales entries 
in the sales journal and accounting for all shipping documents can be used to verify 
that all sales have been recorded. 

It is much more difficult to verify that all cash sales have been recorded, especially 
if no shipping documents exist to verify the completeness of sales, and no customer 
account receivable records support the sale. In such cases, other documentary evidence 
is necessary to verify that all sales are recorded. For example, a retail establishment may 
require that all sales be recorded on a cash register. Recorded sales can then be com- 


ared to the totalam Ha cash register tape. If the sale is not included in 
the aba Bis PRE AgSE: frand. 
Theft of Cash Receipts After a Sale is anes It is much more difficult to hide the 
theft of cash receipts after a sale is recorded. If a customer’s payment is stolen, regular 
billing of unpaid accounts will quickly uncover the fraud. As a result, to hide the theft, 
the fraud perpetrator must reduce the customer’s account in one of three ways: 

1. Record a sales return or allowance 

2. Write off the customer’s account 

3. Apply the payment from another customer to the customer’s account, which is 

also known as lapping 


Warning Signs of Misappropriation of Revenues and Cash Receipts Relatively 
small thefts of sales and related cash receipts are best prevented and detected by 
internal controls designed to minimize the opportunity for fraud. For detecting larger 
frauds, analytical procedures and other comparisons may be useful. 


Inventory is often the largest account on many companies’ balance sheets, and auditors 
often find it difficult to verify the existence and valuation of inventories. As a result, 
inventory is susceptible to manipulation by managers who want to achieve certain 
financial reporting objectives. Because it is also usually readily saleable, inventory is 
also susceptible to misappropriation. 


Fraudulent Financial Reporting Risk for Inventory Fictitious inventory has 
been at the center of several major cases of fraudulent financial reporting. Many large 
companies have varied and extensive inventory in multiple locations, making it 
relatively easy for the company to add fictitious inventory to accounting records. 
While auditors are required to verify the existence of physical inventories, audit 
testing is done on a sample basis, and not all locations with inventory are typically 
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Example of the Effect of Fictitious Inventory on Inventory Turnover | 
Based on Crazy Eddie, Inc. 
Year Ended Year Ended 9 Months Ended 
March 1, 1987 March 2, 1986 March 3, 1985 

Sales $352,523 $262,268 $136,319 

Cost of sales (272,255) (194,371) (103,421) 

Gross profit 80,268 67,897 32,898 

Gross profit percentage 22.8% 25.9% 24.1% 

Year-end inventories 109,072 59,864 26,543 

Inventory turnover? 2.50 3.20 5.205 4 
L 











inventory turnover calculated as Cost of sales/Ending inventory. 
Inventory turnover calculated based on annualized Cost of sales. 


tested. In some cases involving fictitious inventories, auditors informed the client in 
advance which inventory locations were to be tested. As a result, it was relatively easy 
for the client to transfer inventories to the locations being tested. 


Warning Signs of Inventory Fraud Similar to deceptions involving accounts 
receivable, many potential warning signals or symptoms point to inventory fraud. 
Analytical procedures are one useful technique for detecting inventory fraud. 


Analytical Procedures Analytical procedures, especially gross margin percentage and 
inventory turnover, often help uncover inventory fraud. Fictitious inventory understates 
cost of goods sold and overstates “Apay ein PDF“s setet eeaPry also 
lowers inventory turnover. Table 11 Go 2 of the effects ctitl ci Sie itory 
on inventory turnover based on the Crazy Eddie fraud. Note that the gross profit per- 
centage did not signal the existence of fictitious inventories, but the significant decrease 
in inventory turnover was a sign of fictitious inventories. 


Cases of fraudulent financial reporting involving accounts payable are relatively common 
although less frequent than frauds involving inventory or accounts receivable. The 
deliberate understatement of accounts payable generally results in an understatement of 
purchases and cost of goods sold and an overstatement of net income. Significant 
misappropriations involving purchases can also occur in the form of payments to 
fictitious vendors, as well as kickbacks and other illegal arrangements with suppliers. 


Fraudulent Financial Reporting Risk for Accounts Payable Companies may 
engage in deliberate attempts to understate accounts payable and overstate income. 
This can be accomplished by not recording accounts payable until the subsequent 
period or by recording fictitious reductions to accounts payable. 

All purchases received before the end of the year should be recorded as liabilities. 
This is relatively easy to verify if the company accounts for prenumbered receiving 
reports. However, if the receiving reports are not prenumbered or the company 
deliberately omits receiving reports from the accounting records, it may be difficult for 
the auditor to verify whether all liabilities have been recorded. In such cases, analytical 
evidence, such as unusual changes in ratios, may signal that accounts payable are 
understated. 

Companies often have complex arrangements with suppliers that result in reduc- 
tions to accounts payable for advertising credits and other allowances. These arrangements 
are often not as well documented as acquisition transactions. Some companies have 
used fictitious reductions to accounts payable to overstate net income. Therefore, 


Purchases and 
Accounts Payable 
Fraud Risks 
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Other Areas of 
Fraud Risk 


auditors should read agreements with suppliers when amounts are material and make 
sure the financial statements reflect the substance of the agreements. 


Misappropriations in the Acquisition and Payment Cycle The most common 
fraud in the acquisitions area is for the perpetrator to issue payments to fictitious vendors 
and deposit the cash in a fictitious account. These frauds can be prevented by allowing 
payments to be made only to approved vendors and by carefully scrutinizing documen- 
tation supporting the acquisitions by authorized personnel before payments are made. In 
other misappropriation cases, the accounts payable clerk or other employee steals a check 
to a legitimate vendor. Documentation related to the purchase is then resubmitted for 
payment to the vendor. Such fraud can be prevented by canceling supporting documents 
to prevent their use as support for multiple payments. 


Although some accounts are more susceptible than others, almost every account is 
subject to manipulation. Let’s examine some other accounts with specific risks of 
fraudulent financial reporting or misappropriation. 


Fixed Assets Fixed assets, a large balance sheet account for many companies, are 
often based on subjectively determined valuations. As a result, fixed assets may be a 
target for manipulation, especially for companies without material receivables or 
inventories. For example, companies may capitalize repairs or other operating expenses 
as fixed assets. Such frauds are relatively easy to detect if the auditor examines evidence 
supporting fixed asset additions. Nevertheless, prior cases of fraudulent financial 
reporting, such as WorldCom, have involved improper capitalization of assets. 
Because of their value and salability, fixed assets are also targets for theft. This is espe- 
cially true for fixed assets that are readily portable, such as laptop computers. To reduce 
the potential for theft, fixed assets should be physically protected whenever possible, 
engraved, or otherwise permanently labeled, and should be periodically inventoried. 


nee: BAGO, P, 1 raggly a significant risk area for fraudulent financial report- 
ing. FOr ay Enhancer and net income by recording excess 
labor costs in inventory. Company employees are sometimes used to construct fixed 
assets. Excess labor cost may also be capitalized as fixed assets in these circumstances. 
Material fringe benefits, such as retirement benefits, are also subject to manipulation. 

Payroll fraud involving misappropriation of assets is fairly common, but the 
amounts involved are often immaterial. The two most common areas of fraud are the 
creation of fictitious employees and overstatement of individual payroll hours. The 
existence of fictitious employees can usually be prevented by separation of the human 
resource and payroll functions. Overstatement of hours is typically prevented by use of 
time clocks or approval of payroll hours. 


RESPONSIBILITIES WHEN FRAUD IS SUSPECTED 


OBJECTIVE 11-7 


Understand interview tech- 


niques and other activities 
after fraud is suspected. 





Responding 

to Misstatements 
That May Be the 
Result of Fraud 


Frauds are often detected through the receipt of an anonymous tip or by accident, 
internal controls, or the internal audit function. Figure 11-6 highlights that external 
auditors detect a higher percentage of the largest frauds relative to the detection of all 
cases, likely attributable to their focus on material misstatements. 


Throughout an audit, the auditor continually evaluates whether evidence gathered and 
other observations made indicate material misstatement due to fraud. All misstate- 
ments the auditor finds during the audit should be evaluated for any indication of 
fraud. When fraud is suspected, the auditor gathers additional information to 
determine whether fraud actually exists. Often, the auditor begins by making additional 
inquiries of management and others. 
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Source: 2008 Report to the Nation on Occupational Fraud and Abuse, Association of Certified Fraud Examiners, 2008. 


Use of Inquiry Inquiry can be an effective audit evidence gathering technique, as we 
discussed in Chapter 7. Interviewintea ge ap DR hyhancek issues 
and observe the respondent’s verbal and nonverbal responses. Interviewing can also 
help identify issues omitted from documentation or confirmations. The auditor can also 
modify questions during the interview based on the interviewee’s responses. 

Inquiry as an audit evidence technique should be tailored to the purpose for 
which it is being used. Depending on the purpose, the auditor may ask different types 
of questions and change the tone of the interview. One or more of three categories of 
inquiry can be used, depending on the auditor’s objectives. 


Categories of Inquiry An auditor uses informational inquiry to obtain information 
about facts and details that the auditor does not have, usually about past or current 
events or processes. Auditors often use informational inquiry when gathering follow-up 
evidence about programs and controls or other evidence involving a misstatement or 
suspected fraud uncovered during the audit. Auditors can most effectively use informa- 
tional inquiry by posing open-ended questions about details of events, processes, or 
circumstances. 

An auditor uses assessment inquiry to corroborate or contradict prior informa- 
tion. The auditor often starts assessment inquiry with broad, open-ended questions 
that allow the interviewee to provide detailed responses that can later be followed up 
with more specific questions. One common use of assessment inquiry is to corroborate 
management responses to earlier inquiries by asking questions of other employees. 

Interrogative inquiry is often used to determine if the individual is being deceptive 
or purposefully omitting disclosure of key knowledge of facts, events, or circumstances. 
Often, interrogative inquiry is confrontational, given that subjects may be defensive, as 
they cover up their knowledge of specific facts, events, or circumstances. When using inter- 
rogative inquiry, the auditor often asks specific directed questions that seek either a “yes” 
or “no” response. Interrogative interviewing should typically be done by senior members 
of the audit team who are experienced and knowledgeable about the client’s affairs. 
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Evaluating Responses to Inquiry For inquiry to be effective, an auditor needs to be 
skilled at listening and evaluating responses to questions. Typically, the interviewee’s 
initial response will omit useful information. Effective follow-up questions often lead 
to better information to assess whether fraud exists. Good listening techniques and 
observation of behavioral cues strengthen the auditor’s inquiry techniques. 


Listening Techniques It is critical for the auditor to use effective listening skills 
throughout the inquiry process. The auditor should stay attentive by maintaining eye 
contact, nodding in agreement, or demonstrating other signs of comprehension. 
Auditors should also attempt to avoid preconceived ideas about the information being 
provided. Good listeners also take advantage of silence to think about the information 
provided and to prioritize and review information heard. 


Observing Behavioral Cues An auditor who is skilled in using inquiry evaluates 
verbal and nonverbal cues when listening to the interviewee. Verbal cues, such as those 
outlined in Table 11-6, may indicate the responder’s nervousness, lack of knowledge, or 
even deceit. In addition to observing verbal cues, the use of inquiry allows the auditor 
to observe nonverbal behaviors. Expert investigators note that subjects who are 
uncomfortable providing a response to an inquiry often exhibit many of the nonverbal 
behaviors shown in Table 11-7. 

Of course, not everyone who exhibits these behaviors is uncomfortable responding 
to the auditor’s inquiry. The key is to identify when the individual’s behavior begins to 
change from his or her normal behavior. Less-experienced auditors should be cautious 
when they start to observe unusual behaviors, and they should discuss their concerns 
with senior members of the audit team before doing anything in response to those 
behaviors. 


Other Responsibilities When Fraud Is Suspected When the auditor suspects that 
fraud may be present, SAS 99 requires the auditor to obtain additional evidence to deter- 
mine ApagaeRDEa Enhanced: often use inquiry, as previously 


discussed, as part of that information-gathering process. 


TABLE 11-6 


Observing Verbal Cues During Inquiry 








Verbal Cue Examples Implications 





Extensive use of modifiers, such as “generally,” 
“usually,” “often,” “normally,” etc. 


Auditors should probe further to determine whether the use of the modifier 
indicates that there are exceptions to the processes or circumstances being 
examined. 





Frequent rephrasing by the interviewee of 
the auditor's question. 


Skilled auditors recognize that rephrasing often indicates that the interviewee 
is uncertain about his or her response or is attempting to stall for time. 





ni 


Filler terms, such as “um,” “well,” Auditors should be alert for filler terms, given that they often suggest that the 





x 


“to tell you the truth,” etc. 


interviewee is hesitant or unable to respond to the inquiry. 





Forgetfulness and acknowledgments of 
nervousness, such as “I'm a bit nervous” 
or “I just can’t remember.” 


When this continues to occur, auditors should be concerned about the 
possibility of deception. 





Tolerant attitudes, such as “it depends on the 
circumstances,” and overqualified responses, 
such as “to the best of my memory.’ 


Dishonest people are often tolerant toward someone who may have committed 
fraud. 





Reluctance to end an interview. 


Someone who has been honest generally is ready to terminate an interview. 
Those trying to deceive may try to continue the inquiry process to convince 
the auditor that they are telling the truth. 





Source: Reprinted by permission of The Association of Certified Fraud Examiners. 
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fener Observing Nonverbal Cues During Inquiry 








* Cross their arms or legs. 

- Use distracting noises, such as finger tapping or 
drumming. 

- Lean away from the auditor, usually toward the door 
or window, in an effort to create spatial distance. 


Nonverbal Cue Examples Implications 
Physical Barriers—Interviewees may When the interviewee feels uncomfortable with a specific 
» Block their mouth with their hands, pens, pencils, inquiry, he or she may put up nonverbal barriers to try to 
papers, etc. keep the auditor at a comfortable distance. 





» Show signs of having a dry mouth. itself physically. 
> Lick lips, swallow, or clear their throats frequently. 

- Fidget, tap their foot, or shake a leg. 

- Sweat or become flushed in the face. 

» Avoid eye contact. 





Signs of Stress—Interviewees under stress may In most people, lying will produce stress, which can manifest 








Audit Software Analysis Auditors often use audit software such as ACL or IDEA to 
determine whether fraud may exist. For example, software tools can be used to search for 
fictitious revenue transactions by searching for duplicate sales invoice numbers or by 
reconciling databases of sales invoices to databases of shipping records, to ensure that all 
sales are supported by evidence of shipping. Similarly, these tools provide efficient searches 
for breaks in document sequences, which may indicate misstatements related to the 
completeness objective for liabilities and expense accounts. Auditors use audit software, 
including basic spreadsheet tools such as Excel, to sort transactions or account balances 
into subcategories for further audit tApaAgG@aBh Ek amnhaneeFdsheet 
options to sort transactions exceeding a certain size or consisting of other unusual charac- 
teristics such as non-standard account numbers or unusual dollar balances (for example, 
transactions with rounded dollar amounts may be unusual for certain industries). 

Auditors also use basic spreadsheet tools, such as Excel, to perform analytical 
procedures at disaggregated levels. For example, sales can be sorted to disaggregate the 
data by location, by product type, and across time (monthly) for further analytical 
procedure analysis. Unusual trends not observable at the aggregate level may be detected 
when the data is analyzed in greater detail. 


Expanded Substantive Testing Auditors may also expand other substantive pro- 
cedures to address heightened risks of fraud. For example, when there is a risk that sales 
terms may have been altered to prematurely record revenues, the auditor may modify 
the accounts receivable confirmation requests to obtain more detailed responses from 
customers about specific terms of the transactions, such as payment, transfer of custody, 
and return policy terms. In some instances, the auditor may confirm individual trans- 
actions rather than entire account balances, particularly for large transactions recorded 
close to year-end. 

Often the risk of fraud is high for accounts that are based on management’s subjective 
estimation. To respond to heightened risks that management used inappropriate assump- 
tions to estimate account balances, such as the allowance for inventory obsolescence, the 
auditor may use specialists to assist in evaluating the accuracy and reasonableness of 
key assumptions. For example, auditors may rely on inventory specialists to assess the 
obsolescence of electronic parts inventories and business valuation experts to assess the 
reasonableness of market value assumptions made for certain investments. 


Other Audit Implications SAS 99 requires the auditor to consider the implications 
for other aspects of the audit. For example, fraud involving the misappropriation of 
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cash from a small petty cash fund normally is of little significance to the auditor, 
unless the matter involves higher-level management, which may indicate a more 
pervasive problem involving management’s integrity. This may indicate to the auditor 
a need to re-evaluate the fraud risk assessment and the impact on the nature, timing, 
and extent of audit evidence. 

When the auditor determines that fraud may be present, SAS 99 requires the 
auditor to discuss the matter and audit approach for further investigation with an 
appropriate level of management, even if the matter might be considered inconse- 
quential. The appropriate level of management should be at least one level above those 
involved, as well as senior management and the audit committee. If the auditor believes 
that senior management may be involved in the fraud, the auditor should discuss the 
matter directly with the audit committee. 

The discovery that fraud exists also has implications for the public company 
auditor’s report on internal control over financial reporting. PCAOB Standard 5 states 
that fraud of any magnitude by senior management is at least a significant deficiency 
and may be a material weakness in internal control over financial reporting. This 
includes fraud by senior management that results in even immaterial misstatements. If 
the fraud by senior management is a material weakness, the auditor’s report on internal 
control over financial reporting will contain an adverse opinion. 

Sometimes, auditors identify risks of material misstatements due to fraud that have 
internal control implications. In some cases, the auditor’s consideration of manage- 
ment’s antifraud programs and controls identifies deficiencies that fail to mitigate these 
risks of fraud. The auditor must communicate those items to management and those 
charged with governance, such as the audit committee, if they are considered signifi- 
cant deficiencies or material weaknesses. When auditing the financial statements of a 
public company, the auditor should consider those deficiencies when auditing internal 
controls over financial reporting, as we described in Chapter 10. 

Apage (PDP EN Ra'éee@gener than the client’s senior manage- 
ment and its fudit committee ordinarily is not part of the auditor’s responsibility. As 
described in Chapter 4, such disclosure is prevented by the auditor’s professional code 
of conduct and may violate legal obligations of confidentiality. 

The results of the auditor’s procedures may indicate such a significant risk of 
material misstatement due to fraud that the auditor should consider withdrawing from 
the audit. Withdrawal may depend on management’s integrity and the diligence and 
cooperation of management and the board of directors in investigating the potential 
fraud and taking appropriate action. 


SUMMARY 


This chapter examined the two types of fraud considered by auditors when auditing 
financial statements: fraudulent financial reporting and misappropriations of assets. 
Auditors are responsible for obtaining reasonable assurance that material misstatements 
are detected, whether due to errors or fraud. The chapter described the way auditors gather 
information to assess fraud risk in every audit and develop appropriate responses to 
identified fraud risks, after considering the effectiveness of management’s antifraud 
programs and controls. Several illustrations of typical fraud techniques highlighted areas 
subject to greater fraud risk and provided examples of effective audit procedures to address 
those risk areas. 

Once auditors suspect fraud, they gather additional evidence, often through inquiry, and 
are responsible for making certain communications about suspected or detected fraud to 
senior management and the audit committee. Auditors of large public companies must 
consider the implications of their fraud risk assessments, including any suspected fraud, 
when arriving at their opinion on the operating effectiveness of internal control over 
financial reporting. 


Part 2 / THE AUDIT PROCESS 


ESSENTIAL TERMS 


Assessment inquiry—inquiry to cor- 
roborate or contradict prior information 
obtained 


Earnings management—deliberate actions 
taken by management to meet earnings 
objectives 


Fraud risk factors—entity factors that 
increase the risk of fraud 


Fraud triangle—represents the three con- 
ditions of fraud: incentives/pressures, 
opportunities, and attitudes/rationali- 
zation 


Horizontal Analysis—analysis of per- 
centage changes in financial statement 
numbers compared to the previous period 


Income smoothing—form of earnings 
management in which revenues and ex- 
penses are shifted between periods to 
reduce fluctuations in earnings 


REVIEW QUESTIONS 


Informational inquiry—inquiry to obtain 
information about facts and details the 
auditor does not have 

Interrogative inquiry—inquiry used to 
determine if the interviewee is being 
deceptive or purposefully omitting dis- 
closure of key knowledge of facts, events, 
or circumstances 


Premature revenue recognition—recog- 
nition of revenue before accounting 
standards requirements for recording 
revenue have been met 


Professional skepticism—an attitude of 
the auditor that neither assumes manage- 
ment is dishonest nor assumes unques- 
tioned honesty 


Vertical Analysis—analysis in which 
financial statement numbers are con- 
verted to percentages of a base; also called 
common-size financial statements 


11-1 (Objective 11-1) Define poste financial reporting and a e two examples that 
illustrate fraudulent financial reporti Apag ce) PD FE ancer 

11-2 (Objective 11-1) Define misappropriation of assets and give two examples of mis- 
appropriation of assets. 

11-3 (Objective 11-1) Distinguish fraudulent financial reporting from misappropriation of 
assets. 

11-4 (Objective 11-2) What are the three conditions of fraud often referred to as “the fraud 
triangle?” 

11-5 (Objective 11-2) Give examples of risk factors for fraudulent financial reporting for each of 
the three fraud conditions: incentives/pressures, opportunities, and attitudes/rationalization. 
11-6 (Objective 11-2) Give examples of risk factors for misappropriation of assets for each of 
the three fraud conditions: incentives/pressures, opportunities, and attitudes/rationalization. 
11-7 (Objective 11-3) What sources are used by the auditor to gather information to assess 
fraud risks? 

11-8 (Objective 11-3) What should the audit team consider in its planning discussion 
about fraud risks? 

11-9 (Objective 11-3) Auditors are required to make inquiries of individuals in the 
company when gathering information to assess fraud risk. Identify those with whom the 
auditor must make inquiries. 

11-10 (Objective 11-4) Describe the purpose of corporate codes of conduct and identify 
three examples of items addressed in a typical code of conduct. 

11-11 (Objective 11-4) Discuss the importance of the control environment, or “setting the 
tone at the top,” in establishing a culture of honesty and integrity in a company. 

11-12 (Objective 11-4) Distinguish management’s responsibility from the audit com- 
mittee’s responsibility for designing and implementing antifraud programs and controls 
within a company. 

11-13 (Objective 11-5) What are the three categories of auditor responses to fraud risks? 
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11-14 (Objective 11-5) What three auditor actions are required to address the potential for 
management override of controls? 

11-15 (Objective 11-6) Describe the three main techniques used to manipulate revenue. 
11-16 (Objective 11-6) You go through the drive-through window of a fast food restaurant 
and notice a sign that reads “your meal is free if we fail to give you a receipt.” Why would the 
restaurant post this sign? 

11-17 (Objective 11-7) Name the three categories of inquiry and describe the purpose of 
each when used by an auditor to obtain additional information about a suspected fraud. 
11-18 (Objective 11-7) Identify three verbal and three nonverbal cues that may be observed 
when making inquiries of an individual who is being deceitful. 

11-19 (Objective 11-7) You have identified a suspected fraud involving the company’s 
controller. What must you do in response to this discovery? How might this discovery affect 
your report on internal control when auditing a public company? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


11-20 (Objectives 11-2, 11-3) The following questions address fraud risk factors and the 
assessment of fraud risk. 


a. Because of the risk of material misstatements due to fraud (fraud risk), an audit of 
financial statements in accordance with generally accepted auditing standards should 
be performed with an attitude of 
(1) objective judgment. (3) professional skepticism. 

(2) independent integrity. (4) impartial conservatism. 
b. Which of the following circumstances is most likely to cause an auditor to consider 
whether material misstatements due to fraud exist in an entity’s financial statements? 
(1) Management places ates aa on eine earnings projections of external parties. 
pays °PDP Haniee reporting process and internal control. 
igniffcan Ae ieee in internal control previously communicated to manage- 
ment have been corrected. 
(4) Transactions selected for testing are not supported by proper documentation. 


c. Which of the following characteristics is most likely to heighten an auditor’s concern 
about the risk of material misstatements due to fraud in an entity’s financial statements? 
(1) The entity’s industry is experiencing declining customer demand. 

(2) Employees who handle cash receipts are not bonded. 

(3) Internal auditors have direct access to the board of directors and the entity’s 
management. 

(4) The board of directors is active in overseeing the entity’s financial reporting policies. 


d. Which of the following circumstances is most likely to cause an auditor to increase the 
assessment of the risk of material misstatement of the financial statements due to fraud? 
(1) Property and equipment are usually sold at a loss before being fully depreciated. 
(2) Unusual discrepancies exist between the entity’s records and confirmation replies. 
(3) Monthly bank reconciliations usually include several in-transit items. 

(4) Clerical errors are listed on a computer-generated exception report. 


11-21 (Objective 11-5) The following questions concern the auditor’s responses to the 
possibility of fraud. 

a. When fraud risk factors are identified during an audit the auditor’s documentation 
should include 





The Risk The Auditor's Response to 

Factors Identified The Risk Factors Identified 
(1) Yes Yes 
(2) Yes No 
(3) No Yes 
(4) No No 
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b. If an independent audit leading to an opinion on financial statements causes the auditor 
to believe that a material misstatement due to fraud exists, the auditor should first 
(1) consider the implications for other aspects of the audit and discuss the matter with 
the appropriate levels of management. 
(2) make the investigation necessary to determine whether fraud has actually occurred. 
(3) request that management investigate to determine whether fraud has actually 
occurred. 
(4) consider whether fraud was the result of a failure by employees to comply with 
existing controls. 


wa 


eS wa 


c. As a result of analytical procedures, the auditor determines that the gross profit per- 
centage has increased from 30 percent in the preceding year to 40 percent in the 
current year. The auditor should 
(1) document management’s plans for maintaining this trend. 

(2) evaluate management’s performance in causing the improvement in gross profit. 
(3) require footnote disclosure. 
(4) increase the auditor’s assessment of the risk of revenue misstatements, including fraud. 


11-22 (Objective 11-6) The following questions address fraud risks in specific audit areas 
and accounts. 


a. Cash receipts from sales on account have been misappropriated. Which of the follow- 
ing acts will conceal this embezzlement and be least likely to be detected by the auditor? 
(1) Understating the sales journal. 

(2) Overstating the accounts receivable control account. 
(3) Overstating the accounts receivable subsidiary records. 
(4) Understating the cash receipts journal. 


b. An auditor discovers that a client’s accounts receivable turnover is substantially lower 
for the current year than for the prior year. This trend may indicate that 
(1) fictitious credit sales have been recorded during the year. 
(2) employees have stolen inven j g re d. 
(3) the client recently tightened OS ov PDF: E nhancer 
(4) an employee has been lapping receivables in both years. 


c. Which of the following internal controls will best detect the theft of valuable items 
from an inventory that consists of hundreds of different items selling for $1 to $10 and 
a few items selling for hundreds of dollars? 

(1) Maintain a perpetual inventory of only the more valuable items, with frequent 
periodic verification of the validity of the perpetual inventory records. 

(2) Have an independent auditing firm examine and report on management’s asser- 
tion about the design and operating effectiveness of the control activities relevant 
to inventory. 

(3) Have separate warehouse space for the more valuable items, with sequentially 
numbered tags. 

(4) Require an authorized officer’s signature on all requisitions for the more valuable 
items. 


DISCUSSION QUESTIONS AND PROBLEMS 


11-23 (Objective 11-2) During audit planning, an auditor obtained the following information: 


1. Management has a strong interest in employing inappropriate means to minimize 
reported earnings for tax-motivated reasons. 

2. The company’s board of directors includes a majority of directors who are inde- 
pendent of management. 

3. Assets and revenues are based on significant estimates that involve subjective judg- 
ments and uncertainties that are hard to corroborate. 

4, The company is marginally able to meet exchange listing and debt covenant require- 
ments. 
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5. New accounting pronouncements have resulted in explanatory paragraphs for 
consistency for the company and other firms in the industry. 

6. The company has experienced low turnover in management and its internal audit 
function. 

7. Significant operations are located and conducted across international borders in 
jurisdictions where differing business environments and cultures exist. 

8. There are recurring attempts by management to justify marginal or inappropriate 
accounting on the basis of materiality. 

9. The company’s financial performance is threatened by a high degree of competition 
and market saturation. 


a. Indicate whether the information indicates an increased risk for fraud. 


b. If the information indicates an increased risk of fraud, indicate which fraud condition 
(incentives/pressures, opportunities, or attitudes/rationalization) is indicated. 


11-24 (Objectives 11-1, 11-2, 11-3) Assessing the risk of fraud in a financial statement 
audit is a difficult audit judgment. Auditing standards require the auditor to perform 
several audit procedures to accumulate information to assess the risk of fraud. You are the 
in-charge auditor responsible for planning the financial statement audit of Spencer, Inc. 
Two new staff auditors are assisting you with the initial audit planning and have asked you 
the following questions. 

Briefly summarize your response to these staff auditor questions: 


a. What is the purpose of the audit team’s brainstorming session? 

b. Who should attend the brainstorming session and when should the session be held? 
c. What is the role of the two staff auditors in the brainstorming session? 

d. What is the auditor’s responsibility under auditing standards for detecting fraud? 


11-25 (Objectives 11-2, 11-6) The Art Appreciation Society operates a museum for the 
benefit and enjoyment of the community. 

Why: O uP PF t&inhaneelgrks who are positioned at the entrance 
collect a $5.00 ddmission fee from each nonmember patron. Members of the Art Appreciation 
Society are permitted to enter free of charge upon presentation of their membership cards. 

At the end of each day, one of the clerks delivers the proceeds to the treasurer. The 
treasurer counts the cash in the presence of the clerk and places it in a safe. Each Friday 
afternoon, the treasurer and one of the clerks deliver all cash held in the safe to the bank 
and receive an authenticated deposit slip that provides the basis for the weekly entry in the 
accounting records. 

The Art Appreciation Society board of directors has identified a need to improve its 
internal controls over cash admission fees. The board has determined that the cost of 
installing turnstiles, sales booths, or otherwise altering the physical layout of the museum 
will greatly exceed any benefits. However, the board has agreed that the sale of admission 
tickets must be an integral part of its improvement efforts. 

Smith has been asked by the board of directors of the Art Appreciation Society to review 
the internal control over cash admission fees and provide suggestions for improvements. 


a. Indicate deficiencies in the existing internal controls over cash admission fees that 
Smith should identify, and recommend one improvement for each of the deficiencies 
identified. Organize the answer as indicated in the following illustrative example.* 


Deficiencies Recommendation 
1. There is no basis for establishing 1. Prenumbered admission tickets should be issued 
the number of paying patrons. upon payment of the admission fee. 





b. Indicate which of the deficiencies, if any, increase the likelihood of misappropriation 
of assets. 


c. Indicate which of the deficiencies, if any, increase the likelihood of fraudulent finan- 
cial reporting. 


*AICPA adapted. 
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11-26 (Objectives 11-1, 11-4, 11-6) The following misstatements are included in the 
accounting records of the Joyce Manufacturing Company: 


1. A shipment to a customer was not billed because of the loss of the bill of lading. 

2. A sales invoice was miscalculated by $1,000 as a result of a key-entry mistake. 

3. Cash paid on accounts receivable that had been prelisted by a secretary was stolen by 
the bookkeeper who records cash receipts and accounts receivable. He failed to 
record the transactions. 

4. A material sale was recorded on the last day of the year even though the goods were 
not shipped until 3 days later. 

5. Merchandise was shipped to a customer, but no bill of lading was prepared. Because 
billings are prepared from bills of lading, the customer was not billed. 

6. A sale to a residential customer was unintentionally classified as a commercial sale. 

7. The shipping clerk included several additional valuable items to a shipment that 
were not included in the customer’s order and were not invoiced to the customer. 
The shipping clerk has an arrangement with the customer to share the proceeds 
from sales of the additional items shipped. 

8. Cash paid on accounts receivable was stolen by the mail clerk when the mail was 
opened. 


a. Identify whether each misstatement is an error or fraud. 


b. For each misstatement, list one or more controls that should have prevented it from 
occurring on a continuing basis. 


c. For each misstatement, identify evidence the auditor can use to uncover it. 


11-27 (Objectives 11-2, 11-4, 11-6) Appliances Repair and Service Company bills all 
customers rather than collecting in cash when services are provided. All mail is opened by 
Tom Gyders, treasurer. Gyders, a CPA, is the most qualified person in the company who is in 
the office daily. Therefore, he can solve problems and respond to customers’ needs quickly. 
Upon receipt of cash, he immediately prepares a listing of the cash and a duplicate deposit 
slip. Cash is deposited daily. Gyders usf\’ aga toBDEhe Enhian@en in the 
computerized accounting records. He also contacts customers about uncollected accounts 
receivable. Because he is so knowledgeable about the business and each customer, he grants 
credit, authorizes all sales allowances, and charges off uncollectible accounts. The owner is 
extremely pleased with the efficiency of the company. He can run the business without 
spending much time there because of Gyders’ effectiveness. 

Imagine the owner’s surprise when he discovers that Gyders has committed a major 
theft of the company’s cash receipts. He did so by not recording sales, recording improper 
credits to recorded accounts receivable, and overstating receivables. 


a. Given that cash was prelisted, went only to the treasurer, and was deposited daily, what 
internal control deficiency permitted the fraud? 


b. What are the benefits of a prelisting of cash? Who should prepare the prelisting and 
what duties should that person not perform? 


c. Assume that an appropriate person, as discussed in part b, prepares a prelisting of 
cash. What is to prevent that person from taking the cash after it is prelisted but before 
it is deposited? 

d. Who should deposit the cash, given your answer to part b? 


11-28 (Objectives 11-2, 11-4, 11-6) The Kowal Manufacturing Company employs about 50 
production workers and has the following payroll procedures. 

The factory foreman interviews applicants and on the basis of the interview either hires 
or rejects them. When applicants are hired, they prepare a W-4 form (Employee’s 
Withholding Exemption Certificate) and give it to the foreman. The foreman writes the 
hourly rate of pay for the new employee in the corner of the W-4 form and then gives the 
form to a payroll clerk as notice that the worker has been employed. The foreman verbally 
advises the payroll department of rate adjustments. 

A supply of blank time cards is kept in a box near the time clock at the entrance to the 
factory. Each worker takes a time card on Monday morning, fills in his or her name, and 
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punches the time clock upon their daily arrival and departure. At the end of the week, the 
workers drop the time cards in a box near the door to the factory. 

On Monday morning, the completed time cards are taken from the box by a payroll clerk. 
One of the payroll clerks then enters the payroll transactions into the computer, which 
records all information for the payroll journal that was calculated by the clerk and 
automatically updates the employees’ earnings records and general ledger. Employees are 
automatically removed from the payroll when they fail to turn in a time card. 

The payroll checks that are not directly deposited into employees’ bank accounts are 
manually signed by the chief accountant and given to the foreman. The foreman distributes 
the checks to the workers in the factory and arranges for the delivery of the checks to the 
workers who are absent. The payroll bank account is reconciled by the chief accountant, 
who also prepares the various quarterly and annual payroll tax reports. 


a. List the most important deficiency in internal control and state the misstatements that 
are likely to result from the deficiency. 


b. For each deficiency that increases the likelihood of fraud, identify whether the likely 
fraud is misappropriation of assets or fraudulent financial reporting.* 


11-29 (Objectives 11-2, 11-3, 11-4, 11-6) Each year near the balance sheet date, when the 
president of Bargon Construction, Inc. takes a 3-week vacation to Hawaii, she signs several 
checks to pay major bills during the period she is absent. Jack Morgan, head bookkeeper for 
the company, uses this practice to his advantage. Morgan makes out a check to himself for 
the amount of a large vendor’s invoice, and because there is no acquisitions journal, he 
records the amount in the cash disbursements journal as an acquisition from the supplier 
listed on the invoice. He holds the check until several weeks into the subsequent period to 
make sure that the auditors do not get an opportunity to examine an electronic copy of the 
cancelled check. Shortly after the first of the year when the president returns, Morgan 
resubmits the invoice for payment and again records the check in the cash disbursements 
journal. At that point, he marks the invoice “paid” and files it with all other paid invoices. 


Morga pa oly pr ggthi bevey ayy for several years and feels confident 
that a. eveloped a foo Foc qt 


a. What is the auditor’s responsibility for discovering this type of embezzlement? 
b. What deficiencies exist in the client’s internal control? 
c. What evidence can the auditor use to uncover the fraud? 


11-30 (Objective 11-1) The following are activities that occurred at Franklin Manufacturing, 
a nonpublic company. 


1. Franklin’s accountant did not record checks written in the last few days of the year until 
the next accounting period to avoid a negative cash balance in the financial statements. 

2. Franklin’s controller prepared and mailed a check to a vendor for a carload of material 
that was not received. The vendor’s chief accountant, who is a friend of Franklin’s 
controller, mailed a vendor’s invoice to Franklin, and the controller prepared a 
receiving report. The vendor’s chief accountant deposited the check in an account he 
had set up with a name almost identical to the vendor’s. 

3, The accountant recorded cash received in the first few days of the next accounting 
period in the current accounting period to avoid a negative cash balance. 

4, Discounts on checks to Franklin’s largest vendor are never taken, even though the 
bills are paid before the discount period expires. The president of the vendor’s 
company provides free use of his ski lodge to the accountant who processes the checks 
in exchange for the lost discounts. 

5. Franklin shipped and billed goods to a customer in New York on December 23, and 
the sale was recorded on December 24, with the understanding that the goods will be 
returned on January 31 for a full refund plus a 5 percent handling fee. 

6. Franklin’s factory superintendent routinely takes scrap metal home in his pickup 
and sells it to a scrap dealer to make a few extra dollars. 


*AICPA adapted. 
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7. Franklin’s management decided not to include a footnote about a material uninsured 
lawsuit against the company on the grounds that the primary user of the statements, 
a small local bank, will probably not understand the footnote anyway. 


a. Identify which of these activities are frauds. 


b. For each fraud, state whether it is a misappropriation of assets or fraudulent financial 
reporting. 


11-31 (Objectives 11-5, 11-6) The following are various potential frauds in the sales and 
collection cycle: 


1. The company engaged in channel stuffing by shipping goods to customers that had 
not been ordered. 

2. The allowance for doubtful accounts was understated because the company altered 
the aging of accounts receivable to reduce the number of days outstanding for 
delinquent receivables. 

3. A cashier stole cash receipts that had been recorded in the cash register. 

4, The company recorded “bill-and-hold sales” at year-end. Although the invoices were 
recorded as sales before year-end, the goods were stored in the warehouse and shipped 
after year-end. 

5. The company did not record credit memos for returns received in the last month of 
the year. The goods received were counted as part of the company’s year-end physical 
inventory procedures. 

6. The accounts receivable clerk stole checks received in the mail and deposited them in 
an account that he controlled. He issued credit memos to the customers in the amount 
of the diverted cash receipts. 

7. The company contacted a major customer and asked them to accept a major ship- 
ment of goods before year end. The customer was told that they could return the 
goods without penalty if they were unable to sell the goods. 

8. A cashier stole cash receipts by failing to record the sales in the cash register. 


a. Indicate whether the fraud invA RaG@pRDE: wenhance Fnancial 
reporting. 

b. For those frauds that involve misappropriation of assets, state a control that would be 
effective in preventing or detecting the misappropriation. 


c. For those frauds that involve fraudulent financial reporting, state an audit procedure 
that would be effective in detecting the fraud. 


11-32 (Objectives 11-6, 11-7) The following audit procedures are included in the audit 
program because of heightened risks of material misstatements due to fraud. 


1. Use audit software to search cash disbursement master files for missing check numbers. 

2. Search the accounts receivable master file for account balances with missing or 
unusual customer numbers (e.g., “99999”). 

3. Engage an actuarial specialist to examine management’s assumptions about average 
length of employment and average life expectancy of retirees used in pension account- 
ing decisions. 

4. Send confirmations to customers for large sales transactions made in the fourth quarter 
of the year to obtain customer responses about terms related to the transfer of title 
and ability to return merchandise. 

5. Use audit software to search purchase transactions to identify any with non-standard 
vendor numbers or with vendor names reflecting related parties. 

6. Search sales databases for missing bill of lading numbers. 


For each audit procedure: 


a. Describe the type of fraud risk that is likely associated with the need for this audit 
procedure. 


b. Identify the related accounts likely affected by the potential fraud misstatement. 
c. Identify the related audit objective(s) that this procedure addresses. 
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11-33 (Objectives 11-2, 11-3, 11-4) Kent, CPA, is the engagement partner on the financial 
statement audit of Super Computer Services Co. (SCS) for the year ended April 30, 2011. 
On May 6, 2011, Smith, the senior auditor assigned to the engagement, had the following 
conversation with Kent concerning the planning phase of the audit:* 

Kent: Do you have all the audit programs updated yet for the SCS engagement? 

Smith: Mostly. I still have work to do on the fraud risk assessment. 

Kent: Why? Our “errors and irregularities” program from last year is still OK. It has passed 
peer review several times. Besides, we don’t have specific duties regarding fraud. If we find 
it, we'll deal with it then. 

Smith: I don’t think so. That new CEO, Mint, has almost no salary, mostly bonuses and 
stock options. Doesn’t that concern you? 

Kent: No. Mint’s employment contract was approved by the Board of Directors just three 
months ago. It was passed unanimously. 


Smith: I guess so, but Mint told those stock analysts that SCS’s earnings would increase 30 
percent next year. Can Mint deliver numbers like that? 

Kent: Who knows? We’re auditing the 2011 financial statements, not 2012. Mint will 
probably amend that forecast every month between now and next May. 

Smith: Sure, but all this may change our other audit programs. 

Kent: No, it won't. The programs are fine as is. If you find fraud in any of your tests, just let 
me know. Maybe we'll have to extend the tests. Or maybe we'll just report it to the audit 
committee. 


Smith: What would they do? Green is the audit committee’s chair, and remember, Green hired 
Mint. They’ve been best friends for years. Besides, Mint is calling all the shots now. Brown, 


the old,CEO, is still =i] “fe Py Brown’s never around. Brown’s even been skipping 
the B ? a INRANGE. Board would stand up to Mint. 

Kent: That’s nothing new. Brown was like that years ago. Brown caused frequent disputes 
with Jones, CPA, the predecessor auditor. Three years ago, Jones told Brown how ineffective 
the internal audit department was then. Next thing you know, Jones is out and I’m in. Why 
bother? I’m just as happy that those understaffed internal auditors don’t get in our way. Just 


remember, the bottom line is... are the financial statements fairly presented? And they 
always have been. We don’t provide any assurances about fraud. That’s management's job. 


Smith: But what about the lack of segregation of duties in the cash disbursements depart- 
ment? That clerk could write a check for anything. 


Kent: Sure. That’s a material weakness every year and probably will be again this year. But 
we're talking cost-effectiveness here, not fraud. We just have to do lots of testing on cash 
disbursements and report it again. 

Smith: What about the big layoffs coming up next month? It’s more than a rumor. Even the 
employees know it’s going to happen, and they’re real uptight about it. 

Kent: I know, it’s the worst kept secret at SCS, but we don’t have to consider that now. Even 
if it happens, it will only improve next year’s financial results. Brown should have let these 
people go years ago. Let’s face it, how else can Mint even come close to the 30 percent 
earnings increase next year? 

a. Describe the fraud risk factors that are indicated in the dialogue above. 

b. Describe Kent’s misconceptions regarding the consideration of fraud in the audit of 
SCS’s financial statements that are contained in the preceding dialogue, and explain 
why each is a misconception. 

c. Describe an auditor’s audit documentation requirements regarding the assessment of 
the risk of material misstatement due to fraud. 


T Copyright 1998, 2003 by the American Institute of Certified Public Accountants, Inc. Reprinted with permission. 
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PINNACLE MANUFACTURING: PART IV 


11-34 (Objectives 11-2, 11-3) In Parts I (pp. 245-247) and II (pp. 287-288) of this case 
you performed preliminary analytical procedures and assessed acceptable audit risk and 
inherent risk for Pinnacle Manufacturing. In Part III (pp. 332-333) of the case, you 
obtained an understanding of internal control and assessed control risk for acquisition 
and cash disbursement transactions. 

The auditor also assesses fraud risk as part of risk assessment procedures performed 
during audit planning. You have been invited by the audit partner on the Pinnacle 
engagement to participate in the fraud brainstorming session conducted as part of audit 
planning. The purpose of Part IV is to identify fraud risks and the response to these fraud 
risks in the audit of Pinnacle Manufacturing. 


a. Use the fraud triangle and information from Parts I through III of this case to identify 
incentives/pressures, opportunities, and attitudes/rationalizations for Pinnacle to 
engage in fraudulent financial reporting. 


b. Identify one or more fraud risks that you believe exist due to the nature of Pinnacle’s 
industry. Indicate the accounts most likely to be affected by the identified fraud risks. 


c. Auditors must generally identify a fraud risk for revenue recognition. Indicate at least 
two ways that Pinnacle might engage in revenue recognition fraud. Identify the 
specific nature of the potential fraud, and an audit procedure that you would perform 
to determine whether fraud is occurring. 


d. In Part I of this case you performed preliminary analytical procedures on Pinnacle’s 
financial statements. Identify changes in account balances or ratios that you believe 
indicate the potential for fraud, and describe the nature of the potential fraud. 


e. Part II of the case includes 11 sitaqations ¢ yo nee val ing. For 
each situation, describe whetherhhe ap 1 fr Aa 2 tential 
) 


fraud risk, identify the related fraud risk triangle element(s). 


Required 


ACL PROBLEM 


11-35 (Objective 11-6) This problem requires the use of ACL software, which is included in 
the CD attached to the text. Information about installing and using ACL and solving this 
problem can be found in Appendix, pages 838-842. You should read all of the reference 
material preceding the instructions about “Quick Sort” before locating the appropriate 
command to answer questions a-f. For this problem use the Metaphor_APTrans_2002 
file in ACL_Demo. The suggested command or other source of information needed to solve 
the problem requirement is included at the end of each question. 


a. Total the Invoice Amount column for comparison to the general ledger. (Total Field) 
b. Recalculate unit cost times quantity and identify any extension misstatements. (Filter) 


c. Products that Metaphor purchases should not exceed $100 per unit. Print any pur- 
chases for subsequent follow-up where unit cost exceeded that amount. (Filter) 


d. Identify the three vendors from which the largest total dollar accounts payable 
transactions occurred in 2002. (Summarize and Quick Sort) 


e. For each of the three vendors in question d, list any transactions that exceeded $15,000 
for subsequent follow-up. Include the vendor number, invoice number, and invoice 
amount. (Filter) 


lan) 


. Vendor numbers 10134 and 13440 are related parties to Metaphor. Print any accounts 
payable transactions with those two vendors. (Filter) Also, determine the total amount 
of transactions with vendor 10134. (Total Field) 


| 
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INTERNET PROBLEM 11-1: 


BRAINSTORMING ABOUT FRAUD RISKS 





SAS No. 99 requires auditors to conduct a brainstorming session to discuss the potential for 
fraud and how the auditor might respond to the risk of fraud. However, the standard 
provides limited guidance on how this brainstorming session should take place. Read “A 
Primer for Brainstorming Fraud Risks” by Mark Beasley and Greg Jenkins in the December 
2003 issue of Journal of Accountancy (www.journalofaccountancy.com/Issues/2003/Dec/ 
APrimerForBrainstormingFraudRisks.htm.) to answer the following questions. 


Required a. What are three common pitfalls that should be avoided during brainstorming sessions? 
How can these problems be avoided? 


b. What are three important techniques to improve the effectiveness of a brainstorming 
session? 


Apago PDF Enhancer 
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THE IMPACT 

OF INFORMATION 
TECHNOLOGY ON 
THE AUDIT PROCESS 


Just Because The Computer Did The Work 
Doesn't Mean It’s Right 


Foster Wellman’s audit client, Manion’s Department Stores Inc., installed a 
software program that processed and aged customer accounts receivable. 
The aging, which indicated how long the customers’ accounts were out- 
standing, was useful to Wellman when evaluating the collectibility of those 
accounts. 


Because Wellman didn’t know whether the aging totals were computed 
correctly, he decided to test Manion’s aging by using his own firm’s audit 
software to recalculate the aging, using an electronic copy of Manion’s 
accounts receivable data file. He OMSAGS "PDE prod Her e 
audit software was in reasonable agreetnent with Manion’s aging, he wou e 
have evidence that Manion’s aging was correct. 
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LEARNING OBJECTIVES 


After studying this chapter, 
you should be able to 


12-1 Describe how IT improves 
internal control. 


12-2 Identify risks to accounting 
systems specific to IT. 


12-3 Explain how general controls 
and application controls reduce 
IT risks. 


12-4 Describe how general controls 
affect the auditor's testing of 
application controls. 

12-5 Use test data, parallel simulation, 
and embedded audit module 
approaches to test automated 
controls. 


12-6 Identify issues for e-commerce 
systems and other specialized 


r IT systems. 








Wellman was shocked when he found a material difference between his and Manion’s calculated aging. Rudy 
Rose, the manager of Manion’s information technology (IT) function, investigated the discrepancy and dis- 
covered that programmer errors had resulted in design flaws in Manion’s software used to calculate the aging. 
This outcome caused Wellman to substantially increase the amount of his testing of the year-end balance of 
the allowance for uncollectible accounts, and it resulted in a significant audit adjustment to Manion’s 


allowance account. 


F aae cannot rely on information just because it is generated by a computer, as illustrated in the previous story 
about Manion’s overreliance on the accuracy of the computer-produced accounts receivable aging. People often 
assume “the information is correct because the computer produced it.” Unfortunately, auditors sometimes depend on 
the untested accuracy of computer-generated output because they forget that computers perform only as well as they are 
programmed. Before concluding that computer-generated information is reliable, auditors must understand and test 
computer-based controls. 

This chapter builds on Chapter 10’s coverage of internal control and how the auditor obtains an understanding 
of internal control, assesses control risk, and does tests of controls. We will examine how the client’s integration of 
information technology (IT) into the accounting system affects risks and internal control. 

The use of IT improves internal control by adding new control procedures done by the computer and by 
replacing manual controls subject to human error. At the same time, IT introduces risks, which the client can manage 
by using controls specific to IT systems. In this chapter, we highlight risks specific to IT systems, identify controls that 
can be implemented to address those risks, and explain how IT-related controls affect the audit. 


HOW INFORMATION TECHNOLOGIES IMPROVE INTERNAL CONTROL 





OBJECTIVE 12-1 Most entities, including small, family-owned businesses, rely on IT to record and 
pee penew nina: process business transactions. As a result of explosive advancements in IT, even rela- 
acinaleoriell tively small businesses use personal computers with commercial accounting software 


for their accounting. As businesses grow and have increased information needs, they 
typically upgrade their IT systems. The accounting function’s use of complex IT 
networks, the Internet, and centralized IT functions is now commonplace. 

Let’s examine several changes in internal control resulting from the integration of 
IT into accounting systems: 





* Computer controls replace manual controls. The obvious benefit of IT is the ability 
Vey g lar u ist Ge: iness transactions cost-effectively. 
x a c aero dett Ath eo, IT systems can potentially 
reduce misstatements by replacing manual procedures with automated controls 
that apply checks and balances to each processed transaction. This reduces the 
human errors that often occur in manually processed transactions. 

Computers now do many internal control activities that once were done by 
employees, including comparing customer and product numbers with master 
files and comparing sales transaction amounts with preprogrammed credit 
limits. Online security controls in applications, databases, and operating systems 
can improve separation of duties, which reduces opportunities for fraud. 

* Higher-quality information is available. Complex IT activities are usually ad- 
ministered effectively because the complexity requires effective organization, 
procedures, and documentation. This typically results in providing management 
with more and higher-quality information, faster than most manual systems. 
Once management is confident that information produced by IT is reliable, 
management is likely to use the information for better management decisions. 


ASSESSING RISKS OF INFORMATION TECHNOLOGY 


OBJECTIVE 12-2 Although IT can improve a company’s internal control, it can also affect the company’s 
overall control risk. Many risks in manual systems are reduced and in some cases 





Identify risks to accountin oe : i : 
pela specific to IT. 2 eliminated. However, there are risks specific to IT systems that can lead to substantial 


losses if ignored. If IT systems fail, organizations can be paralyzed by the inability to 
retrieve information or by the use of unreliable information caused by processing 
errors. These risks increase the likelihood of material misstatements in financial 
statements. Specific risks to IT systems include: 
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1. Risks to hardware and data 
2. Reduced audit trail 
3. Need for IT experience and separation of IT duties 


Although IT provides significant processing benefits, it also creates unique risks in Risks to 
protecting hardware and data, as well as introducing potential for new types of errors. Hardware and Data 
Specific risks include the following: 


* Reliance on the functioning capabilities of hardware and software. Without proper 
physical protection, hardware or software may not function or may function 
improperly. Therefore, it is critical to physically protect hardware, software, and 
related data from physical damage that might result from inappropriate use, 
sabotage, or environmental damage (such as fire, heat, humidity, or water). 

* Systematic versus random errors. When organizations replace manual procedures 
with technology-based procedures, the risk of random error from human 
involvement decreases. However, the risk of systematic error increases because 
once procedures are programmed into computer software, the computer processes 
information consistently for all transactions until the programmed procedures 
are changed. Unfortunately, flaws in software programming and changes to that 
software affect the reliability of computer processing, often resulting in many 
significant misstatements. This risk is increased if the system is not programmed 
to recognize and flag unusual transactions or when transaction audit trails are 
inadequate. 

* Unauthorized access. 1T-based accounting systems often allow online access to 
electronic data in master files, software, and other records. Because online access 
can occur from remote access points, including by external parties with remote 
access through the Internet, there is potential for illegitimate access. Without 
proper online restrictions such as passwords and user IDs, unauthorized activity 
may be initiated through te tr, PP hhe Bnharrce wees in 
software programs and master files. 

* Loss of data. Much of the data in an IT system are stored in centralized electronic 
files. This increases the risk of loss or destruction of entire data files. This has 
severe ramifications, with the potential for misstated financial statements and, 
in certain cases, serious interruptions of the entity’s operations. 


Misstatements may not be detected with the increased use of IT due to the loss of a Reduced Audit Trail 
visible audit trail, as well as reduced human involvement. In addition, the computer 
replaces traditional types of authorizations in many IT systems. 


* Visibility of audit trail. Because much of the information is entered directly into 
the computer, the use of IT often reduces or even eliminates source documents 
and records that allow the organization to trace accounting information. These 
documents and records are called the audit trail. Because of the loss of the audit 
trail, other controls must be put into place to replace the traditional ability to 
compare output information with hard-copy data. 

* Reduced human involvement. In many IT systems, employees who deal with the initial 
processing of transactions never see the final results. Therefore, they are less able to 
identify processing misstatements. Even if they see the final output, it is often diffi- 
cult to recognize misstatements because underlying calculations are not visible and 
the results are often highly summarized. Also, employees tend to regard output 
generated through the use of technology as “correct” because a computer produced it. 

* Lack of traditional authorization. Advanced IT systems can often initiate trans- 
actions automatically, such as calculating interest on savings accounts and 
ordering inventory when pre-specified order levels are reached. Therefore, 
proper authorization depends on software procedures and accurate master files 
used to make the authorization decision. 
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Need for 

IT Experience 
and Separation 
of IT Duties 


IT systems reduce the traditional separation of duties (authorization, record keeping, 
and custody) and create a need for additional IT experience. 


* Reduced separation of duties. Computers do many duties that were traditionally 
segregated, such as authorization and record keeping. Combining activities from 
different parts of the organization into one IT function centralizes responsi- 
bilities that were traditionally divided. IT personnel with access to software and 
master files may be able to steal assets unless key duties are segregated within the 
IT function. 

* Need for IT experience. Even when companies purchase simple off-the-shelf 
accounting software packages, it is important to have personnel with knowledge 
and experience to install, maintain, and use the system. As the use of IT systems 
increases, the need for qualified IT specialists increases. Many companies create 
an entire function of IT personnel, while other companies outsource the manage- 
ment of IT operations. The reliability of an IT system and the information it 
generates often depends on the ability of the organization to employ personnel 
or hire consultants with appropriate technology knowledge and experience. 


INTERNAL CONTROLS SPECIFIC TO INFORMATION TECHNOLOGY 


OBJECTIVE 12-3 


Explain how general controls 


and application controls 
reduce IT risks. 


General Controls 





To address many of the risks associated with reliance on IT, organizations often imple- 
ment specific IT controls. Auditing standards describe two categories of controls for IT 
systems: general controls and application controls. 

General controls apply to all aspects of the IT function, including IT administration; 
separation of IT duties; systems development; physical and online security over access to 
hardware, software, and related data; backup and contingency planning in the event of 
unexpg¢cted emergeng ne Woe re controls. Because general controls often apply on 
an en RAG. F se APAAGS trois for the company as a whole. 

Application controls apply to processing transactions, such as controls over the 
processing of sales or cash receipts. Auditors must evaluate application controls for every 
class of transactions or account in which the auditor plans to reduce assessed control risk 
because IT controls will be different across classes of transactions and accounts. 
Application controls are likely to be effective only when general controls are effective. 

Figure 12-1 illustrates the relationship between general controls and application 
controls. General controls provide assurance that all application controls are effective. 
Strong general controls reduce the types of risks identified in the boxes outside the 
general controls oval in Figure 12-1. 

Table 12-1 describes six categories of general controls and three categories of 
application controls, with specific examples for each category. Let’s examine these 
categories of general and application controls in more detail. 


Similar to the effect that the control environment has on other components of internal 
control discussed in Chapter 10, the six categories of general controls have an entity- 
wide effect on all IT functions. Auditors typically evaluate general controls early in the 
audit because of their impact on application controls. 


Administration of the IT Function The board of directors’ and senior manage- 
ment’s attitude about IT affect the perceived importance of IT within an organization. 
Their oversight, resource allocation, and involvement in key IT decisions each signal 
the importance of IT. In complex environments, management may establish IT steering 
committees to help monitor the organization’s technology needs. In less complex 
organizations, the board may rely on regular reporting by a chief information officer 
(CIO) or other senior IT manager to keep management informed. In contrast, when 
management assigns technology issues exclusively to lower-level employees or outside 
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consultants, an implied message is sent that IT is not a high priority. The result is often 
an understaffed, underfunded, and poorly controlled IT function. 


Separation of IT Duties To respond to the risk of combining traditional custody, 
authorization, and record-keeping responsibilities by having the computer perform 


> 
foal Categories of General and Application Controls 


Control Type 








Category of Control Example of Control 





General controls Administration of the Chief information officer or IT manager reports to senior management and 


IT function 
Separation of IT duties 
Systems development 


Physical and 
online security 


Backup and 
contingency planning 


Hardware controls 


board. 
Responsibilities for programming, operations, and data control are separated. 


Teams of users, systems analysts, and programmers develop and thoroughly 
test software. 


Access to hardware is restricted, passwords and user IDs limit access to software 
and data files, and encryption and firewalls protect data and programs from 
external parties. 


Written backup plans are prepared and tested regularly throughout the year. 


Memory failure or hard drive failure causes error messages on the monitor. 





Application controls 





Input controls 
Processing controls 
Output controls 


Preformatted screens prompt data input personnel for information to be entered. 
Reasonableness tests review unit-selling prices used to process a sale. 





The sales department does postprocessing review of sales transactions. 
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" 
foes Segregation of IT Duties 


those tasks, well-controlled organizations respond by separating key duties within IT. 
For example there should be separation of IT duties to prevent IT personnel from 
authorizing and recording transactions to cover the theft of assets. Figure 12-2 shows 
an ideal separation of duties. Ideally, responsibilities for IT management, systems 
development, operations, and data control should be separated as follows: 


* IT management. The CIO or IT manager should be responsible for oversight of 


the IT function to ensure that activities are carried out consistent with the IT 
strategic plan. A security administrator should monitor both physical and online 
access to hardware, software, and data files and investigate all security breaches. 

Systems development. Systems analysts, who are responsible for the overall design 
of each application system, coordinate the development and changes to IT 
systems by IT personnel responsible for programming the application and 
personnel outside IT who will be the primary system users (such as accounts 
receivable personnel). Programmers develop flowcharts for each new applica- 
tion, prepare computer instructions, test the programs, and document the results. 

Programmers should not have access to input data or computer operations to 
avoid using their knowledge of the system for personal benefit. They should be 
allowed to work only with test copies of programs and data so they can only 
make software changes after proper authorization. 

Operations. Computer operators are responsible for the day-to-day operations 
of the computer following the schedule established by the CIO. They also monitor 
computer consoles for messages about computer efficiency and malfunctions. 

A librarian is responsible for controlling the use of computer programs, trans- 
action files, and other computer records and documentation. The librarian 
releases them to operators only when authorized. For example, programs and 
transaction files are released to operators only when a job is scheduled to be pro- 
cessed. Similarly, the librarian releases a test copy to programmers only on approval 

ApagoaRbDE. Enhano@e rtors also affect IT operations as they 
are responsible for planning, implementing, and maintaining operations of the 
network of servers that link users to various applications and data files. 


* Data control. Data input/output control personnel independently verify the quality 


of input and the reasonableness of output. For organizations that use databases to 
store information shared by accounting and other functions, database adminis- 
trators are responsible for the operation and access security of shared databases. 
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Naturally, the extent of separation of duties depends on the organization’s size and 
complexity. In many small companies, it is not practical to segregate the duties to the 
extent illustrated in Figure 12-2. 


Systems Development Systems development includes: 


* Purchasing software or developing in-house software that meets the organiza- 
tion’s needs. A key to implementing the right software is to involve a team of 
both IT and non-IT personnel, including key users of the software and internal 
auditors. This combination increases the likelihood that information needs as 
well as software design and implementation concerns are properly addressed. 
Involving users also results in better acceptance by key users. 

* Testing all software to ensure that the new software is compatible with existing 
hardware and software and determine whether the hardware and software can 
handle the needed volume of transactions. Whether software is purchased or 
developed internally, extensive testing of all software with realistic data is critical. 
Companies typically use one or a combination of the following two test approaches: 


1. Pilot testing: A new system is implemented in one part of the organization 
while other locations continue to rely on the old system. 
2. Parallel testing: The old and new systems operate simultaneously in all locations. 


Proper documentation of the system is required for all new and modified software. 
After the software has been successfully tested and documented, it is transferred to the 
librarian in a controlled manner to ensure only authorized software are ultimately 
accepted as the authorized version. 


Physical and Online Security Physical controls over computers and restrictions to on- 
line software and related data files decrease the risk of unauthorized changes to programs 
and improper use of programs and data files. Security plans should be in writing and 
monitored. Security controls include both physical ie and online access controls. 

* Physical controls. Proper sh ARAGOs BD om ARGS Restrict 
access to hardware, software, and backup data files on magnetic tapes or disks, 
hard drives, CDs, and external disks. Common examples to physically restrict 
unauthorized use include keypad entrances, badge-entry systems, security 
cameras, and security personnel. More sophisticated controls only allow physical 
and online access after employee fingerprints are read or employee retinas are 
scanned and matched with an approved database. Other physical controls include 
monitoring of cooling and humidity to ensure that the equipment functions 
properly and installing fire-extinguishing equipment to reduce fire damage. 

* Online access controls. Proper user IDs and passwords control access to software 
and related data files, reducing the likelihood that unauthorized changes are made 
to software applications and data files. Separate add-on security software packages, 
such as firewall and encryption programs, can be installed to improve a system’s 
security. (See page 388 for a description of firewall and encryption programs.) 


Backup and Contingency Planning Power failures, fire, excessive heat or humidity, 
water damage, or even sabotage can have serious consequences to businesses using IT. 
To prevent data loss during power outages, many companies rely on battery backups or 
on-site generators. For more serious disasters, organizations need detailed backup and 
contingency plans such as off-site storage of critical software and data files or out- 
sourcing to firms that specialize in secure data storage. 

Backup and contingency plans should also identify alternative hardware that can 
be used to process company data. Companies with small IT systems can purchase 
replacement computers in an emergency and reprocess their accounting records by 
using backup copies of software and data files. Larger companies often contract with IT 
data centers that specialize in providing access to off-site computers and data storage 
and other IT services for use in the event of an IT disaster. 
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IT GLITCH 

HALTS TRADING 
ON LONDON 
STOCK EXCHANGE 


Application Controls 


378 


Just as trading was peaking in response to news in 
September 2008 that U.S. regulators would move 
to bail out mortgage giants Fannie Mae and 
Freddie Mac, the London Stock Exchange (LSE) 
experienced an IT system failure that prevented 
investors from buying and selling shares in some 
of Europe's largest companies for over seven 
hours. Starting about 9:00 am London time, 
trading all but shut down on the London Stock 
Exchange at a pivotal moment in the markets. 
The IT glitch was a major reputational setback 
for the LSE in its efforts to compete aggressively 
with the New York based exchanges. “For a 
financial center like London, this looks absolutely 


ridiculous,” noted Bruno Berry, a London-based 
portfolio manager. The IT glitch led to a significant 
market drop in U.K. trading in September. 

The failure was triggered by a super-fast 
technology that has become critical to the LSE 
and other exchanges. While the problem was 
resolved, the LSE can’t guarantee that further 
disruptions won't occur. The problems highlight 
how important technology has become as 
exchanges compete for business from investors. 


Source: Adapted from Neil Shah and Carrick 
Mollenkamp, “London Exchange Paralyzed by Glitch,” 
The Wall Street Journal, September 9, 2008, p. A1. 





Hardware Controls Hardware controls are built into computer equipment by 
manufacturers to detect and report equipment failures. Auditors are more concerned 
with how the client handles errors identified by the hardware controls than with their 
adequacy. Regardless of the quality of hardware controls, output will be corrected only 
if the client has provided for handling machine errors. 


Application controls are designed for each software application and are intended to 
help a company satisfy the six transaction-related audit objectives discussed in previous 
chapters. Although some application controls affect one or only a few transaction-related 
audit objectives, most controls prevent or detect several types of misstatements. Other 
application controls concern account balance and presentation and disclosure objectives. 


Application cont y one by computers or client personnel. When they are 
done A eB 


RAPS so 5 they Vat bela: Heontrols. The effectiveness of manual 


controls depends on both the competence of the people performing the controls and the 
care they exercise when doing them. For example, when credit department personnel 
review exception reports that identify credit sales exceeding a customer’s authorized 
credit limit, the auditor may need to evaluate the person’s ability to make the assessment 
and test the accuracy of the exception report. When controls are done by computers, they 
are called automated controls. Because of the nature of computer processing, automated 
controls, if properly designed, lead to consistent operation of the controls. 

Application controls fall into three categories: input, processing, and output. 
Although the objectives for each category are the same, the procedures for meeting the 
objectives vary considerably. Let’s examine each more closely. 


Input Controls Input controls are designed to ensure that the information entered 
into the computer is authorized, accurate, and complete. They are critical because a 
large portion of errors in IT systems result from data entry errors and, of course, 
regardless of the quality of information processing, input errors result in output errors. 
Typical controls developed for manual systems are still important in IT systems, such as: 


* Management’s authorization of transactions 
» Adequate preparation of input source documents 
* Competent personnel 


Controls specific to IT include: 


* Adequately designed input screens with preformatted prompts for transaction 
information 

* Pull-down menu lists of available software options 

* Computer-performed validation tests of input accuracy, such as the validation 
of customer numbers against customer master files 
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(eee Batch Input Controls 
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Control Definition Examples 

Financial total Summary total of field amounts for all records in a batch The total of dollars of all vendor invoices to be paid 
that represent a meaningful total such as dollars or 
amounts 

Hash total Summary total of codes from all records in a batch that The total of all vendor account numbers for vendor 
do not represent a meaningful total invoices to be paid 

Record count Summary total of physical records in a batch The total number of vendor invoices to be processed 





J 





* On-line based input controls for e-commerce applications where external parties, 
such as customers and suppliers, perform the initial part of the transaction inputting 

* Immediate error correction procedures, to provide for early detection and correc- 
tion of input errors 

* Accumulation of errors in an error file for subsequent follow-up by data input 
personnel 


For IT systems that group similar transactions together into batches, the use of 
financial batch totals, hash totals, and record count totals helps increase the accuracy and 
completeness of input. Batch input controls are described in Table 12-2. For example, the 
comparison of a record count calculated before data entry of the number of vendor 
invoices to be entered to the number of vendor invoices processed by the system would 
help determine if any invoices were omitted or entered more than once during data 
entry. 


Processing Controls Processing cgntrols ORD eee errprs while transaction 
data are processed. General controls¢ on lat HhaAnGetment 
and security, provide essential control for minimizing errors. Specific application 


processing controls are often programmed into software to prevent, detect, and correct 
processing errors. Examples of processing controls are illustrated in Table 12-3. 


Output Controls Output controls focus on detecting errors after processing is 
completed, rather than on preventing errors. The most important output control is 
review of the data for reasonableness by someone knowledgeable about the output. 





' : 7 I a Processing Controls 


Type of 
Processing Control Description Example 








Validation test 


Ensures the use of the correct master file, 
database, and programs in processing 


Does the internal label on the payroll master file tape 
match the file label indicated in the application software? 





Sequence test 


Determines that data submitted for 
processing are in the correct order 


Has the file of payroll input transactions been sorted in 
departmental order before processing? 








Arithmetic accuracy test Checks the accuracy of processed data Does the sum of net pay plus withholdings equal gross pay 
for the entire payroll? 
Data reasonableness test Determines whether data exceed Does employee's gross pay exceed 60 hours or $1,999 


prespecified amounts 


for the week? 





Completeness test 


Determines that every field in a record 
has been completed 


Are employee number, name, number of regular hours, 
number of overtime hours, department number, etc., 
included for each employee? 
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Users can often identify errors because they know the approximate correct amounts. 
Several common controls for detecting errors in outputs include: 


* Reconcile computer-produced output to manual control totals 

* Compare the number of units processed to the number of units submitted for 
processing 

* Compare a sample of transaction output to input source documents 

* Verify dates and times of processing to identify any out-of-sequence processing 


For sensitive computer output, such as payroll checks, control can be improved by 
requiring employees to present employee identification before they receive their checks 
or by requiring the use of direct deposit into the employees’ pre-approved bank 
accounts. Also, access to sensitive output stored in electronic files or transmitted across 
networks, including the Internet, is often restricted by requiring passwords, user IDs, 
and encryption techniques. 


IMPACT OF INFORMATION TECHNOLOGY ON THE AUDIT PROCESS 





OBJECTIVE 12-4 





Describe how general 
controls affect the auditor's 
testing of application controls. 





Effect of 
General Controls 
on Control Risk 


Because auditors are responsible for obtaining an understanding of internal control, 
they must be knowledgeable about general and application controls, whether the 
client’s use of IT is simple or complex. Knowledge of general controls increases the 
auditor’s ability to assess and rely on effective application controls to reduce control 
risk for related audit objectives. For public company auditors who must issue an 
opinion on internal control over financial reporting, knowledge of both general and 
application IT controls is essential. 


Auditars should evaluate the effectiyeness of general controls before evaluating appli- 
cationARag® i di ncexy 5), general controls have a pervasive 
effect on the effectiveness of application controls, so auditors should first evaluate 
those controls before concluding whether application controls are effective. 


Effects of General Controls on System-wide Applications Ineffective general 
controls create the potential for material misstatements across all system applications, 
regardless of the quality of individual application controls. For example, if IT duties 
are inadequately separated such that computer operators also work as programmers 
and have access to computer programs and files, the auditor should be concerned 
about the potential for unauthorized software program or data file changes that might 
lead to fictitious transactions or unauthorized data and omissions in accounts such as 
sales, purchases, and salaries. Similarly, if the auditor observes that data files are 
inadequately safeguarded, the auditor may conclude that there is a significant risk of 
loss of data for every class of transaction that relies on that data to conduct application 
controls. In this situation, the auditor may need to expand audit testing in several 
areas such as cash receipts, cash disbursements, and sales to satisfy the completeness 
objective. 

On the other hand, if general controls are effective, the auditor may be able to place 
greater reliance on application controls whose functionality is dependent on IT. 
Auditors can then test those application controls for operating effectiveness and rely on 
the results to reduce substantive testing. 


Effect of General Controls on Software Changes Client changes to application 
software affect the auditor’s reliance on automated controls. When the client changes 
the software, the auditor must evaluate whether additional testing is needed. If general 
controls are effective, the auditor can easily identify when software changes are made. 
But in companies where general controls are deficient, it may be difficult to identify 
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software changes. As a result, auditors must consider doing tests of application 
controls that depend on IT throughout the current year audit. 


Obtaining an Understanding of Client General Controls Auditors typically 
obtain information about general and application controls through the following 
ways: 


* Interviews with IT personnel and key users 

* Examination of system documentation such as flowcharts, user manuals, 
program change requests, and system testing results 

* Reviews of detailed questionnaires completed by IT staff 


In most cases, auditors should use several of these approaches because each offers 
different information. For example, interviews with the chief information officer and 
systems analysts provide useful information about the operation of the entire IT 
function, the extent of software development and hardware changes made to 
accounting application software, and an overview of any planned changes. Reviews 
of program change requests and system test results are useful to identify program 
changes in application software. Questionnaires help auditors identify specific internal 
controls. 


The following discussion of control risk may seem familiar because auditors link IT 
controls to audit objectives following the same principles and approaches we covered 
in Chapter 10. You may recall that auditors relate controls and deficiencies in internal 
control to specific audit objectives. Based on those controls and deficiencies, the 
auditor assesses control risk for each related audit objective. The same approach is used 
when controls are done by IT. 


Relating IT Controls to Transaction-Related Audit Objectives Auditors do not 
normally link controls and deficit pagocPDRoKnhancexrction- 
related audit objectives. Because general controls affect audit objectives in several 
cycles, if the general controls are ineffective, the auditor’s ability to rely on IT-related 
application controls to reduce control risk in all cycles is reduced. Conversely, if general 
controls are effective, it increases the auditor’s ability to rely on IT-based application 
controls for all cycles. 

Auditors can use a control risk matrix, much like the one we discussed in Chapter 
10, to help them identify both manual and automated application controls and control 
deficiencies for each related audit objective. For example, to prevent payments to 
fictitious employees, a computer comparison of inputted employee identification 
numbers with the employee master file might reduce control risk for the occurrence 
objective for payroll transactions. Auditors can identify manual and automated 
controls at the same time or separately, but they should not identify deficiencies or 
assess control risk until both types of controls have been identified. 


Effect of IT Controls on Substantive Testing After identifying specific IT-based 
application controls that can be used to reduce control risk, auditors can reduce sub- 
stantive testing. The systematic nature of automated application controls may allow 
auditors to reduce sample sizes used to test those controls in both an audit of 
financial statements and an audit of internal control over financial reporting. Auditors 
may also be able to rely on prior year testing of automated controls as described in 
Chapter 10 when general controls are effective and the automated control has not 
been changed since testing by the auditor. Auditors often use their own software to 
test the controls. These factors, when combined, often lead to extremely effective and 
efficient audits. 

The impact of general controls and application controls on audits is likely to vary 
depending on the level of complexity in the IT environment. We discuss that next. 


Effect of 

IT Controls on 
Control Risk and 
Substantive Tests 


Chapter 12 / THE IMPACT OF INFORMATION TECHNOLOGY 381 


Auditing in 
Less Complex 
IT Environments 


Many organizations design and use accounting software to process business transactions 
so that source documents are retrievable in a readable form and can be traced easily 
through the accounting system to output. Such systems retain many of the traditional 
source documents such as customer purchase orders, shipping and receiving records, and 
sales and vendor invoices. The software also produces printed journals and ledgers that 
allow the auditor to trace transactions through the accounting records. Internal controls 
in these systems often include client personnel comparing computer-produced records 
with source documents. 

In these situations, the use of IT does not significantly impact the audit trail. 
Typically, auditors obtain an understanding of internal control and do tests of 
controls, substantive tests of transactions, and account balance verification pro- 
cedures in the same way they do when testing manual accounting systems. The 
auditor is still responsible for obtaining an understanding of general and application 
computer controls because such knowledge is useful in identifying risks that may 
affect the financial statements. But, the auditor typically does not test automated 
controls. This approach to auditing is often called auditing around the computer 
because the auditor is not using automated controls to reduce assessed control risk. 
Instead, the auditor uses manual controls to support a reduced control risk assess- 
ment. 

Auditors in smaller companies often audit around the computer when general 
controls are less effective than in more complex IT environments. Often, smaller 
companies lack dedicated IT personnel, or they rely on periodic involvement of IT 
consultants to assist in installing and maintaining hardware and software. The 
responsibility of the IT function is often assigned to user departments, such as the 
accounting department, where the hardware physically resides. Auditing around the 
computer is effective because these systems often produce sufficient audit trails to 
permit auditors to compare source documents such as vendors’ and sales invoices to 
ouPLApagys my pypna nivarice rt: input and output processes that 
operate etfecttVely to prevent and detect material financial statement misstatements. 

Many organizations with non-complex IT environments often heavily rely on 
desktop and networked servers to do accounting system functions. The use of computers 
creates the following unique audit considerations: 


* Limited reliance on automated controls. Even in less sophisticated IT environ- 
ments, automated controls can often be relied on. For example, software 
programs can be loaded on the computer’s hard drive in a format that does not 
permit changes by client personnel, making the risk of unauthorized changes 
in the software low. Before relying on controls built into that software, auditors 
must be confident that the software vendor has a reputation for quality. 

* Access to master files. When clients use desktop computers and servers, auditors 
should be concerned about access to master files by unauthorized people. 
Appropriate separation of duties between personnel with access to master files 
and responsibilities for processing is critical. Regular owner-manager review of 
transaction output improves internal control. 

* Risk of computer viruses. Computer viruses can lead to the loss of data and 
programs. Certain viruses can damage electronic files or shut down an entire 
network of computers. Regularly updated virus protection software that screens 
for virus infections improves controls. 


A public company’s use of desktop computers in the financial reporting process 
may affect the audit of internal control over financial reporting. If the auditor concludes 
that general controls are ineffective, the auditor’s tests of automated application controls 
may need to be increased. The auditor must also consider the implications of the lack 
of effective general controls on the opinion about the operating effectiveness of 
internal control over financial reporting. 
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Examples of Auditing Around and Through the Computer 

















eS 


Auditing Around the 

Internal Control Computer Approach Auditing Through the Computer Approach 

Credit is approved for Select a sample of sales transactions Obtain a copy of the client's sales application program and 
sales on account. from the sales journal and obtain related credit limit master file and process a test data 

the related customer sales order to sample of sales transactions to determine whether the 
determine that the credit manager's application software properly rejects those test sales 
initials are present, indicating transactions that exceed the customer's credit limit 
approval of sales on account. amount and accepts all other transactions. 

Payroll is processed only Select a sample of payroll disburse- Create a test data file of valid and invalid employee ID 
for individuals currently ments from the payroll journal and numbers and process that file using a controlled copy of 
employed. verify by reviewing human resource the client's payroll application program to determine that 

department files that the payee is all invalid employee ID numbers are rejected and that all 
currently employed. valid employee ID numbers are accepted. 

Column totals for the cash Obtain a printout of the cash disburse- Obtain an electronic copy of the cash disbursements journal 
disbursements journal are ments journal and manually foot transactions and use generalized audit software to verify 
subtotaled automatically each column to verify the accuracy the accuracy of the column totals. 
by the computer. of the printed column totals. 








As organizations expand their use of IT, internal controls are often embedded in 
applications that are available only electronically. When traditional source documents 
such as invoices, purchase orders, billing records, and accounting records such as sales 
journals, inventory listings, and accounts receivable subsidiary records exist only 
electronically, auditors must change their approach to auditing. This approach is 


often called auditing through the computer. we) m9 illustrates some differences 

between auditing around the compAPAGRiit e u er 
Auditors use three categories of testing approaches when auditing through the 

computer: test data approach, parallel simulation, and embedded audit module approach. 


Test Data Approach In the test data approach, auditors process their own test data 
using the client’s computer system and application program to determine whether the 
automated controls correctly process the test data. Auditors design the test data to 
include transactions that the client’s system should either accept or reject. After the test 
data are processed on the client’s system, auditors compare the actual output to the 
expected output to assess the effectiveness of the application program’s automated 
controls. Figure 12-3 (p. 384) illustrates the use of the test data approach. 
When using the test data approach, auditors have three main considerations: 


1. Test data should include all relevant conditions that the auditor wants tested. 
Auditors should design test data to test all key computer-based controls and 
include realistic data that are likely to be a part of the client’s normal processing, 
including both valid and invalid transactions. 

For example, assume the client’s payroll application contains a limit check 
that disallows a payroll transaction that exceeds 80 hours per week. To test this 
control, the auditor can prepare payroll transactions with 79, 80, and 81 hours 
for each sampled week and process them through the client’s system in a manner 
shown in Figure 12-3. If the limit check control is operating effectively, the 
client’s system should reject the transaction for 81 hours, and the client’s error 
listing should report the 81-hour transaction error. 

2. Application programs tested by auditors’ test data must be the same as those the 
client used throughout the year. One approach is to run the test data on a 
surprise basis, possibly at random times throughout the year, even though 
doing so is costly and time consuming. Another method is to rely on the client’s 


Auditing in 
More Complex 
IT Environments 


OBJECTIVE 12-5 


Use test data, parallel 


simulation, and embedded 
audit module approaches to 
test automated controls. 
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general controls in the librarian and systems development functions to ensure 
that the program tested is the one used in normal processing. 

3. Test data must be eliminated from the client’s records. If auditors process test 
data while the client is processing its own transactions, auditors must eliminate 
the test data in the client’s master files after the tests are completed to prevent 
master files and transaction files from being permanently contaminated by the 
auditor’s testing. Auditors can do this by developing and processing data that 
reverses the effect of the test data. 


Because of the complexities of many clients’ application software programs, auditors 
who use the test data approach often obtain assistance from a computer audit specialist. 
Many larger CPA firms have staff dedicated to assisting in testing client application 
controls. 


Parallel Simulation Auditors often use auditor-controlled software to do the same 
operations that the client’s software does, using the same data files. The purpose is to 
determine the effectiveness of automated controls and to obtain evidence about 
electronic account balances. This testing approach is called parallel simulation testing. 
Figure 12-4 shows a typical parallel simulation. Whether testing controls or ending 
balances, the auditor compares the output from the auditor’s software to output from 
the client’s system to test the effectiveness of the client’s software and to determine if the 
client’s balance is correct. A variety of software is available to assist auditors. 

Auditors commonly do parallel simulation testing using generalized audit software 
(GAS), which are programs designed specifically for auditing purposes. Commercially 
available audit software, such as ACL or IDEA, can be easily operated on auditors’ 
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desktops or laptop computers. Auditors obtain copies of machine-readable client 
databases or master files and use the generalized audit software to do a variety of tests of 
the client’s electronic data. Instead of GAS, some auditors use spreadsheet software to do 
simple parallel simulation tests. Others develop their own customized audit software. 

Generalized audit software provides three advantages: it is relatively easy to train 
audit staff in its use, even if they have had little audit-related IT training, the software 
can be applied to a wide variety of clients with minimal customization, and it has the 
ability to do audit tests much faster and in more detail than using traditional manual 
procedures. Table 12-5 (p. 386) includes some of the common uses of generalized audit 
software. Two are examined in detail: 


1. Generalized audit software is used to test automated controls. An auditor obtains 
copies of a client’s customer credit limit master file and a customer order file, 
and then instructs the auditor’s computer to list transactions that exceed the 
customer’s authorized credit limit. The auditor then compares the audit output 
to the client’s list of customer orders that were rejected for exceeding authorized 
credit limits. 

2. Generalized audit software is used to verify the client’s account balances. An 
auditor can use the software to sum the master file of customer accounts 
receivable to determine whether the total agrees with the general ledger balance. 


Embedded Audit Module Approach When using the embedded audit module 
approach, auditors insert an audit module in the client’s application system to identify 
specific types of transactions. For example, auditors might use an embedded module to 
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Common Uses of Generalized Audit Software 





Uses 


Description Examples 





Verify extensions 
and footings 


Examine records for 
quality, completeness, 
consistency, and correctness 


Compare data on separate files 


Verify the accuracy of the client's Foot accounts receivable trial balance 
computations by calculating 


information independently 


Scan all records using specified 
criteria 


Review payroll files for terminated employees 


Determine that information in two 
or more data files agrees 


Compare changes in accounts receivable balances 
between two dates using sales and cash receipts 
in transaction files 





Summarize or resequence data 
and do analyses 


Change or aggregate data Resequence inventory items by location to facilitate 


physical observation 





Select audit samples 


Select samples from machine-readable 
data 


Randomly select accounts receivable for confirmation 





Print confirmation requests 


Print data for sample items selected 
for confirmation testing 


Print customer name, address, and account balance 
information from master files 





Compare data obtained through 
other audit procedures with 
company records 





Compare machine-readable data with 
audit evidence gathered manually, 
which is converted to machine- 
readable form 


Compare confirmation responses with accounts 
receivable master files 








identify all purchases exceeding $25,000 for follow-up with more detailed examination 
for the occurrence and accuracy transaction-related audit objectives. In some cases, 
aps go ths 15 Re nelet-tevet_ Sa separate data file and then process 
those transacHons ee ef sim@tlation té duplicate the function done by the 
client’s system. The auditor then compares the client’s output with the auditor’s output. 
Discrepancies are printed on an exception report for auditor follow-up. 

The embedded audit module approach allows auditors to continuously audit 
transactions by identifying actual transactions processed by the client as compared to 


test data and parallel simulation approaches, which only allow intermittent testing. 
Internal audit may also find this technique useful. 


Although auditors may use one or any combination of testing approaches, they 
typically use: 
* Test data to do tests of controls and substantive tests of transactions 
* Parallel simulation for substantive testing, such as recalculating transaction 
amounts and footing master file subsidiary records of account balances 
* Embedded audit modules to identify unusual transactions for substantive testing 


ISSUES FOR DIFFERENT IT ENVIRONMENTS 


OBJECTIVE 12-6 





Identify issues for 
e-commerce systems and 
other specialized IT systems. 





Issues for 
Network Environments 


386 


So far, we have addressed the effect of IT on the audit process for organizations that 
centralize the IT function. Although all organizations need good general controls regardless 
of the structure of their IT function, some general control issues vary depending on the 
IT environment. Next, we’ll examine IT issues for clients who use networks, database 
management systems, e-commerce systems, and outsourced computer service centers. 


The use of networks that link equipment such as desktops, midrange computers, main- 
frames, workstations, servers, and printers is common for most businesses. Local area 
networks (LANs) link equipment within a single or small cluster of buildings, and are 


Part 2 / THE AUDIT PROCESS 


used only within a company. LANs are often used to transfer data and programs from 
one computer or workstation using network system software that allow all of the devices 
to function together. Wide area networks (WANs) link equipment in larger geographic 
regions, including global operations. 

In networks, application software and data files used to process transactions are 
included on several computers that are linked together. Access to the application from 
desktop computers or workstations is managed by network server software. Even small 
companies can have several computer servers linked together on a network, while 
larger companies may have hundreds of servers in dozens of locations networked 
together. 

Most of the general controls discussed in this chapter apply to large client net- 
works, because IT support and user involvement is centralized. For other companies, 
networks present control issues that the auditor must consider in planning the audit. 
For example, auditors often increase control risk when companies have networks 
consisting of servers located throughout various parts of the organization because 
decentralized network operations often lack security and management supervision 
over the various connected servers. 

It is common for networks to consist of various combinations of equipment and 
procedures, which may not have standard security options. Lack of equipment com- 
patibility across a network may occur when responsibility for purchasing equipment 
and software, maintenance, administration, and physical security resides with key 
user groups rather than with a centralized IT function. Sometimes network security 
may be compromised when networks consist of equipment with incompatible security 
features. 

When clients have accounting applications processed in a network, the auditor 
should learn about the network configuration, including the location of computer 
servers and workstations linked to one another, network software used to manage the 
system, and controls over access VAPAGS° } ORMHANCEeT: files 
located on servers. This knowledge nfay have implications for the auditor's control 
risk assessment when planning the audit of the financial statements and when testing 
controls in an audit of internal control over financial reporting. 


Database management systems allow clients to create databases that include informa- 
tion that can be shared across multiple applications. In nondatabase systems, each 
application has its own data file, whereas in database management systems, many 
applications share files. Clients implement database management systems to reduce 
data redundancy, improve control over data, and provide better information for decision 
making by integrating information throughout functions and departments. For example, 
customer data, such as the customer’s name and address, can be shared in the sales, 
credit, accounting, marketing, and shipping functions, resulting in consistent informa- 
tion for all users and significant cost reductions. Companies often integrate database 
management systems within the entire organization using enterprise resource planning 
(ERP) systems that integrate numerous aspects of an organization’s activities into one 
accounting information system. ERP systems share data across accounting and non- 
accounting business functions of the organization. For example, customer order data 
may be used by accounting to record a sale, by production to meet increased production 
demand, by purchasing to order additional raw materials, and by human resources to 
arrange labor schedules. 

Controls often improve when data are centralized in a database management 
system by eliminating duplicate data files. However, database management systems also 
can create internal control risks. Risks increase when multiple users, including 
individuals outside of accounting, can access and update data files. To counter the risks 
of unauthorized, inaccurate, and incomplete data files, companies must implement 
proper database administration and access controls. With the centralization of data in 
a single system, they must also ensure proper backup of data on a regular basis. 


Issues for Database 
Management Systems 
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Issues for 
e-Commerce Systems 


Issues When 
Clients Outsource IT 


Auditors of clients using database management systems should understand the 
clients’ planning, organization, and policies and procedures to determine how well the 
systems are managed. This understanding may affect the auditor’s assessment of 
control risk and the auditor’s opinion about the operating effectiveness of internal 
control over financial reporting. 


Companies using e-commerce systems to transact business electronically link their 
internal accounting systems to external parties’ systems, such as customers and suppliers. 
As a result, a company’s risks depend in part on how well its e-commerce partners 
identify and manage risks in their own IT systems. To manage these interdependency 
risks, companies must ensure that their business partners manage IT system risks before 
conducting business with them electronically. Some of the assurance services discussed 
in Chapter 1, such as SysTrust, provide objective information about the reliability of a 
business partner’s IT system. 

The use of e-commerce systems also exposes sensitive company data, programs, 
and hardware to potential interception or sabotage by external parties. To limit these 
exposures, companies use firewalls, encryption techniques, and digital signatures. 

A firewall protects data, programs, and other IT resources from unauthorized 
external users accessing the system through networks, such as the Internet. A firewall is 
a system of hardware and software that monitors and controls the flow of e-commerce 
communications by channeling all network connections through controls that verify 
external users, grant accesses to authorized users, deny access to unauthorized users, 
and direct authorized users to requested programs or data. 

Encryption techniques protect the security of electronic communication when 
information is transmitted and when it is stored. Computerized encryption changes a 
standard message or data file into one that is coded (encrypted), requiring the receiver 
of the electronic message or user of the encrypted data file to use a decryption program 
to decgde the messa fe hs key encryption technique is often used, where 
one k age PD eee ANCE I rccsase and another key (the private 
key) is used to decode the message. The public key is distributed to all approved users 
of the e-commerce system. The private key is distributed only to internal users with the 
authority to decode the message. 

To authenticate the validity of a trading partner conducting business electronically, 
companies may rely on external certification authorities who verify the source of the 
public key by using digital signatures. A trusted certification authority issues a digital 
certificate to individuals and companies engaging in e-commerce. The digital signature 
contains the holder’s name and its public key. It also contains the name of the certi- 
fication authority and the certificate’s expiration date and other specified information. 
To guarantee integrity and authenticity, each signature is digitally signed by the private 
key maintained by the certification authority. 

Auditors should understand the nature of firewall and encryption controls to 
ensure that they are properly implemented and monitored. An inadequate firewall may 
increase the likelihood of unauthorized changes to software and data. Thus, the auditor 
may need to test controls surrounding the use of the firewall to ensure that automated 
application controls used to support assessed control risk below the maximum have 
not been changed without the auditor’s knowledge. Similarly, auditors may need to 
understand and test encryption controls to satisfy transaction and account balance 
objectives. Failure to adequately encrypt transaction or account data may result in 
changes in amounts supporting transactions or account balances. 


Many clients outsource some or all of their IT needs to an independent computer 
service center, including application service providers (ASPs), rather than maintain 
an internal IT center. Smaller companies often outsource their payroll function 
because payroll is reasonably standard from company to company, and many reliable 
providers of payroll services are available. Companies also outsource their e-commerce 
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CLOUD 
COMPUTING 


“Cloud computing” is a popular software model 
where users pay a monthly fee to access software 
applications that run on someone else’s hardware 
and rely on others’ application designs. Companies 
including Amazon, IBM, Microsoft, Google, Cisco, 
and Red Hat have emerged as heavyweights in 
the cloud computing field. Cloud computing helps 
users spare the expense of acquiring their own 
servers, storage and backup systems, hiring and 
retaining IT professionals to keep the systems 
running, and other high-cost IT support activities. 
Instead of running their own systems, users 
pay vendors to host the application and store 
related data. Systems are accessed through the 
Internet, which means they can be used on any 
computer with an Internet connection. Cloud 


directly controlled by users and another entity 
hosts the software. As a result, the underlying 
code for the software is basically the same for all 
users, which restricts user customization. And, 
when systems are down, user access depends on 
restoration by the vendor. Backup options may 
also not be available for users since their decision 
to contract with a cloud computing vendor is 
often driven by a desire to avoid costs of buying 
servers and hardware to host the software. 

Massive scale cloud computing environments 
are emerging as well. IBM's “Blue Cloud,” a series 
of cloud computing offerings, allows corporate 
data centers to operate more like the Internet by 
enabling computing across widely distributed, 
global highly powerful computers. 


computing solutions are appearing in a number of 
business process areas, including customer 
relationship management, human resources, 
payroll, billing, and help desk management. 
Relying on cloud computing solutions does 
come with risks that need to be managed. Data is 
transmitted and then stored in environments not 


Source: Adapted from 1. Jon Brodkin, “Amazon and 
IBM are the ‘Cloud Champions’, Report Says,” C/O 
Magazine, June 15, 2010; 2. Alan Cohen, “Cloud 
Computing: Is it Safe?,” Law.com, October 31, 2008 
(www.law.com); 3. IBM, Inc., “IBM Introduces 
Ready-to-Use Cloud Computing,” (www.ibm.com), 
November 15, 2007. 








systems to external Web site service providers. Like all outsourcing decisions, companies 
decide whether to outsource IT on a cost-benefit basis. 

When outsourcing to a computer service center, the client submits input data, 
which the service center processes for a fee, and returns the agreed-upon output and 
the original input. For payroll, the APAGY "PDE "hha neere rates, 
and W-4s to the service center. The Sém¥v1 mter returns payrolf checks, journals, and 
input data each week and W-2s at the end of each year. The service center is responsible 


for designing the computer system and providing adequate controls to ensure that the 
processing is reliable. 


Understanding Internal Controls in Outsourced Systems The auditor faces a 
difficulty when obtaining an understanding of the client’s internal controls in these 
situations because many of the controls reside at the service center, and the auditor 
cannot assume that the controls are adequate simply because it is an independent 
enterprise. Auditing standards require the auditor to consider the need to obtain an 
understanding and test the service center’s controls if the service center application 
involves processing significant financial data. For example, many of the controls for 
payroll transaction-related audit objectives reside within the software program 
maintained and supported by the payroll services company, not the audit client. 

When obtaining an understanding and testing the service center’s controls, the 
auditor should use the same criteria that was used in evaluating a client’s internal 
controls. The depth of the auditor’s understanding depends on the complexity of the 
system and the extent to which the control is relied upon to reduce control risk. The depth 
of understanding also depends on the extent to which key controls over transaction- 
related audit objectives reside at the service center for audits of internal control for 
public companies. If the auditor concludes that active involvement at the service center 
is the only way to conduct the audit, it may be necessary to obtain an understanding of 
internal controls at the service center and test controls using test data and other tests of 
controls. 


Reliance on Service Center Auditors In recent years, it has become increasingly 
common for the service center to engage a CPA firm to obtain an understanding and 
test internal controls of the service center and issue a report for use by all customers and 
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their independent auditors. The purpose of this independent assessment is to provide 
service center customers reasonable assurance about the adequacy of the service center’s 
general and application controls and to eliminate the need for redundant audits by 
customers’ auditors. If the service center has many customers and each requires an 
understanding of the service center’s internal control by its own independent auditor, 
the inconvenience and cost to the service center can be substantial. 

Attestation standards provide guidance to auditors who issue reports on the 
internal control of service organizations (service auditors), while auditing standards 
provide guidance to auditors of user organizations (user auditors) that rely on the 
service auditor’s report. Service auditors may issue two types of reports: 


* Report on controls that have been implemented 
* Report on controls that have been implemented and tested for operating effec- 
tiveness 


A report on controls that have been implemented helps auditors obtain an under- 
standing of internal control to plan the audit. However, auditors also require evidence 
about the operating effectiveness of controls to assess control risk, especially when 
auditing internal control over financial reporting for public companies. This evidence can: 


* Be based on the service auditor’s report on controls that have been implemented 
and tests of operating effectiveness 

* Come from tests of the user organization’s controls over the activities of the 
service organization 

* Be created when the user auditor does appropriate tests at the service organi- 
zation 


If the user auditor decides to rely on the service auditor’s report, appropriate 
inquiries should be made about the service auditor’s reputation. Auditing standards 
state that the user auditor should not make reference to the report of the service 


audit@AP@GimnicPD Fie Enhance gnancial statements. 


SUMMARY 


This chapter studied how IT influences the audit process. Even when a client’s use of IT 
leads to improved internal control, the use of IT-based accounting systems introduces new 
risks typically not associated with traditional manual systems. Well-managed companies 
recognize these risks and respond by implementing effective general and application 
controls in the IT system to reduce the impact of these risks on financial reporting. The 
auditor must be knowledgeable about these risks and obtain an understanding of the 
client’s general and application controls to effectively plan an audit. Knowledge about 
general controls provides a basis for the auditor to rely on automated application controls 
and may reduce the extent of tests of key automated controls in audits of financial 
statements and internal controls. Some of the auditor’s tests of controls can be done by the 
computer, often as a way to achieve more effective and efficient audits. Reliance on general 
and application controls to reduce control risk is likely to change when clients use desktop 
computers, networks, database management systems, e-commerce systems, and out- 
sourced computer service centers instead of centralized IT systems. 


ESSENTIAL TERMS 


Application controls—controls related to Application service providers (ASPs)—a 
a specific use of IT, such as the inputting, third-party entity that manages and supplies 
processing, and outputting of sales or software applications or software-related 
cash receipts services to customers through the Internet 
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Auditing around the computer—auditing 
without relying on and testing automated 
controls embedded in computer applica- 
tion programs, which is acceptable when 
the auditor has access to readable source 
documents that can be reconciled to 
detailed listings of output or when suffi- 
cient nonautomated controls exist 


Auditing through the computer—auditing 
by testing automated internal controls and 
account balances electronically, generally 
because effective general controls exist 


Automated controls—application con- 
trols done by the computer 


Database management systems—hard- 
ware and software systems that allow 
clients to establish and maintain data- 
bases shared by multiple applications 


Digital signatures—electronic certificates 
that are used to authenticate the validity 
of individuals and companies conducting 
business electronically 


Embedded audit module approach—a 
method of auditing transactions pro- 
cessed by IT whereby the auditor embeds 
a module in the client’s application 


Hardware controls—controls built into 
the computer equipment by the manu- 
facturer to detect and report equipment 
failure 


Input controls—controls designed by 
an organization to ensure that the infor- 
mation to be processed by the computer is 
authorized, accurate, and complete 


Local area networks (LANs)—networks 
that connect computer equipment, data 
files, software, and peripheral equipment 
within a local area, such as a single building 
or a small cluster of buildings, for intra- 
company use 


Manual controls—application controls 
done by people 


Output controls—controls designed to 
ensure that computer-generated data are 
valid, accurate, complete, and distributed 
only to authorized people 


Parallel simulation testing—an audit 
testing approach that involves the auditor’s 
use of audit software, either purchased or 
programmed by the auditor, to replicate 
some part of a client’s application system 


sgft- 
ware to identify transactions with “hoAP ago: PDFinEnhan¢gemputer 


teristics that are of interest to the auditor; 
the auditor is then able to analyze these 
transactions on a real-time, continuous 
basis as client transactions are processed 


Encryption techniques—computer pro- 
grams that change a standard message 
or data file into one that is coded, then 
decoded using a decryption program 


Enterprise resource planning (ERP) 
systems—systems that integrate numerous 
aspects of an organization’s activities into 
one accounting information system 


Firewall—a system of hardware and soft- 
ware that monitors and controls the flow 
of e-commerce communications by chan- 
neling all network connections through a 
control gateway 


General controls—controls that relate to 
all parts of the IT function 


Generalized audit software (GAS)— 
computer programs used by auditors that 
provide data retrieval, data manipulation, 
and reporting capabilities specifically 
oriented to the needs of auditors 


testing approach that involves operating 
the old and new systems simultaneously 


Pilot testing—a company’s computer 
testing approach that involves imple- 
menting a new system in just one part of 
the organization, while maintaining the 
old system at other locations 


Processing controls—controls designed 
to ensure that data input into the system 
are accurately and completely processed 


Service center—an organization that 
provides IT services for companies on an 
outsourcing basis 


Test data approach—a method of auditing 
an IT system that uses the auditor’s test 
data to determine whether the client’s 
computer program correctly processes 
valid and invalid transactions 


Wide area networks (WANs)—networks 
that connect computer equipment, data- 
bases, software, and peripheral equip- 
ment that reside in many geographic 
locations, such as client offices located 
around the world 
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REVIEW QUESTIONS 


12-1 (Objective 12-1) Explain how client internal controls can be improved through the 
proper installation of IT. 


12-2 (Objective 12-2) Identify risks for accounting systems that rely heavily on IT functions. 


12-3 (Objective 12-2) Define what is meant by an audit trail and explain how it can be 
affected by the client’s integration of IT. 


12-4 (Objective 12-2) Distinguish between random error resulting from manual proces- 
sing and systematic error resulting from IT processing and give an example of each cate- 
gory of error. 


12-5 (Objective 12-2) Identify the traditionally segregated duties in noncomplex IT systems 
and explain how increases in the complexity of the IT function affect that separation. 


12-6 (Objective 12-3) Distinguish between general controls and application controls and 
give two examples of each. 


12-7 (Objective 12-3) Identify the typical duties within an IT function and describe how 
those duties should be segregated among IT personnel. 


12-8 (Objective 12-4) Explain how the effectiveness of general controls affects the auditor’s 
tests of automated application controls, including the auditor’s ability to rely on tests done 
in prior audits. 


12-9 (Objective 12-4) Explain the relationship between application controls and trans- 
action-related audit objectives. 


12-10 (Objective 12-4) Explain what is meant by auditing around the computer and 
describe what must be present for this approach to be effective when auditing clients who 
use IT to process accounting information. 


v1 AR|gI9,. BP ai AAPARGE Tne test data approach. What are the 


major difficulties with using this approach? Define parallel simulation with audit software 
and provide an example of how it can be used to test a client’s payroll system. 


12-12 (Objective 12-6) Describe risks that are associated with purchasing software to be 
installed on desktop computer hard drives. What precautions can clients take to reduce 
those risks? 


12-13 (Objective 12-6) Compare the risks associated with network systems to those 
associated with centralized IT functions. 


12-14 (Objective 12-6) How does the use of a database management system affect risks? 


12-15 (Objective 12-6) An audit client is in the process of creating an online Web-based sales 
ordering system for customers to purchase products using personal credit cards for payment. 
Identify three risks related to an online sales system that management should consider. For 
each risk, identify an internal control that could be implemented to reduce that risk. 


12-16 (Objective 12-6) Your client has outsourced the majority of the accounting 
information system to a third-party data center. What impact would that have on your 
audit of the financial statements? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 





12-17 (Objectives 12-1, 12-4) The following questions concern the characteristics of IT 
systems. Choose the best response. 


a. Effective management of information technologies in an organization embraces the 
viewpoint that 
(1) most technologies reduce existing risk conditions. 
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(2) technologies reduce some types of risks while introducing new types of risks to be 
managed. 

(3) technologies generally increase an organization’s overall net risks. 

(4) the objective of technology implementations is to increase profitability on a net 
basis. 


b. Which of the following is generally not considered a category of IT general controls? 
(1) Controls that determine whether a vendor number matches the pre-approved 
vendors in the vendor master file. 
(2) Controls that restrict system-wide access to programs and data. 
(3) Controls that oversee the acquisition of application software. 
(4) Controls that oversee the day-to-day operation of IT applications. 


c. As general IT controls weaken, the auditor is most likely to 

(1) reduce testing of automated application controls done by the computer. 

(2) increase testing of general IT controls to conclude whether they are operating 
effectively. 

(3) expand testing of automated application controls used to reduce control risk to 
cover greater portions of the fiscal year under audit. 

(4) ignore obtaining knowledge about the design of general IT controls and whether 
they have been implemented. 


ws 


d. Which of the following is an example of an application control? 

(1) The client uses access security software to limit access to each of the accounting 
applications. 
Employees are assigned a user ID and password that must be changed every quarter. 
The sales system automatically computes the total sale amount and posts the total 
to the sales journal master file. 
(4) Systems programmers are restricted from doing applications programming 

functions. 


12-18 (Objectives 12-2, 12-4) The Apago «PDF o Enhancer! IT 


systems. Choose the best response. 


(2 
(3 


it 


a. Which of the following client IT systems generally can be audited without examining 

or directly testing the computer programs of the system? 

(1) A system that performs relatively uncomplicated processes and produces detailed 
output. 

(2) A system that affects a number of essential master files and produces limited 
output. 

(3) A system that updates a few essential master files and produces no printed output 
other than final balances. 

(4) A system that does relatively complicated processing and produces little detailed 
output. 


b. Your client’s sales application ensures that all credit sales transactions in the sales 
journal have an assigned bill of lading number; however, the system does not ensure 
that all bill of lading numbers have an assigned sales invoice number. Your company 
may have a control deficiency related to the 
(1) occurrence of sales transactions. (3) completeness of sales transactions. 
(2) accuracy of sales transactions. (4) completeness of the cash balance. 


c. Before processing, the system validates the sequence of items to identify any breaks in 
sequence of input documents. This automated control is primarily designed to ensure the 
(1) accuracy of input. (3) completeness of input. 

(2) authorization of data entry. (4) restriction of duplicate entries. 


d. An auditor will use the test data approach to obtain certain assurances with respect to the 
(1) input data. 
(2) machine capacity. 
(3) procedures contained within the program. 
(4) degree of data entry accuracy. 
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DISCUSSION QUESTIONS AND PROBLEMS 


Required 


Required 


12-19 (Objectives 12-2, 12-3) The following are misstatements that can occur in the sales 
and collection cycle: 


1. A customer number on a sales invoice was transposed and, as a result, charged to the 
wrong customer. By the time the error was found, the original customer was no 
longer in business. 

2. A former computer operator, who is now a programmer, entered information for a 
fictitious sales return and ran it through the computer system at night. When the 
money came in, he took it and deposited it in his own account. 

3. A nonexistent part number was included in the description of goods on a shipping 
document. Therefore, no charge was made for those goods. 

4. A customer order was filled and shipped to a former customer that had already filed 
for bankruptcy. 

5. The sales manager approved the price of goods ordered by a customer, but he wrote 
down the wrong price. 

6. A computer operator picked up a computer-based data file for sales of the wrong 
week and processed them through the system a second time. 

7. For a sale, a data entry operator erroneously failed to enter the information for the 
salesman’s department. As a result, the salesman received no commission for that sale. 

8. Several remittance advices were batched together for inputting. The cash receipts 
clerk stopped for coffee, set them on a box, and failed to deliver them to the data 
input personnel. 


a. Identify the transaction-related audit objective(s) to which the misstatement pertains. 
b. Identify one automated control that would have likely prevented each misstatement. 


12-20 (Objectives 12-2, 12-3) You are doing the audit of Phelps College, a private school 
with a jet Nete 740) ith your firm’s consultation, they have instituted an 
IT yA agg, a en tan ALCL computer operator, systems analyst, 
librarian, See and data control group by having a different person do each 
function. Now, a budget reduction is necessary and one of the five people must be laid off. 
You are requested to give the college advice as to how the five functions could be done with 


reduced personnel and minimal negative effects on internal control. The amount of time 
the functions take is not relevant because all five people also do nonaccounting functions. 


a. Divide the five functions among four people in such a way as to maintain the best 
possible control system. 


b. Assume that economic times become worse for Phelps College and it must terminate 
employment of another person. Divide the five functions among three people in such 
a way as to maintain the best possible internal control. Again, the amount of time each 
function takes should not be a consideration in your decision. 


c. Assume that economic times become so severe for Phelps College that only two 
people can be employed to do IT functions. Divide the five functions between two 
people in such a way as to maintain the best possible control system. 


d. If the five functions were done by one person, will internal controls be so inadequate 
that an audit cannot be done? Discuss. 


12-21 (Objectives 12-2, 12-3, 12-4, 12-5) The Meyers Pharmaceutical Company has the 
following system for billing and recording accounts receivable: 


1. An incoming customer’s purchase order is received in the order department by a 
clerk who prepares a prenumbered company sales order on which the pertinent 
information, such as the customer’s name and address, customer’s account number, 
and items and quantities ordered, is inserted. After the sales order has been prepared, 
the customer’s purchase order is stapled to it. 

2. The sales order is then passed to the credit department for credit approval. Rough 
approximations of the billing values of the orders are made in the credit department 
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for those accounts on which credit limitations are imposed. After investigation, 
approval of credit is noted on the sales order. 

3. Next the sales order is passed to the billing department, where a clerk key-enters the 
sales order information onto a data file, including unit sales prices obtained from an 
approved price list. The data file is used to prepare sales invoices. 

The billing application automatically accumulates daily totals of customer account 
numbers and invoice amounts to provide “hash” totals and control amounts. These 
totals, which are inserted in a daily record book, serve as predetermined batch totals 
for verification of computer inputs. The billing is done on prenumbered, continuous, 
multi-copy forms that have the following designations: 

(a) Customer copy 

(b) Sales department copy, for information purposes 

(c) File copy 

(d) Shipping department copy, which serves as a shipping order 


Bills of lading are also prepared as by-products of the invoicing procedure. 

4. The shipping department copy of the invoice and the bills of lading are then sent to 
the shipping department. After the order has been shipped, copies of the bill of 
lading are returned to the billing department. The shipping department copy of the 
invoice is filed in the shipping department. 

5. In the billing department, one copy of the bill of lading is attached to the customer’s 
copy of the invoice and both are mailed to the customer. The other copy of the bill of 
lading, together with the sales order is then stapled to the invoice file copy and filed 
in invoice numerical order. 

6. The data file is updated for shipments that are different from those billed earlier. 
After these changes are made, the file is used to prepare a sales journal in sales invoice 
order and to update the accounts receivable master file. Daily totals are printed to 
match the control totals prepared earlier. These totals are compared with the “hash” 
and control totals by an independent person. 


a. Identify the important controls Apage PDE BRAANREexetives. 


b. List the procedures that a CPA will use in an audit of sales transactions to test the 
identified controls and the substantive aspects of the sales transactions. 


12-22 (Objective 12-3) During your audit of Wilcoxon Sports, Inc., a retail chain of stores, 
you learn that a programmer made an unauthorized change to the sales application 
program even though no work on that application had been approved by IT management. 
In order for the sales application program to work, the programmer had to make modifi- 
cations to the operating software security features. The unauthorized change forced the 
sales program to calculate an automatic discount for a customer who happens to be the 
brother-in-law of the programmer. The customer and programmer split the savings from 
the unauthorized discount. The programmer modified the program and returned it to the 
librarian who placed it into the files for live production use. No other information was 
forwarded to the librarian. 


1. What recommendation do you have for management of Wilcoxon Sports, Inc. to 
prevent this from recurring? 

2. Explain why you believe the suggested internal control improvements will prevent 
problems in the future. 


12-23 (Objectives 12-1, 12-2, 12-3, 12-4, 12-5) You are conducting an audit of sales for the 
James Department Store, a retail chain store with a computer-based sales system in which 
computer-based cash registers are integrated directly with accounts receivable, sales, 
perpetual inventory records, and sales commission expense. At the time of sale, the 
salesclerks key-enter the following information directly into the cash register: 


* Product number * Salesclerk number 

* Quantity sold * Date of sale 

* Unit selling price * Cash sale or credit sale 

* Store code number * Customer account number for all credit sales 
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The total amount of the sale, including sales tax, is automatically computed by the 
system and indicated on the cash register’s visual display. The only printed information for 
cash sales is the cash register receipt, which is given to the customer. For credit sales, a credit 
slip is prepared and one copy is retained by the clerk and submitted daily to the accounting 
department. 

A summary of sales is printed out daily in the accounting department. The summary 
includes daily and monthly totals by salesclerks for each store as well as totals for each of 93 
categories of merchandise by store. Perpetual inventory and accounts receivable records are 
updated daily on magnetic tape, but supporting records are limited primarily to machine- 
readable records. 


a. What major problems does the auditor face in verifying sales and accounts receivable? 


b. How can the concept of test data be used in the audit? Explain the difficulties the 
auditor will have to overcome in using test data. 


c. How can generalized audit software be used in this audit? List several tests that can be 
conducted by using this approach. 


d. The client would also like to reduce the time it takes to key-enter the information into 
the cash register. Suggest several ways in which this can be accomplished, considering 
the information now being key-entered manually. 


12-24 (Objective 12-5) A CPA’s client, Boos & Baumkirchner, Inc., is a medium-size 
manufacturer of products for the leisure-time activities market (camping equipment, 
scuba gear, bows and arrows, and so forth). During the past year, a computer system was 
installed and inventory records of finished goods and parts were converted to computer 
processing. The inventory master file is maintained on a disk. Each record of the file 
contains the following information: 


* Item or part number * Total value of inventory on hand at cost 
* Description * Date of last sale or usage 

* Size * Quantity used or sold this year 
‘UApageorPDF Enhancer order quantity 

* Quantity on hand * Code number of major vendor 

* Cost per unit * Code number of secondary vendor 


In preparation for year-end inventory, the client has two identical sets of preprinted 
inventory count cards. One set is for the client’s inventory counts, and the other is for the 
CPA's use to make audit test counts. The following information is on each card: 

* Item or part number ° Size 

» Description * Unit-of-measure code 


In taking the year-end inventory, the client’s personnel will write the actual counted 
quantity on the face of each card. When all counts are complete, the counted quantity will 
be entered into the system. The cards will be processed against the inventory database, 
and quantity-on-hand figures will be adjusted to reflect the actual count. A computer- 
generated edit listing will be prepared to show any missing inventory count cards and all 
quantity adjustments of more than $100 in value. These items will be investigated by client 
personnel, and all required adjustments will be made. When adjustments have been 
completed, the final year-end balances will be computed and posted to the general ledger. 

The CPA has available generalized audit software that will run on the client’s computer 
and can process both card and disk files. 


a. In general and without regard to the facts in this case, discuss the nature of generalized 
audit software and list the various types and uses. 


b. List and describe at least five ways generalized audit software can be used to assist in 
all aspects of the audit of the inventory of Boos & Baumkirchner, Inc. (For example, 
the software can be used to read the disk inventory master file and list items and parts 
with a high unit cost or total value. Such items can be included in the test counts to 
increase the dollar coverage of the audit verification.)" 


*AICPA adapted. 
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12-25 (Objectives 12-2, 12-3) One of the firm’s audit partners, Alice Goodwin, just had 
lunch with a good friend, Sara Hitchcock, who is president of Granger Container 
Corporation. Granger Container Corp. is a fast-growing company that has been in business 
for only a few years. During lunch, Sara asked Alice for some advice and direction on how 
Granger Container should structure its systems development process within the Information 
Systems Department. Sara noted that because Granger has experienced such tremendous 
growth, the systems development process has evolved into its current state without much 
direction. Given Granger Container’s current size, Sara questions whether their current 
processes are reasonable. Sara’s concern is magnified by the fact that she has little under- 
standing of information systems processes. Alice told Sara about your information systems 
evaluation experience and agreed to have you look at Granger Container’s current systems 
development procedures. Sara gave Alice the following summary of the current processes: 


Eric Winecoff is the information systems manager at Granger Container and has been 
at the company for 3 years. Before becoming an employee, Eric provided software 
consulting services for Granger Container. Granger Container purchased a basic 
software package from Eric’s former employer. Granger Container has the capability 
to make extensive modifications to the purchased software to adapt the software to 
Granger Container’s specific business needs. 

Program change requests are initiated by either the operations staff (two employees) 
or the programming staff (two employees), depending on the nature of the change. All 
change requests are discussed in Eric’s office with the initiating staff. Based on that 
discussion, Eric provides a verbal approval or denial of the requested change. For 
approved projects, he encourages the programmers to visit with him from time to time 
to discuss progress on the projects. Eric’s long and varied experience with this particu- 
lar software is helpful in the evaluation of work done, and he is able to make substan- 
tive suggestions for improvement. Eric has complete faith in his programmers. He 
believes that if he controlled their activities too carefully, he would stifle their creativity. 

Upon completion of the technical programming, Eric reviews the programs and 
related systems flowcharts. riApago i ‘ LENnhani@exrrdefore 
granting his final approval for implementation. One evening a week is set aside in the 
computer room for program debugging and testing. 

The programmers stay late on those evenings so that they can load the programs 
themselves. To speed up the coding, debugging, and testing process, the programmers 
work with the actual production program. As a safeguard, however, testing is done on 
copies of the data files. The original data files are locked carefully in the file storage 
room. Eric is the only person who has access to the room. 

When program changes are tested to the satisfaction of the programmers, Eric 
reviews the test results. If he approves the test results, he personally takes care of all the 
necessary communications and documentation. This involves preparing a short 
narrative description of the change, usually no longer than a paragraph. A copy of the 
narrative is sent to the user. Another copy is filed with the systems documentation. 
When the narrative is complete, Eric instructs operations to resume normal pro- 
duction with the new program. 


a. Describe controls in Granger Container’s systems development and program change 
processes. 


b. Describe deficiencies in Granger Container’s systems development and program 
change processes. 


c. Provide recommendations for how Granger Container could improve its processes. 


12-26 (Objective 12-4) Following are 10 key internal controls in the payroll cycle for 
Gilman Stores, Inc. 


Key Controls 


1. To input hours worked, payroll accounting personnel input the employee’s Social 
Security number. The system does not allow input of hours worked for invalid 
employee numbers. 
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2. The payroll application is programmed so that only human resource personnel are 
able to add employee names to the employee master files. 

3. Input menus distinguish executive payroll, administrative payroll, and factory 
payroll. 

4, The system automatically computes pay at time and a half once hours worked exceed 
80 in a 2-week pay period. 

5. The system accumulates totals each pay period of employee checks processed and 
debits the payroll expense general ledger account for the total amount. 

6. Each pay period, payroll accounting clerks count the number of time cards sub- 
mitted by department heads for processing and compare that total with the number 
of checks printed by the system to ensure that each time card has a check. 

7. For factory personnel, the payroll system matches employee ID numbers with ID 
numbers listed on job costing tickets as direct labor per the cost accounting system. 
The purpose of the reconciliation is to verify that the amount paid to each employee 
matches the amount charged to production during the time period. 

8. The system generates a listing by employee name of checks processed. Department 
heads review these listings to ensure that each employee actually worked during the 
pay period. 

9. On a test basis, payroll accounting personnel obtain a listing of pay rates and with- 
holding information for a sample of employees from human resources to recalculate 
gross and net pay. 

10. The system automatically rejects processing an employee’s pay if inputted hours 
exceed 160 hours for a 2-week pay period. 


For each control: 


a. Identify whether the control is an automated application control (AC) or a manual 
control done by Gilman employees (MC). 


b. Identify the transaction-related audit objective that is affected by the control. 


C. Apags: a4 if E ithi two prior year audits, would not have 
to De retested in DF einen Ot ére are effective IT general controls and 
no changes to the noted control have been made since auditor testing was completed. 


12-27 (Objectives 12-2, 12-3) Your new audit client, Hardwood Lumber Company, has a 
computerized accounting system for all financial statement cycles. During planning, you 
visited with the information systems vice president and learned that personnel in informa- 
tion systems are assigned to one of four departments: systems programming, applications 
programming, operations, or data control. Job tasks are specific to the individual and no 
responsibilities overlap with other departments. Hardwood Lumber relies on the operating 
system software to restrict online access to individuals. The operating system allows an 
employee with “READ” capabilities to only view the contents of the program or file. 
“CHANGE” allows the employee to update the contents of the program or file. “RUN” allows 
the employee to use a program to process data. Programmers, both systems and applications, 
are restricted to a READ-only access to all live application software program files but have 
READ and CHANGE capabilities for test copies of those software program files. Operators 
have READ and RUN capabilities for live application programs. Data control clerks have 
CHANGE access to data files only and no access to software program files. The person in 
charge of operations maintains access to the operating software security features and is 
responsible for assigning access rights to individuals. The computer room is locked and 
requires a card-key to access the room. Only operations staff have a card-key to access the 
room, and security cameras monitor access. A TV screen is in the information systems vice 
president’s office to allow periodic monitoring of access. The TV presents the live picture and 
no tape record is maintained. The librarian, who is in the operations department, is respon- 
sible for maintaining the library of program tapes and files. The librarian has READ and 
CHANGE access rights to program tapes and files. The files, when not being used, are stored 
in shelves located in a room adjacent to the computer room. They are filed numerically based 
on the tape label physically attached on the outside of the tape cartridge to allow for easy 
identification by operators as they access tapes from the shelves for processing. 
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What recommendations for change can you suggest to improve Hardwood’s information Required 
systems function? 


12-28 (Objective 12-6) Parts for Wheels, Inc. has historically sold auto parts directly to 
consumers through its retail stores. Due to competitive pressure, Parts for Wheels installed 
an Internet-based sales system that allows customers to place orders through the company’s 
Web site. The company hired an outside Web site design consultant to create the sales 
system because the company’s IT personnel lack the necessary experience. 

Customers use the link to the inventory parts listing on the Web site to view product 
descriptions and prices. The inventory parts listing is updated weekly. To get the system 
online quickly, management decided not to link the order system to the sales and inventory 
accounting systems. Customers submit orders for products through the online system and 
provide credit card information for payment. Each day, accounting department clerks print 
submitted orders from the online system. After credit authorization is verified with the 
credit card agency, the accounting department enters the sale into the sales journal. The 
accounting department then sends a copy of the order to warehouse personnel who process 
the shipment. The inventory system is updated based on bills of lading information 
forwarded to accounting after shipment. 

Customers may return parts for full refund if returned within 30 days of submitting the 
order online. The company agrees to refund shipping costs incurred by the customer for 
returned goods. 


a. Describe deficiencies in Parts for Wheels’ online sales system that may lead to material Required 
misstatements in the financial statements. 


b. Identify changes in manual procedures that could be made to minimize risks, without 
having to reprogram the current online system. 


c. Describe customer concerns about doing business online with Parts for Wheels. What 
types of controls could be implemented to address those concerns? 


12-29 (Objective 12-6) Based on a cost-benefit analysis, management at First Community 
Bank decided to contract with Techno Pagans, PDE @hAGE Host all 
of the bank’s financial reporting applications. To avoid the significant costs of developing 
and maintaining its own data center, First Community contracts with Technology 
Solutions to provide IT server access in a highly secure, environmentally controlled data 
center facility owned by Technology Solutions. Similar to First Community, other busi- 
nesses also contract with Technology Solutions to host applications at the same data center. 

The bank is directly linked through highly secure telecommunication lines to the data 
center, which allows bank personnel to transmit data to and from the data center as if the 
data center was owned by First Community. For a monthly fee, Technology Solutions 
supports the server hardware in an environment with numerous backup controls in the 
event power is lost or other hardware failures occur. Bank personnel are responsible for 
selecting and maintaining all application software loaded on Technology Solutions servers, 
and selected bank personnel have access to those servers located at Technology Solutions 
data center. Bank personnel enter all data, run applications hosted at Technology Solutions, 
and retrieve reports summarizing the processing of all bank transactions. 


a. What risks might First Community assume with this approach to IT system support? Required 
b. How does the use of Technology Solutions impact First Community’s internal controls? 


c. What impact, if any, does reliance on Technology Solutions as the data center provider 
have on the audit of First Community’s financial statements? 


CASE 


12-30 (Objectives 12-2, 12-3) The information systems (IS) department at Jacobsons Inc. 
consists of eight employees, including the IS Manager, Melinda Cullen. Melinda 
is responsible for the day-to-day oversight of the IS function and reports to Jacobsons’ 
chief operating officer (COO). The COO is a senior vice president responsible for the 
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overall retail operations who reports directly to the president and chief executive officer. 
The COO attends board of director meetings to provide an update of key operating 
performance issues. Because Melinda takes an active role in managing the IS department, 
the COO rarely discusses IS issues with the board or CEO. Melinda and the COO identify 
hardware and software needs and are authorized to approve those purchases. 

In addition to Melinda, the IS department is composed of seven other individuals: 
three programmers, three operators, and one data control clerk. Melinda has been 
employed by Jacobsons for 12 years, working her way up through various positions in 
the department. Fortunately, she has been able to retain a fairly stable staff and has 
experienced minimal turnover. All IS personnel have been employed in their current 
positions since mid-2007. When hiring personnel, Melinda does extensive background 
checks on prospective employees, including reference, credit, and criminal checks. 
Melinda has developed a trust with each employee and, as a result, delegates extensively to 
each individual. This is especially beneficial because Melinda spends most of her time 
working with user departments in a systems analyst role, identifying changes needed to 
existing applications. She conducts weekly IS departmental meetings on Tuesday mornings. 
Each staff member attends, including night operators, to discuss issues affecting the 
performance of the department. 

The three programmers are responsible for maintaining and updating systems and 
application software. The lead programmer is responsible for assigning duties among the 
programming staff. All three programmers have extensive experience with the operating, 
utility, security, and library software as well as all of Jacobsons’ application software packages. 
Programming assignments are made based on who is least busy among the programming 
staff at the time. This method of management keeps all programmers familiar with most 
software packages in use at Jacobsons and keeps programmers excited about the job tasks 
because of the variety of assignments they receive. Melinda encourages each programmer to 
take continuing education courses to keep current with the latest technical developments. In 
addition to programming jeeerae the nent staff maintains the library of 


progr a el ta alin EGE room nearby. The programming staff 
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The three operators consist of a day operator and two night operators. Most of the appli- 
cations are based on online inputting from various user departments for batch processing 
overnight. Thus, the heaviest volume of processing occurs during the night shift, although 
there is some daytime processing of payroll and general ledger applications. All operators 
are responsible for monitoring the operation of the equipment and correcting system- 
caused errors. In addition, they do routine monthly backup procedures. The computer 
operators have programming experience with the program language used in application 
programs. Occasionally, when a small change is identified for an application program, 
Melinda asks the day shift operator to implement that change to avoid overburdening the 
programming staff. 

Operators follow the production schedule prepared by Melinda, who consults with user 
departments to develop the schedule. The day shift operator reviews the job processed log 
(which chronologically details the jobs processed) generated at the end of the previous night 
shift for deviations from the schedule, and the lead night shift operator reviews the job 
processed log generated at the end of the previous day shift for deviations from the schedule. 
If jobs processed reconcile to the job schedule, the job processed log is discarded. When there 
are deviations, the operator doing the review leaves a copy for Melinda, highlighting the 
deviation. Before doing batch processing jobs, the operators generate an input listing report 
that summarizes the number of online input entries submitted during the day for processing. 
This number is recorded and then later compared by the operators with the computer output 
generated after batch processing and file updating occur. This provides a check figure of the 
number of transactions processed. When the numbers agree, the output is submitted to the 
data control clerk. When the numbers disagree, the operators identify the error and resubmit 
the application for processing. 

The data control clerk collates all computer output, including output reports and excep- 
tion listings. The data control clerk reviews exception reports and prepares correction forms 
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for reprocessing. Examples of changes that the data control clerk might make include 
correcting inputting errors (for example, amounts accidentally transposed) and preparing 
change request forms for changes to existing master files (examples include revising sales 
price lists and inventory product numbers in the sales master file and adding new employee 
names, addresses, and Social Security numbers to the payroll master file). After all corrections 
are made, the data control clerk distributes all computer output to the various user 
departments. User departments have high regard for the IS staff. Output reports are 
reconciled to input reports by users on a test basis quarterly. 


You are the senior auditor assigned to the audit of Jacobsons. The audit partner has asked 
you to assist in doing the IS general controls review. The partner has asked you to review 
this narrative information and respond to the following questions: 


1. What controls and deficiencies exist in the lines of reporting from IS to senior 
management? If you note any deficiencies, provide recommendations that can be 
included in the management letter. 

2. What is your assessment of how Melinda Cullen fulfills her IS management responsi- 
bilities? Identify tasks that she does that strengthen the department. Which of her tasks 
cause you concern? What changes in her day-to-day responsibilities would you make? 

3. What is your assessment of the programming function at Jacobsons? What are the 
strengths? What are the deficiencies? Make recommendations for improvement. 

4, What is your assessment of the IS operations function at Jacobsons? What are the 
strengths? What are the deficiencies? Make recommendations for improvement. 

5. What is your assessment of the data control function at Jacobsons? What are the 
strengths? What are the deficiencies? Make recommendations for improvement. 

6. Make recommendations for improving controls over the involvement of users. 


Required 
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the CD attached to the text. Information about installing and using ACL and solving this 
problem can be found in Appendix, pages 838-842. You should read all of the reference 
material preceding the instructions about “Quick Sort” before locating the appropriate com- 
mand to answer questions a-f. For this problem use the Metaphor_Trans_2002 file in ACL_ 
Demo, which is a file of purchase transactions. The suggested command or other source of 
information needed to solve the problem requirement is included at the end of each question. 


a. Use Quick Sort for each column in the table and identify any concerns you have about 
the data. (Quick Sort) 


b. Determine the total cost of all purchases, ignoring any concerns in part a. (Total) 


c. Determine if there are any duplicates or missing numbers in the voucher file (Invoice 
column). State your audit concerns with any gaps or duplicates. Provide a possible 
explanation for any gaps or duplicates that you find. (Gaps and Duplicates) 


d. Determine and print the total purchases for the period by product. (Summarize) 
Determine if the total cost is the same as in part b. (Total) What product number has 
the greatest amount of purchases? (Quick Sort) 


e. Determine and print the percent of total purchases by product. Save the classified file 
for use in requirement f. (Classify) Based on that output, what percentage is product 
number 024133112 of the total amount? 


eh 


. Using the classified file from requirement e, stratify and print the purchases by 
product. Exclude all items smaller than $1,000. Sort the items to determine the 
smallest and largest amounts. Use the smallest amount as the minimum in the Stratify 
window. Because the largest amount is significantly larger than all other items, use the 
second highest amount as the maximum in the Stratify window. (Filter, Quick Sort, 
and Stratify) 
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INTERNET PROBLEM 12-1: ASSESSING IT GOVERNANCE 


The proliferation of information technology (IT) has made governance of IT an important 
issue for businesses of all sizes and types, as well as their auditors. The IT Governance 
Institute has developed a wide range of resources for organizations, auditors, and educators 
to use in addressing IT governance matters and simultaneously leveraging the benefits of 
technology. Visit the IT Governance Institute’s web site (www.itgi.org). Read the “About IT 
Governance” tab to answer the following questions. 
Required a. Why is IT governance important? 
b. How does IT governance relate to other aspects of the organization’s governance? 
c. How would an auditor likely view a company’s IT environment if the board and 
senior management were actively engaged in IT governance oversight? 
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OVERALL AUDIT PLAN 
AND AUDIT PROGRAM 


How Much And What Kind Of Testing pl tii Libs nga 
Will Get The Job Done? 13-1 Use the five types of audit tests 
Terry Holland and Al Baker have known each other for years. Terry is a partner to determine whether financial 
in the Southern California office of a national accounting firm. Al is an auditing rote tices) ge (Ml ctaiew 
professor at a nearby university. They get together once a month faithfully for 13-2 Select the appropriate types of 
lunch, and the conversation always gets around to auditing theory versus audit tests. 
practice. Following is their most recent conversation: 13-3 Understand how information 
PROFESSOR AL: Now that PCAOB standards require the audit of a public Beene lgayatlece ua sane. 
company’s financial statements and internal control over financial reporting to 13-4 Understand the concept of 
be integrated, I'm afraid that auditors over rely on tests of controls and perform ec ee newil 

ed in different 


virtually no testing of details of balances. Given significant time pressures cenincaniok. 
required to complete the testing of controls to comply with PCAOB require- 
ments, firms may take the low-cost approach and reduce substantive testing 
instead of being concerned enough about audit quality, especially in the 
audit of the financial statements. 


13-5 Design an audit program. 


13-6 Compare and contrast 
transaction-related audit 
objectives with balance-related 





PARTNER TERRY: Auditors must understand internal control in every audit, and presentation and disclosure- 
regardless if the client is publicly red aAg 6" a ct cErprAsricer related audit objectives. 

for nonpublic companies where control risks assessed below maximum, 13-7 Integrate the four phases of 
the auditor will be performing tests of controls. But, don’t forget that auditing the audit process. 





x 4 





standards also require that substantive tests be performed in all audits, even 
audits of public companies. So, while our testing of controls may be exten- 
sive, we always perform some amount of substantive tests. We might concentrate on larger items in tests of details of 
balances. Where risks are high, we pull out all the stops and do a lot of detailed testing. 


PROFESSOR AL: That sounds fine, but there are certain things that only detailed testing will find. I'm thinking specifically 
about misappropriation of assets. I’m sure your clients expect you to find those, but analytical procedures and tests of 
large items at year-end won't get that job done. What about that? 


PARTNER TERRY: Well, Al, our clients also tell us they want our opinion on their financial statements at as low a cost as 
possible. If we went looking for misappropriation of assets in every audit, our costs would go through the roof. And I'll 
tell you, the best way for the client to deal with fraud is to have good controls. And, now that we must audit internal control 
over financial reporting in larger public company audits, we conduct tests of controls that should address the risk of 
material misstatements due to misappropriations of assets. 


PROFESSOR AL: I'm not convinced. I’m concerned about the reduction in testing to search for errors as well as fraud. It 
seems to me you guys are taking the auditing standards requirements and figuring out how to audit so efficiently that 
you're not allowing any slack in the process. | think you're creeping more and more toward being an insurer rather than 
an assurer of the financial statements. 


PARTNER TERRY: What do you mean, Al? | don’t understand your theory at all. 

PROFESSOR AL: Well, you guys are counting on most of your clients not having misstated financial statements, doing 
minimal audit work at relatively high fees, and then banking on the fact that you'll be able to absorb the cost of any 
damages you suffer from bad audit opinions. 

PARTNER TERRY: Oh come on, Al, sitting in this ivory tower of yours has turned you into a cynic. | hope you don’t talk to your 
students this way. Auditors do a terrific job, and there is tremendous focus on the auditing profession right now. We want 
people to come into the profession with a positive attitude. Let's talk about something else. Say, | believe it’s your turn to pay. 


his chapter deals with the eighth and last step in the planning phase of an audit. This critical step establishes the 

entire audit program the auditor plans to follow, including all audit procedures, sample sizes, items to select, and 
timing. The chapter-opening example deals with the importance of making correct decisions in forming the overall 
audit plan and developing a detailed audit program, considering both the effectiveness of evidence and audit efficiency. 

First, the overall audit plan is discussed, which means selecting a mix of five types of tests that will result in an 
effective and efficient audit. This topic includes discussion of the trade-offs among the types of tests, including 
consideration of the cost of each type. After deciding on the most cost-effective mix of the types of tests, the auditor 
designs a detailed audit program. Later in the chapter, we'll address how phase I, which includes all of the audit 
planning steps, relates to the other three phases of the audit. 


TYPES OF TESTS 


OBJECTIVE 13-1 





Use the five types of audit 
tests to determine whether 
financial statements are fairly 
stated. 





Risk Assessment 
Procedures 


Tests of Controls 


In developing an overall audit plan, auditors use five types of tests to determine 
whether financial statements are fairly stated. Auditors use risk assessment procedures 
to assess the risk of material misstatement, represented by the combination of inherent 
risk and control risk as described in Chapters 8 and 9. The other four types of tests 
represent further audit procedures performed in response to the risks identified. Each 
audit procedure falls into one, and sometimes more than one, of these five categories. 

Figure 13-1 shows the relationship of the four types of further audit procedures to 
the audit risk model. As Figure 13-1 illustrates, tests of controls are performed to support 
a reduced assessment of control risk, while auditors use analytical procedures and tests of 
details of balances to satisfy planned detection risk. Substantive tests of transactions 
affect both control risk and planned detection risk, because they test the effectiveness 
of internal controls and the dollar amounts of transactions. 


The second standard of fieldwork requires the auditor to obtain an understanding of the 
entity Apagou PDF Ankhancerontl, to assess the risk of material 
misstatement in the client’s financial statements. Chapter 8 described how the auditor 
performs procedures to understand the client’s business and industry to assess the risk of 
material misstatement. Chapter 9 further described how auditors perform procedures to 
assess inherent risk and control risk, while Chapter 10 illustrated how auditors perform 
procedures to obtain an understanding of internal control to assess control risk. Collec- 
tively, procedures performed to obtain an understanding of the entity and its environment, 
including internal controls, represent the auditor’s risk assessment procedures. 

Risk assessment procedures are performed to assess the risk of material misstate- 
ment in the financial statements. The auditor performs tests of controls, substantive 
tests of transactions, analytical procedures, and tests of details of balances in response to 
the auditor’s assessment of the risk of material misstatements. The combination of these 
four types of further audit procedures provides the basis for the auditor’s opinion, as 
illustrated by Figure 13-1. 

A major part of the auditor’s risk assessment procedures are done to obtain an 
understanding of internal control. Procedures to obtain an understanding of internal 
control were studied in Chapter 10 and focus on both the design and implementation of 
internal control and are used to assess control risk for each transaction-related audit 
objective. 


The auditor’s understanding of internal control is used to assess control risk for each 
transaction-related audit objective. Examples are assessing the accuracy objective for 
sales transactions as low and the occurrence objective as moderate. When control 
policies and procedures are believed to be effectively designed, the auditor assesses 
control risk at a level that reflects the relative effectiveness of those controls. To obtain 
sufficient appropriate evidence to support that assessment, the auditor performs tests 
of controls. 
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eS Further Audit Procedures and the Audit Risk Model 
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Tests of controls, either manual or automated, may include the following types of 
evidence. (Note that the first three procedures are the same as those used to obtain an 
understanding of internal control.) 

* Make inquiries of appropriate client personnel 

* Examine documents, records, and reports 

* Observe control-related activities 

* Reperform client procedures 


Auditors perform a system walkthrough as part of procedures to obtain an under- 
standing to help them determine whether controls are in place. The walkthrough is 
normally applied to one or a few transactions and follows that transaction through the 
entire process. For example, the auditor may select_one sales transaction for a system 
walkthrough of the credit approvahkbpag @nRRDE thE RNAS EU rocess 
from initiation of the sales transaction through the granting of credit. 

Tests of controls are also used to determine whether these controls are effective and 
usually involve testing a sample of transactions. As a test of the operating effectiveness 
of the credit approval process, for example, the auditor might examine a sample of 50 
sales transactions from throughout the year to determine whether credit was granted 
before the shipment of goods. Procedures to obtain an understanding of internal 
control generally do not provide sufficient appropriate evidence that a control is 
operating effectively. An exception may apply for automated controls because of their 
consistent performance. The auditor’s procedures to determine whether the automated 
control has been implemented may also serve as the test of that control, if the auditor 
determines there is minimal risk that the automated control has been changed since the 
understanding was obtained. Then, no additional tests of controls would be required. 
The amount of additional evidence required for tests of controls depends on two things: 

1. The extent of evidence obtained in gaining the understanding of internal control 

2. The planned reduction in control risk 


Figure 13-2 (p. 406) shows the role of tests of controls in the audit of the sales and 
collection cycle relative to other tests performed to provide sufficient appropriate evi- 
dence for the auditor’s opinion. Note the unshaded circles with the words “Audited by 
TOC.” For simplicity, we make two assumptions: Only sales and cash receipts trans- 
actions and three general ledger balances make up the sales and collection cycle and the 
beginning balances in cash and accounts receivable were audited in the previous year 
and are considered correct. 

If auditors verify that sales and cash receipts transactions are correctly recorded in the 
accounting records and posted to the general ledger, they can conclude that the ending 
balances in accounts receivable and sales are correct. (Cash disbursements transactions will 
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have to be audited before the auditor can reach a conclusion about the ending balance in the 
cash “apags wp preppy arice ing of transactions is to perform tests 
of controts. ntrols are in place over salés and Cash receipts transactions, the auditor can 
perform tests of controls to determine whether the six transaction-related audit objectives 
are being met for that cycle. Substantive tests of transactions, which we will examine in 
the next section, also affect audit assurance for sales and cash receipts transactions. 

To illustrate typical tests of controls, let’s return to the control risk matrix for Hillsburg 
Hardware Co. in Figure 10-5 (p. 309). For each of the 11 controls included in Figure 10-5, 
Table 13-1 identifies a test of control that might be performed to test its effectiveness. 


Substantive tests are procedures designed to test for dollar misstatements (often called 
monetary misstatements) that directly affect the correctness of financial statement 
balances. Auditors rely on three types of substantive tests: substantive tests of trans- 
actions, substantive analytical procedures, and tests of details of balances. 

Substantive tests of transactions are used to determine whether all six transaction- 
related audit objectives have been satisfied for each class of transactions. Two of those 
objectives for sales transactions are recorded sales transactions exist (occurrence 
objective) and existing sales transactions are recorded (completeness objective). See 
Chapter 6, pages 156-158 for the six transaction-related audit objectives. 

When auditors are confident that all transactions were correctly recorded in the 
journals and correctly posted, considering all six transaction-related audit objectives, 
they can be confident that general ledger totals are correct. 

Figure 13-2 illustrates the role of substantive tests of transactions in the audit of the 
sales and collection cycle by lightly shaded circles with the words “Audited by STOT.” 
Observe that both tests of controls and substantive tests of transactions are performed 
for transactions in the cycle, not on the ending account balances. The auditor verifies the 
recording and summarizing of sales and cash receipts transactions by performing 
substantive tests of transactions. Figure 13-2 shows one set of tests for sales and another 
for cash receipts. 
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I Illustration of Tests of Controls 









































Illustrative Key Controls Typical Tests of Controls 
Credit is approved automatically by the computer Examine a sample of sales invoices and compare customer order to authorized 
by comparison to authorized credit limits (C1). credit limit (reperformance). 
Recorded sales are supported by authorized shipping Examine a sample of duplicate sales invoices to determine that each one is 
documents and approved customer orders (C2). supported by an authorized shipping document and approved 
customer order (documentation). 
Separation of duties exists among billing, recording Observe whether personnel responsible for handling cash have no accounting 
of sales, and handling of cash receipts (C3). responsibilities and inquire as to their duties (observation and inquiry). 
Shipping documents are electronically forwarded to Observe whether shipping documents are forwarded daily to billing and 
billing daily and are billed the subsequent day (C4). observe when they are billed (observation). 
Shipping documents are prenumbered and Account for a sequence of shipping documents and trace each to the sales 
accounted for weekly (C5). journal (documentation and reperformance). 
Batch totals of quantities shipped are compared with Examine a sample of daily batches, recalculate the shipping quantities, and 
quantities billed (C6). trace totals to reconciliation with input reports (reperformance). 
Unit selling prices are obtained from the price list Examine a sample of sales invoices and agree prices to authorized computer 
master file of approved prices (C7). price list. Review changes to price file throughout the year for proper 
approval (reperformance and documentation). 
Sales transactions are internally verified (C8). Examine documents for internal verification (documentation). 
Statements are mailed to customers each month (C9). Observe whether statements are mailed for 1 month and inquire about who 
is responsible for mailing the statements (observation and inquiry). 
Computer automatically posts transactions to the Use audit software to trace postings from the batch of sales transactions to 
accounts receivable subsidiary records and to the the subsidiary records and general ledger (reperformance). 
general ledger (C10). 
Accounts receivable master file is reconciled to the Examine evidence of reconciliation for test month, and test accuracy of 
general ledger on a monthly basis (C11). reconciliation (documentation and reperformance). 








Auditors can perform tests of controls separately from all other tests, but it’s often 
more efficient to do them at the same time as substantive tests of transactions. For 
example, auditors can usually apply tests of controls involving documentation and 
reperformance to the same transactions tested for monetary misstatements. (Reperfor- 
mance simultaneously provides evidence about both controls and monetary correctness. ) 
In the rest of this book, we will assume that tests of controls and substantive tests of 
transactions are done at the same time. 


As we first discussed in Chapter 7, analytical procedures involve comparisons of recorded 
amounts to expectations developed by the auditor. Auditing standards require that they 
be done during planning and completing the audit. Although not required, analytical 
procedures may also be performed to audit an account balance. The two most important 
purposes of analytical procedures in the audit of account balances are to: 


1. Indicate possible misstatements in the financial statements 
2. Provide substantive evidence 


Analytical procedures done during planning typically differ from those done in the 
testing phase. Even if, for example, auditors calculate the gross margin during planning, 
they probably do it using interim data. Later, during the tests of the ending balances, 
they will recalculate the ratio using full-year data. If auditors believe that analytical 
procedures indicate a reasonable possibility of misstatement, they may perform addi- 
tional analytical procedures or decide to modify tests of details of balances. 


Analytical Procedures 
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Tests of 
Details of Balances 


Summary of 
Types of Tests 


When the auditor develops expectations using analytical procedures and concludes 
that the client’s ending balances in certain accounts appear reasonable, certain tests of details 
of balances may be eliminated or sample sizes reduced. Auditing standards state that 
analytical procedures are a type of substantive test (referred to as substantive analytical pro- 
cedures), when they are performed to provide evidence about an account balance. The 
extent to which auditors may be willing to rely on substantive analytical procedures in 
support of an account balance depends on several factors, including the precision of the 
expectation developed by the auditor, materiality, and the risk of material misstatement. 

Figure 13-2 (p. 406) illustrates the role of substantive analytical procedures in the 
audit of the sales and collection cycle by the dark shaded circles with the words “Audited 
by AP” Observe that the auditor performs substantive analytical procedures on sales and 
cash receipts transactions, as well as on the ending balances of the accounts in the cycle. 


Tests of details of balances focus on the ending general ledger balances for both balance 
sheet and income statement accounts. The primary emphasis in most tests of details of 
balances is on the balance sheet. Examples include confirmation of customer balances 
for accounts receivable, physical examination of inventory, and examination of vendors’ 
statements for accounts payable. Tests of ending balances are essential because the evi- 
dence is usually obtained from a source independent of the client, which is considered 
highly reliable. Much like for transactions, the auditor’s tests of details of balances must 
satisfy all balance-related audit objectives for each significant balance sheet account. 
These objectives were introduced in Chapter 6 and are shown on pages 158-160. 

Figure 13-2 illustrates the role of tests of details of balances by the circles with half 
dark and half light shading and the words “Audited by TDB.” Auditors perform detailed 
tests of the ending balances for sales and accounts receivable, including procedures such 
as confirmation of account receivable balances and sales cutoff tests. The extent of these 
tests depends on the results of tests of controls, substantive tests of transactions, and 


substaytive age BOE. fo har accounts. 
TAR ces AREER onetary correctness of the accounts 


they relate to and therefore are nben tests. For example, confirmations test for 
monetary misstatements in accounts receivable and are therefore substantive tests. 
Similarly, counts of inventory and cash on hand are also substantive tests. 


Figure 13-2 summarizes how auditors respond to the risks of material misstatements 
identified through risk assessment procedures by using the four types of further audit 
procedures to obtain audit assurance in the audit of the sales and collection cycle. Tests 
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of controls help auditors evaluate whether controls over transactions in the cycle are 
sufficiently effective to support the reduced assessment of control risk, and thereby 
allow reduced substantive testing. Tests of controls also form the basis for the auditor’s 
report on internal control over financial reporting for larger public companies. 
Substantive tests of transactions are used to verify transactions recorded in the journals 
and posted in the general ledger. Analytical procedures emphasize the overall reason- 
ableness of transactions and the general ledger balances. Tests of details of balances 
emphasize the ending balances in the general ledger. 

By combining the types of audit tests shown in Figure 13-2, the auditor obtains a 
higher overall assurance for transactions and accounts in the sales and collection cycle 
than the assurance obtained from any one test. To increase overall assurance for the 
cycle, the auditor can increase the assurance obtained from any one of the tests. 


SELECTING WHICH TYPES OF TESTS TO PERFORM 


OBJECTIVE 13-2 


Typically, auditors use all five types of tests when performing an audit of the financial 
statements, but certain types may be emphasized, depending on the circumstances. 
Recall that risk assessment procedures are required in all audits to assess the risk of 
material misstatement while the other four types of tests are performed in response to 
the risks identified to provide the basis for the auditor’s opinion. Note also that only 
risk assessment procedures, especially procedures to obtain an understanding of 
controls, and tests of controls are performed in an audit of internal control over 
financial reporting. 

Several factors influence the auditor’s choice of the types of tests to select, including 
the availability of the eight types of evidence, the relative costs of each type of test, the 
effectiveness of internal controls, and inherent risks. Only the first two are discussed 


further because the last two were di APAG@niP WB ters nhancer 


Each of the four types of further audit procedures involves only certain types of 
evidence (confirmation, documentation, and so forth). Table 13-2 summarizes the rela- 
tionship between further audit procedures and types of evidence. We can make several 
observations about the table: 


* More types of evidence, six in total, are used for tests of details of balances than 
for any other type of test. 

* Only tests of details of balances involve physical examination and confirmation. 

* Inquiries of the client are made for every type of test. 

* Documentation is used in every type of test except analytical procedures. 

* Reperformance is used in every type of test except analytical procedures. 
Auditors may reperform a control as part of a transaction walkthrough or to test 
a control that is not supported by sufficient documentary evidence. 

* Recalculation is used to verify the mathematical accuracy of transactions when 
performing substantive test of transactions and account balances when per- 
forming tests of details of balances. 


When auditors must decide which type of test to select for obtaining sufficient appro- 
priate evidence, the cost of the evidence is an important consideration. The types of 
tests are listed below in order of increasing cost: 


» Analytical procedures 

* Risk assessment procedures, including procedures to obtain an understanding 
of internal control 

* Tests of controls 

* Substantive tests of transactions 

* Tests of details of balances 





Select the appropriate types 
of audit tests. 





Availability of 
Types of Evidence 
for Further 

Audit Procedures 


Relative Costs 
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Relationship Between 
Tests of Controls and 
Substantive Tests 


Analytical procedures are the least costly because of the relative ease of making 
calculations and comparisons. Often, considerable information about potential mis- 
statements can be obtained by simply comparing two or three numbers. 

Risk assessment procedures, including procedures to obtain an understanding of 
internal control, are not as costly as other audit tests because auditors can easily make 
inquiries and observations and perform planning analytical procedures. Also, examining 
such things as documents summarizing the client’s business operations and processes 
and management and governance structure are relatively cheaper than other audit tests. 

Because tests of controls also involve inquiry, observation, and inspection, their 
relative costs are also low compared to substantive tests. However, tests of controls are 
more costly relative to the auditor’s risk assessment procedures due to a greater extent 
of testing required to obtain evidence that a control is operating effectively, especially 
when those tests of controls involve reperformance. Often, auditors can perform a large 
number of tests of controls quickly using audit software. Such software can test 
controls in clients’ computerized accounting systems, such as in computerized 
accounts receivable systems that automatically authorize sales to existing customers by 
comparing the proposed sales amount and existing accounts receivable balance with 
the customer’s credit limit. 

Substantive tests of transactions cost more than tests of controls that do not 
include reperformance because the former often require recalculations and tracings. In 
a computerized environment, however, the auditor can often perform substantive tests 
of transactions quickly for a large sample of transactions. 

Tests of details of balances almost always cost considerably more than any of the 
other types of procedures because of the cost of procedures such as sending confirma- 
tions and counting inventories. Because of the high cost of tests of details of balances, 
auditors usually try to plan the audit to minimize their use. 

Naturally, the cost of each type of evidence varies in different situations. For 
camp age CPOE EN tee @aginventory (a substantive test of the 
details of the Thventory balance) often depends on the type and dollar value of the 
inventory, its location, and the number of different items. 


To better understand tests of controls and substantive tests, let’s examine how they 
differ. An exception in a test of control only indicates the likelihood of misstatements 
affecting the dollar value of the financial statements, whereas an exception in a 
substantive test of transactions or a test of details of balances is a financial statement 
misstatement. Exceptions in tests of controls are called control test deviations. 

From Chapter 10, you may recall the three levels of control deficiencies: deficiencies, 
significant deficiencies, and material weaknesses. Auditors are most likely to believe 
material dollar misstatements exist in the financial statements when control test 
deviations are considered to be significant deficiencies or material weaknesses. Auditors 
should then perform substantive tests of transactions or tests of details of balances to 
determine whether material dollar misstatements have actually occurred. 

Assume that the client’s controls require an independent clerk to verify the quantity, 
price, and extension of each sales invoice, after which the clerk must initial the duplicate 
invoice to indicate performance. A test of control audit procedure is to inspect a sample 
of duplicate sales invoices for the initials of the person who verified the information. If a 
significant number of documents lack initials, the auditor should consider implications 
for the audit of internal control over financial reporting and follow up with substantive 
tests for the financial statement audit. This can be done by extending tests of duplicate 
sales invoices to include verifying prices, extensions, and footings (substantive tests of 
transactions) or by increasing the sample size for the confirmation of accounts receivable 
(substantive test of details of balances). Even though the control is not operating 
effectively, the invoices may still be correct, especially if the person originally preparing 
the sales invoices did a conscientious and competent job. 
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On the other hand, if no documents or only a few of them are missing initials, the 
control will be considered effective and the auditor can therefore reduce substantive 
tests of transactions and tests of details of balances. However, some reperformance and 
recalculation substantive tests are still necessary to provide the auditor assurance that 
the clerk did not initial documents without actually performing the control procedure 
or performed it carelessly. Because of the need to complete some reperformance and 
recalculation tests, many auditors perform them as a part of the original tests of controls. 
Others wait until they know the results of the tests of controls and then determine the 
total sample size needed. 


Like tests of controls, analytical procedures only indicate the likelihood of misstatements 
affecting the dollar value of the financial statements. Unusual fluctuations in the 
relationships of an account to other accounts, or to nonfinancial information, may 
indicate an increased likelihood that material misstatements exist without necessarily 
providing direct evidence of a material misstatement. When analytical procedures 
identify unusual fluctuations, auditors should perform substantive tests of transactions 
or tests of details of balances to determine whether dollar misstatements have actually 
occurred. If the auditor performs substantive analytical procedures and believes that the 
likelihood of material misstatement is low, other substantive tests can be reduced. For 
accounts with small balances and only minimal potential for material misstatements, 
such as many supplies and prepaid expense accounts, auditors often limit their tests to 
substantive analytical procedures if they conclude the accounts are reasonably stated. 


There is a trade-off between tests of controls and substantive tests. During planning, 
auditors decide whether to assess control risk below the maximum. When they do, they 
must then perform tests of controls to determine whether the assessed level of control 
risk is supported. (They must always perform test of controls in an audit of internal 
control over financial reporting.) If tests of controls support the control risk assess- 
ment, planned detection risk in Osk PDE! isHitnx han @e ranned 
substantive tests can therefore be reduced. Figure 13-3 shows the relationship between 
substantive tests and control risk assessment (including tests of controls) at differing 
levels of internal control effectiveness. 


Audit Assurance from Substantive Tests and Tests of Controls at 
Different Levels of Internal Control Effectiveness 
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The shaded area in Figure 13-3 (p. 411) is the maximum assurance obtainable from 
control risk assessment and tests of controls. At any point to the left of point A, assessed 
control risk is 1.0 because the auditor initially evaluated internal controls as ineffective 
based on the performance of risk assessment procedures. Any point to the right of point B 
results in no further reduction of control risk because the CPA firm has established a 
minimum assessed control risk. Notice in Figure 13-3 that regardless of the level of audit 
assurance obtained from control risk assessment and tests of controls, an audit of finan- 
cial statements always requires some substantive procedures. Because the audit of financial 
statements and the audit of internal control over financial reporting are integrated, 
accelerated filer public company audits will most likely be represented by point B. 

The auditor’s understanding of internal control performed as part of risk assess- 
ment procedures provides the basis for the auditor’s initial assessment of control risk. 
Assuming that the auditor determines that the design of internal control is effective and 
the controls are implemented, the auditor selects a point within the shaded area of Figure 
13-3 that is consistent with the assessed control risk the auditor decides to support with 
tests of controls. Assume the auditor contends that internal control effectiveness is at 
point C. Tests of controls at the C, level will be extensive to support the low assessment of 
control risk. The auditor may then determine through the performance of tests of 
controls that the initial low assessment of control risk at point C is not supported and 
that internal control is not operating effectively. Then, the auditor’s revised control risk 
assessment would be at the maximum (point C,) and audit assurance will be obtained 
from substantive tests. Any point between the two, such as C,, represents situations 
where the audit assurance obtained from tests of controls is less than the maximum level 
of assurance represented by point C,. If C, is selected, the audit assurance from tests of 
controls is C, — C, and from substantive tests is C— C,. The auditor will likely select C,, 
C,, or C, based on the relative cost of tests of controls and substantive tests. 
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OBJECTIVE 13-3 





Understand how information 
technology affects audit 
testing. 





Auditing standards provide guidance for auditors of entities that transmit, process, main- 
tain, or access significant information electronically. Examples of electronic evidence 
include records of electronic fund transfers and purchase orders transmitted through 
electronic data interchange (EDI). Evidence of the performance of automated controls, 
such as the computer’s comparison of proposed sales orders to customer credit limits, 
may also only be in electronic form. 

The standards recognize that when a significant amount of audit evidence exists in 
electronic form, it may not be practical or possible to reduce detection risk to an 
acceptable level by performing only substantive tests. For example, the potential for 
improper initiation or alteration of information may be greater if information is 
maintained only in electronic form. In these circumstances, the auditor should perform 
tests of controls to gather evidence in support of an assessed level of control risk below 
maximum for the affected financial statement assertions. Although some substantive 
tests are still required, the auditor can significantly reduce substantive tests if the results 
of tests of controls support the effectiveness of controls. In the audit of a larger public 
company, computer-performed controls (these are called automated controls) must be 
tested if the auditor considers them to be key controls for reducing the likelihood of 
material misstatements in the financial statements. 

Because of the inherent consistency of IT processing, however, the auditor may be 
able to reduce the extent of testing of an automated control. For example, a software- 
based control is almost certain to function consistently unless the program is changed. 
Once auditors determine an automated control is functioning properly, they can focus 
subsequent tests on assessing whether any changes have occurred that will limit the 
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effectiveness of the control. Such tests might include determining whether any changes 
have occurred to the program and whether these changes were properly authorized 
and tested prior to implementation. This approach leads to significant audit effi- 
ciencies when the auditor determines that automated controls tested in the prior year’s 
audit have not been changed and continue to be subject to effective general controls. 

To test automated controls or data, the auditor may need to use computer-assisted 
audit techniques or use reports produced by IT to test the operating effectiveness of IT 
general controls, such as program change controls and access controls. In many cases, 
testing of automated controls may be performed by IT audit specialists. When auditors 
test manual controls that rely on IT-generated reports, they must consider both the 
effectiveness of management’s review and automated controls over the accuracy of 
information in the report. 


EVIDENCE MIX 


The choice of which types of tests to use and how extensively they need to be performed OBJECTIVE 13-4 
can vary widely among audits for differing levels of internal control effectiveness and 





Understand the concept of 


inherent risks. Even within a given audit, variations may occur from cycle to cycle. To At CPATRe GG LIne 
obtain sufficient appropriate evidence in response to risks identified through risk should be varied in different 
assessment procedures, auditors employ a combination of the four remaining types of circumstances. 





tests. This combination is often called the evidence mix, which is illustrated in Table 
13-3 for four different audits. In each case, assume that sufficient appropriate evidence 
was accumulated. In each audit, you should be able to determine the description of the 
client from the evidence mix in Table 13-3. 


Analysis of Audit 1 This client is a large company with sophisticated internal controls 
and low inherent risk. Therefore, “Apay “SHR RASA. ce ls and 
relies heavily on the client’s interrfaf£0 to reduce substantive tesTs.-EXtensive 
substantive analytical procedures are also performed to reduce other substantive tests. 
Substantive tests of transactions and tests of details of balances are therefore 
minimized. Because of the emphasis on tests of controls and substantive analytical 
procedures, this audit can be done relatively inexpensively. This audit likely represents 


the mix of evidence used in the integrated audit of a public company’s financial 
statements and internal control over financial reporting. 


Analysis of Audit 2 This company is medium sized, with some controls and a few 
inherent risks. The auditor has decided to do a medium amount of testing for all types 
of tests except substantive analytical procedures, which will be done extensively. More 
extensive testing will be required if specific inherent risks are discovered. 




















TABLE 13-3 Variations in Evidence Mix 
Substantive Tests of 
Tests Tests of Analytical Details of 
of Controls Transactions Procedures Balances 
Audit 1 E S E S 
Audit 2 M M E M 
Audit 3 N E M E 
Audit 4 M E E E 
b a4 











E = Extensive amount of testing; M= Medium amount of testing; S = Small amount of testing; N = No testing. 
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Analysis of Audit 3 This company is medium sized but has few effective controls 
and significant inherent risks. Perhaps management has decided that better internal 
controls are not cost effective. Because of the lack of effective internal control, we can 
assume this company is probably a nonpublic company. No tests of controls are done 
because reliance on internal controls is inappropriate when controls are insufficient for 
a nonpublic company. The auditor emphasizes tests of details of balances and sub- 
stantive tests of transactions, but some substantive analytical procedures are also done. 
Substantive analytical procedures are usually performed to reduce other substantive 
tests because they provide evidence about the likelihood of material misstatements. If 
the auditor already expects to find material misstatements in the account balances, 
additional analytical procedures are not cost effective. The cost of the audit is likely to 
be relatively high because of the amount of detailed substantive testing. 


Analysis of Audit 4 The original plan on this audit was to follow the approach used 
in Audit 2. However, the auditor likely found extensive control test deviations and 
significant misstatements while performing substantive tests of transactions and 
substantive analytical procedures. Therefore, the auditor concluded that the internal 
controls were not effective. Extensive tests of details of balances are performed to offset 
the unacceptable results of the other tests. The cost of this audit is higher because tests 
of controls and substantive tests of transactions were performed but can not be used to 
reduce tests of details of balances. 


DESIGN OF THE AUDIT PROGRAM 


OBJECTIVE 13-5 





Design an audit program. 





Tests of Controls 
and Substantive 
Tests of Transactions 


After the auditor uses risk assessment procedures to determine the appropriate 
emphasis on each of the other four types of tests, the specific audit procedures for each 
type o&tgst, 6” B igane cl. EK audi fa are then combined to form the 
abee \ ag pi) Pai ; Han ees in-charge auditor recommends the 
evidence mix to the engagement manager. After the evidence mix is approved, the in- 
charge prepares the audit program or modifies an existing program to satisfy all audit 
objectives, considering such things as materiality, evidence mix, inherent risk, control 
risk, and any identified fraud risks, as well as the need for an integrated audit for larger 
public companies. The in-charge is also likely to get approval from the manager before 
performing the audit procedures or delegating their performance to an assistant. 

Let’s focus on designing audit programs to satisfy transaction-related and balance- 
related audit objectives. Keep in mind the auditor will also design audit programs to 
satisfy presentation and disclosure-related audit objectives. In addition to the section 
of the audit program that contains the risk assessment procedures performed in 
planning, the audit program for most audits is designed in three additional parts: tests 
of controls and substantive tests of transactions, substantive analytical procedures, and 
tests of details of balances. 

Each transaction cycle will likely be evaluated using a separate set of sub-audit 
programs. In the sales and collection cycle, for example, the auditor might use: 


» A test of controls and substantive tests of transactions audit program for sales 
and cash receipts 

» A substantive analytical procedures audit program for the entire cycle 

* Tests of details of balances audit programs for cash, accounts receivable, bad 
debt expense, allowance for uncollectible accounts, and miscellaneous accounts 
receivable 


The tests of controls and substantive tests of transactions audit program normally 
includes a descriptive section documenting the understanding of internal control 
obtained during the performance of risk assessment procedures. The program is also 
likely to include a description of the procedures performed to obtain an understanding 
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Methodology for Designing Tests of Controls and Substantive 
Tests of Transactions 


Understand 
internal control 
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Assess planned 
control risk 
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transaction-related 
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*Extent of testing of controls is determined by planned reliance on controls. For public companies 
required to have an audit of internal control, testing must be sufficient to issue an opinion on 
internal control over financial reporting. 











of internal control and a descriptin APaG@ssP DE opEnhancenuditor 
uses this information to develop the tests of controls and substantive tests of trans- 
actions audit program. Figure 13-4 illustrates the methodology used to design these 
tests. (We previously discussed the steps in the first three boxes of Figure 13-4 on pages 
302-315 of Chapter 10.) The audit procedures include both tests of controls and 
substantive tests of transactions, which vary depending on assessed control risk. When 
controls are effective and control risk is assessed as low, auditors put heavy emphasis on 
tests of controls. Some substantive tests of transactions will also be included. If control 
risk is assessed at maximum, only substantive tests of transactions will be used, 
assuming the audit is of a smaller public company or a nonpublic company. 


Audit Procedures When designing tests of controls and substantive tests of trans- 
actions, auditors emphasize satisfying the transaction-related audit objectives developed 
in Chapter 6. Auditors follow a four-step approach to reduce assessed control risk. 


1. Apply the transaction-related audit objectives to the class of transactions being 
tested, such as sales. 

2. Identify key controls that should reduce control risk for each transaction- 
related audit objective. 

3. Develop appropriate tests of controls for all internal controls that are used to 
reduce the preliminary assessment of control risk below maximum (key controls). 

4. For potential types of misstatements related to each transaction-related audit 
objective, design appropriate substantive tests of transactions, considering 
deficiencies in internal control and expected results of the tests of controls in 
step 3. 


Figure 13-5 (p. 416) summarizes this four-step approach to designing tests of 
controls and substantive tests of transactions. 
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Because substantive analytical procedures are relatively inexpensive, many auditors 
perform them on all audits. Analytical procedures performed during substantive 
testing, such as for the audit of accounts receivable, are typically more focused and 
more extensive than those done as part of planning. The auditor is likely to use dis- 
aggregated data to increase the precision of the auditor’s expectations. During planning, 
the auditor might calculate the gross margin percentage for total sales, while during 
substantive testing of accounts receivable, the auditor might calculate gross margin 
percentage by month or by line of business, or possibly both. Analytical procedures 
calculated using monthly amounts will typically be more effective in detecting 
misstatements than those calculated using annual amounts, and comparisons by line of 
business will usually be more effective than companywide comparisons. 

If sales and accounts receivable are based on predictable relationships with 
nonfinancial data, the auditor often uses that information for analytical procedures. For 
example, if revenue billings are based on the number of hours professionals charge to 
clients, such as in law firms and other organizations that provide services, the auditor 
can estimate total revenue by multiplying hours billed by the average billing rate. 

When the auditor plans to use analytical procedures to provide substantive assur- 
ance about an account balance, the data used in the calculations must be considered 
sufficiently reliable. This is true for all data, especially nonfinancial data. For example, 
if auditors estimate total revenue using hours billed and the average billing rate, they 
must be confident that both numbers are reasonably reliable. 


To design tests of details of balances audit procedures, auditors use a methodology 
oriented to the balance-related audit objectives we covered in Chapter 6 (pp. 158-160). If 
the auditor is verifying accounts receivable, for example, the planned audit procedures 
must be sufficient to satisfy each of the balance-related audit objectives. In planning tests 
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SEC SANCTIONS Norman Stumacher was the auditor from April obligated to pay for the products until they were 
2001 to February 2005 for Video Without sold to third party customers. 
AUDITOR Boundaries, Inc. (Video), a consumer electronics Stumacher did not create any audit programs 
FOR LACK OF company based in Fort Lauderdale, Florida. Video or other documentation to support his unqualified 
recorded fictitious revenues and assets through opinions on Video's financial statements. As a 
AUDIT PROGRAM improper revenue recognition and other result of his improper professional conduct and 
accounting schemes. These methods included violations of Rule 10b-5, Stumacher was prohibited 
recognizing revenue for services that were never from acting as an accountant before the SEC. 
provided in return for shares of stock in a Source: Securities and Exchange Commission 
company that went bankrupt. Video also recorded Accounting and Auditing Enforcement Release No. 
revenue for shipments to a distributor's 2883, September 23, 2008 (http://www.sec.gov/ 
warehouse, although the distributor was not litigation). 





of details of balances audit procedures to satisfy these objectives, many auditors follow a 
methodology such as the one shown in Figure 13-6 for accounts receivable. The design of 
these procedures is normally the most difficult part of the entire planning process 
because it is subjective and requires considerable professional judgment. 

Let’s discuss the key decisions in designing tests of details of balances audit 
procedures as shown in Figure 13-6. 


Identify Client Business Risks Affecting Accounts Receivable As part of gaining 
an understanding of the client’s business and industry, the auditor identifies and 
evaluates significant client business risks to determine whether they result in increased 
risk of material misstatements in the financial statements. If any of the identified client 
business risks affect accounts receivable, they should be incorporated in the auditor’s 
evaluation of inherent risk or control risk. These risks will then affect the appropriate 
extent of evidence. 
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Methodology for Designing Tests of Details of Balances— 
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Set Tolerable Misstatement and Assess Inherent Risk for Accounts Receivable 
Auditors must decide the preliminary judgment about materiality for the audit as a 
whole and then allocate the total to account balances, to establish tolerable misstatement 
for each significant balance. For a lower tolerable misstatement, more testing of details is 
required, and vice versa. Some auditors allocate tolerable misstatement to individual 
balance-related audit objectives, but most do not. 

Inherent risk is assessed by identifying any aspect of the client’s history, environ- 
ment, or operations that indicates a high likelihood of misstatement in the current 
year’s financial statements. Considerations affecting inherent risk that may apply to 
accounts receivable include makeup of accounts receivable, nature of the client’s 
business, initial engagement, and other inherent risk factors discussed in Chapter 9. An 
account balance for which inherent risk has been assessed as high will result in more 
evidence accumulation than for an account with low inherent risk. 

Inherent risk also can be extended to individual balance-related audit objectives. 
For example, adverse economic conditions in the client’s industry may make the 
auditor conclude that a high risk of uncollectible accounts receivable (realizable value 
objective) exists. Inherent risk can still be low for all other objectives. 


Assess Control Risk for the Sales and Collection Cycle The methodology for 
evaluating control risk will be applied to both sales and cash receipts in the audit of 
accounts receivable. Effective controls will reduce control risk and, along with it, the 
amount of evidence required for substantive tests of transactions and tests of details of 
balances. Inadequate controls will increase the substantive evidence needed. 


Design and Perform Tests of Controls and Substantive Tests of Transactions 
for the Sales and Collection Cycle Tests of controls and substantive tests of 
transactions are designed with the expectation that certain results will be obtained. 
These predicted results affect the design of tests of details of balances. For example, the 


apa oO PDF“ EAhane CS a when control risk is assessed as 
low. Thiswill permit Tess extensive substantive testing of accounts receivable balances. 
Design and Perform Analytical Procedures for Accounts Receivable Balance 
Auditors perform substantive analytical procedures for an account such as accounts 
receivable for two purposes: to identify possible misstatements in the account balance 


and to reduce detailed audit tests. The results of substantive analytical procedures 
directly affect the extent of tests of details of balances. 


Design Tests of Details of Accounts Receivable Balance to Satisfy Balance- 
Related Audit Objectives The planned tests of details of balances include audit 
procedures, sample size, items to select, and timing. Procedures must be selected and 
designed for each account and each balance-related audit objective within each account. 

A difficulty auditors face in designing tests of details of balances is the need to 
predict the outcome of the tests of controls, substantive tests of transactions, and 
substantive analytical procedures before they are performed. This is necessary because 
the auditor should design tests of details of balances during the planning phase, but the 
appropriate design depends on the outcome of the other tests. In planning tests of 
details of balances, the auditor usually predicts few or no exceptions will occur in tests 
of controls, substantive tests of transactions, and substantive analytical procedures. If 
the results of the tests of controls, substantive tests of transactions, and substantive 
analytical procedures are not consistent with the predictions, auditors will need to 
change the tests of details of balances as the audit progresses. 

Figure 13-7 summarizes the discussion about the approach to designing tests of 
details of balances applied to accounts receivable. The light shaded boxes on the left side 
of the figure correspond to the design of tests of controls and substantive tests of trans- 
actions, as presented in Figure 13-5 (p. 416). Figure 13-7 builds on Figure 13-5 by also 
showing how tests of controls and substantive tests of transactions affect the design of 
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the tests of details of balances. Other factors affecting that decision are shown in the 
darker shaded boxes on the right side of the figure. 
One of the most challenging parts of auditing is properly applying the factors that 
affect tests of details of balances. Each of the factors is subjective. Moreover, the impact 
of each factor on tests of details of balances is equally subjective. For example, if 
inherent risk is reduced from medium to low, there is agreement that tests of details of 
balances can be reduced. Auditors need to use considerable professional judgment to 
decide the specific effects of such a change on audit procedures, sample size, items to 
select, and timing. 
The various planning activities we discussed in Chapters 6 through 13 are applied at Level of 
P 8 P 8 PP 


different levels of disaggregation, depending on the nature of the activity. Figure 13-8 
(p. 420) shows the primary planning activities and the levels of disaggregation normally 
applied. These levels of disaggregation range from the overall audit to the balance- 
related audit objective for each account. For example, risk assessment procedures 
related to obtaining background information about the client’s business and industry 
pertain to the overall audit. Auditors will first use that information in assessing 
acceptable audit risk for the engagement as whole. They will then use information 
about the client and industry obtained through risk assessment procedures to assess 
inherent risk for specific audit objectives. As the audit progresses, they will likely use 
that information when making decisions about tests of details of balances. Similarly, 
the auditor will first assess the risk of fraud for the overall audit, and later consider 


Disaggregation of 
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whether any fraud risks exist that may affect fraud risk assessments for specific 
accounts and the audit procedures and sample sizes for tests of details of balances for 
accounts that are affected. 


Auditing standards require the auditor to use a written audit program. Table 13-4 shows 
the tests of details of balances segment of an audit program for accounts receivable. The 
format used relates the audit procedures to the balance-related audit objectives. Notice 
that most procedures satisfy more than one objective, and that more than one audit 
procedure is used for each objective. Audit software helps auditors select appropriate 
audit procedures and organize them into an audit program, considering inherent and 
control risk and other planning considerations. Audit procedures can be added or 
deleted as the auditor deems necessary. For most audit procedures, sample size, items to 
select, and timing can also be changed. 
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. 
TABLE 13-4 Tests of Details of Balances Audit Program for Accounts Receivable 


Accounts Receivable 
Balance-Related Audit Objectives 








Sample 
Tests of Size Items 
Details of for Each to Select 
Balances Audit Audit from the Timing of 
Procedures Procedure Population the Test 


Detail tie-in 
Existence 
Completeness 
Accuracy 
Classification 
Realizable value 


Cutoff 
Rights 





>< 


1. Obtain an aged list of Trace 20 items; Random I 
receivables: trace accounts to foot 2 pages 
the master file, foot schedule, and all subtotals 
and trace to general ledger. 





2. Obtain an analysis of the All All Vf ye || XE |] XE | 28 X 
allowance for doubtful 
accounts and bad debt 
expense: test accuracy, 
examine authorization for 
write-offs, and trace to 
general ledger. 





3. Obtain direct confirmation 50 10 largest I X XG Xe ex X 
of accounts receivable and 40 random 
perform alternative 
procedures for nonresponses. 





4. Review accounts receivable NA NA Y x x || X¢ || Xx X 
control account for the 
period. Investigate the nature 
of and review support for any 
large or unusual entries or 
any entries not arising from 
normal journal sources. Also 
investigate any significant 
increases or decreases in 
sales toward year-end. 





5. Review receivables for any All All Y X 
that have been assigned 
or discounted. 





6. Investigate collectibility of NA NA Y X 
account balances. 


7. Review lists of balances for All All y; xX xX 
amounts due from related 
parties or employees, credit 
balances, and unusual items, 
as well as notes receivable 
due after 1 year. 





8. Determine that proper cutoff 20 transactions 50% before Ni x 
procedures were applied at for sales and and 50% 
the balance sheet date to cash receipts; after 
ensure that sales, cash 10 for credit year-end 
receipts, and credit memos memos 
have been recorded in the 
correct period. 



































| = Interim; Y = Year-end; NA = Not applicable. 
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The audit program in Table 13-4 (p. 421) was developed after consideration of all 
factors affecting tests of details of balances and is based on several assumptions about 
inherent risk, control risk, and the results of tests of controls, substantive tests of 
transactions, and substantive analytical procedures. As indicated, if those assumptions 
are materially incorrect, the planned audit program will likely need revision. For 
example, analytical procedures performed near the end of the audit can indicate 
potential misstatements for several balance-related audit objectives, requiring a 
revision of the audit plan to gather additional evidence. 


Relationship of 
Transaction-Related 
Audit Objectives to 
Balance-Related and 
Presentation and 
Disclosure-Related 
Audit Objectives 


We discussed earlier that tests of details of balances must be designed to satisfy balance- 
related audit objectives for each account and the extent of these tests can be reduced 
when transaction-related audit objectives have been satisfied by tests of controls or 
substantive tests of transactions. You also need to understand how each transaction- 
related audit objective relates to each balance-related audit objective. Table 13-5 gives 
a general presentation of these relationships and illustrates that, even when all 
transaction-related audit objectives are met, the auditor will still rely primarily on 
substantive tests of balances to meet the following balance-related audit objectives: 
OBJECTIVE 13-6 * Realizable value 

* Rights and obligations 





Compare and contrast 
transaction-related audit 
objectives with balance- 
related and presentation and 
disclosure-related audit 
objectives. 


Additional substantive tests of balances are also likely for the other balance-related 
audit objectives, depending on the results of the tests of controls and substantive tests of 
transactions. 

This chapter emphasizes the relationship between audit procedures performed to 
satisfy transaction-related audit objectives and balance-related audit objectives. The 






































> 
Relationship of Transaction-Related Audit Objectives to Balance-Related Audit Objectives 
Transaction- Balance- 
Related Related 
Audit Audit Nature of 
Objective Objective Relationship Explanation 
Occurrence Existence or Direct There is a direct relationship of the occurrence transaction-related 
completeness audit objective to the existence balance-related audit objective 
if a class of transactions increases the related account balance 
(e.g., sales transactions increase accounts receivable). 

There is a direct relationship of the occurrence transaction-related 
audit objective to the completeness balance-related audit objective 
if a class of transactions decreases the related account balance 
(e.g., cash receipts transactions decrease accounts receivable). 

Completeness Completeness Direct See comments above for existence objective. 
or existence 
Accuracy Accuracy Direct = 
Posting and Detail tie-in Direct - 
summarization 
Classification Classification Direct - 
Timing Cutoff Direct - 

Realizable value None Few internal controls over realizable value are related to classes 
of transactions, but the credit approval process affects the 
extent of tests. 

Rights and None Few internal controls over rights and obligations are related to 

obligations classes of transactions. 
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auditor also performs audit procedures to obtain assurance about the four presen- 
tation and disclosure-related audit objectives described in Chapter 6. The auditor’s 
approach to obtaining evidence related to presentation and disclosure-related audit 
objectives is consistent with the approach described in this chapter. The auditor 
performs tests of controls and substantive procedures to obtain assurance that all 
audit objectives are achieved for information and amounts included in those 


disclosures. 





SUMMARY OF KEY EVIDENCE-RELATED TERMS 


Several evidence-related terms have been used in the past several chapters. To help you 
distinguish and understand each of these terms, we summarize them in Table 13-6, and 
comment briefly on each key evidence-related term. 





Relationship Among Five Key Evidence-Related Terms 





Phases of the 
Audit Process 


Audit Objectives 


Types of Tests 


Evidence Decisions 


Types of Evidence 





Plan and Design an 
Audit Approach 
(Phase 1) 


Risk assessment 
procedures 
* Procedures to 
understand client's 


business and industry 


* Procedures to 
understand internal 
control 

° Planning analytical 
procedures 


° Audit procedures 
* Timing 


Documentation 
Inquiries of client 
Analytical procedures 





Perform Tests 
of Controls and 
Substantive Tests 
of Transactions 
(Phase II) 


Transaction-related audit 


objectives 

° Occurrence 

* Completeness 

° Accuracy 

* Posting and 
summarization 

° Classification 


Procedures to obtain 
an understanding 
and tests of controls 


Substantive tests of 
transactions 


° Audit procedures 
* Sample size 

° Items to select 

° Timing 


* Audit procedures 
° Sample size 
° Items to select 


Documentation 
Observation 
Inquiries of client 
Reperformance 
Recalculation 











* Completeness 

* Accuracy and valuation 

° Classification and 
understandability 


balances 


* Sample size 
Items to select 
* Timing 


° Timing ° Timing 
Perform Analytical Balance-related audit Analytical procedures ° Audit procedures Physical examination 
Procedures and objectives ° Timing Confirmation 
Tests of Details ° Existence Documentation 
of Balances * Completeness Tests of details of ° Audit procedures Inquiries of client 
(Phase III) * Accuracy balances * Sample size Reperformance 
° Classification * Items to select Analytical procedures 
° Cutoff ° Timing Recalculation 
° Detail tie-in 
* Realizable value 
* Rights and obligations 
Complete the Audit Presentation and disclosure- Analytical procedures ° Audit procedures Analytical procedures 
and Issue an related audit objectives ° Timing Documentation 
Audit Report * Occurrence and rights Inquiries of client 
(Phase IV) and obligations Tests of details of ° Audit procedures 
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REVISING 

AUDIT PROGRAMS 
FOR GREATER 
EFFICIENCY 


The audit program should be carefully reviewed 
during audit planning to determine whether any 
audit procedures should be increased or 
eliminated. Deborah Lambert, CPA, advises that 
tisk assessments should affect audit procedures. 
Risk assessments should result in a reduction of 
testing in low-risk areas and greater focus on 
trouble spots. 

Another CPA, Tony Lynn, finds that firms often 
overaudit and don’t know why. Many times, he 


asks the purpose of an audit schedule. The 
auditor often responds, “I don’t know, we've 
always done it that way.” Lynn suggests, “If you 
can't say why you're doing something, you should 
get rid of it” Careful planning and review of the 
audit program can result in significant time 
savings. 

Source: Adapted from an article by Anita Dennis, 


“Best Practices for Audit Efficiency,” Journal of 
Accountancy (September 2000), pp. 65-68. 





Phases of the Audit Process The four phases of the audit process in the first 
column are the primary way that audits are organized, as described in Chapter 6. 
Figure 13-9 shows the key components of these four phases of the audit process. 


Audit Objectives These are the objectives on an audit that must be met before the 
auditor can conclude that any given class of transactions or account balance is fairly 
stated. There are six transaction-related, eight balance-related, and four presentation and 
disclosure-related audit objectives, all of which are listed in Table 13-6 (p. 423). Observe 
that all transaction-related audit objectives are primarily addressed in phase II, balance- 
related audit objectives in phase III, and presentation and disclosure-related audit 
objectives in phase IV. 


Types of Tests The five types of audit tests discussed earlier in the chapter that 
auditors use to determine whether financial statements are fairly stated are included 
in the third column in Table 13-6. Observe that analytical procedures are used in 
Phase III and Phase IV. set 7 sei that planning analytical procedures are required 
to be procedures in Phase I. Recall that 
vnaly BPRS. ureS are BCE require vet, velo Fan of the audit, which is why 
they are included in Phase IV. It may appear unusual to have tests of details of 
balances included in Phase IV. We will explain the nature of the procedures auditors 


use during completing the audit, including meeting the presentation and disclosure- 
related objectives, in Chapter 24. 
Evidence Decisions The four subcategories of decisions the auditor makes in 


accumulating audit evidence are included in the fourth column in Table 13-6. Except 
for analytical procedures, all four evidence decisions apply to each type of test. 


Types of Evidence The eight broad categories of evidence auditors accumulate are 
included in the last column of Table 13-6. The relationship of types of evidence to 
types of tests was summarized in Table 13-2 on page 408. 


SUMMARY OF THE AUDIT PROCESS 


OBJECTIVE 13-7 


Integrate the four phases of 
the audit process. 





Phase I: 
Plan and Design 
an Audit Approach 


424 


Figure 13-9 shows the four phases for the entire audit process, and Table 13-7 (p. 427) 
shows the timing of the tests in each phase for an audit with a December 31 balance 
sheet date. 


Auditors use information obtained from risk assessment procedures related to client 
acceptance and initial planning, understanding the client’s business and industry, 
assessing the client’s business risks, and performing preliminary analytical procedures 
(first four boxes in Figure 13-9) primarily to assess inherent risk and acceptable audit 
risk. Auditors use assessments of materiality, acceptable audit risk, inherent risk, control 
risk, and any identified fraud risks to develop an overall audit plan and audit program. 
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Summary of the Audit Process 





PHASE | 
Plan and design an 
audit approach 






PHASE II 
Perform tests of 
controls and 
substantive tests 
of transactions 





Accept client and perform 
initial planning 








Understand the clients 
business and industry 








Assess client business risk 








Perform preliminary 
analytical procedures 








Set materiality and assess 
acceptable audit risk and 
inherent risk 








Understand internal control 
and assess control risk 








Gather information 
to assess fraud risks 











Develop overall audit plan 
and audit program 

















Plan 
to reduce 
assessed level of 
control 
risk? 













Perform tests of controls* 











Perform substantive tests 
of transactions 











Assess likelihood of misstatements 
in financial statements 








PHASE Ill ae ate 


Perform analytical 
procedures and 
tests of details 

of balances 


High or 


Low Medium wural'aatain 





Perform analytical procedures 





Perform tests of key items 





Perform additional tests 
of details of balances 





ee 


PHASE IV 
Complete the 
audit and 
issue an 
audit report 


*The extent of testing of controls is determined by planned reliance on controls. For public companies required 
to have an audit of internal control, testing must be sufficient to issue an opinion on internal control over 


financial reporting. 





Perform additional tests for 
presentation and disclosure 








Accumulate final evidence 








Evaluate results 








Issue audit report 











Communicate with audit 
committee and management 
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Phase II: 

Perform Tests of 
Controls and 
Substantive Tests of 
Transactions 


Phase III: 

Perform Analytical 
Procedures and Tests 
of Details of Balances 


At the end of phase I, the auditor should have a well-defined audit plan and a 
specific audit program for the entire audit. 


Auditors perform tests of controls and substantive tests of transactions during this 
phase. The objectives of phase II are to: 


1. Obtain evidence in support of the specific controls that contribute to the 
auditor’s assessed control risk (that is, where it is reduced below the maximum), 
including integrated audits of internal control over financial reporting. 

2. Obtain evidence in support of the monetary correctness of transactions. 


The first objective is met by performing tests of controls, and the second by 
performing substantive tests of transactions. Frequently both types of tests are done 
simultaneously on the same transactions. When controls are not considered effective 
or when the auditor finds deviations, substantive tests can be expanded in this phase or 
in phase HI, along with considering the implications for the auditor’s report on 
internal control over financial reporting in an integrated audit. 

Because the results of tests of controls and substantive tests of transactions are a 
major determinant of the extent of tests of details of balances, they are often done two 
or three months before the balance sheet date. This helps the auditor revise the tests of 
details of balance audit program for unexpected results in the earlier tests and to 
complete the audit as soon as possible after the balance sheet date. This approach is 
also used in an integrated audit to allow management an opportunity to correct 
control deficiencies in time to allow auditor testing of the newly implemented controls 
before year-end. Auditors update their testing of internal controls near year-end to 
verify that the controls continue to operate effectively. 

For computerized accounting systems, auditors often perform tests of controls and 
substantive tests of transactions throughout the year to identify significant or unusual 
transagtions and d ine whether any changes have been made to the client’s 
compAPade.,.P HE enhAn GSE continuous auditing and is 
frequently used in integrated audits of financial statements and internal control for 
public companies. 


The objective of phase II is to obtain sufficient additional evidence to determine 
whether the ending balances and footnotes in financial statements are fairly stated. The 
nature and extent of the work will depend heavily on the findings of the two previous 
phases. 

The two general categories of phase III procedures are: 


1. Substantive analytical procedures that assess the overall reasonableness of 
transactions and balances. 

2. ‘Tests of details of balances, which are audit procedures to test for monetary 
misstatements in the balances in the financial statements. 


Table 13-7 shows analytical procedures are performed before and after the balance 
sheet date. Because of their low cost, analytical procedures are commonly used 
whenever they are relevant. They are often performed early, using preliminary data 
before year-end, as a means of planning and directing other audit tests to specific 
areas. But the greatest benefit from calculating ratios and making comparisons occurs 
after the client has finished preparing its financial statements. Ideally, these analytical 
procedures are done before tests of details of balances so they can then be used to 
determine how extensively to test balances. They are also used as a part of performing 
tests of balances and during the completion phase of the audit. 

Table 13-7 also shows that tests of details of balances are normally done last. On 
some audits, all are done after the balance sheet date. When clients want to issue state- 
ments soon after the balance sheet date, the more time-consuming tests of details of 
balances are done at interim dates before year-end with additional work being done to 
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‘ 
fein Timing of Tests 


Phase | Plan and design audit approach. 8-31-11 
Update understanding of internal 
control. Update audit program. Perform 
preliminary analytical procedures. 











Phase II Perform tests of controls and substantive 9-30-11 
tests of transactions for first 9 months 
of the year. 
Phase III Confirm accounts receivable. Observe 
inventory. 10-31-11 
Perform cutoff tests. Request various 12-31-11 Balance sheet date 
other confirmations. 
Perform analytical procedures, complete 1-7-12 Books closed 


tests of controls and substantive tests 
of transactions, and complete most 
tests of details of balances. 





Phase lV Perform procedures to support presentation 2-15-12 Last date of field work 
and disclosure-related audit objectives, 
summarize results, accumulate final 
evidence (including analytical procedures), 
and finalize audit. 
Issue audit report. 2-25-12 











roll-forward the audited interim-date balances to year-end. Substantive tests of 
balances performed before year-end provide less assurance and are normally only done 


when internal controls are effectivveApago PDF Enhancer 


After the first three phases are completed, auditors must accumulate additional evi- 
dence related to presentation and disclosure-related objectives, summarize the results, 
issue the audit report, and perform other forms of communication. As shown in Figure 
13-9 (p. 425), this phase has several parts. 


Perform Additional Tests for Presentation and Disclosure Recall from 
Chapter 6 that auditors accumulate evidence related to presentation and disclosure- 
related audit objectives. The procedures auditors perform to support the four presen- 
tation and disclosure-related objectives are similar to audit procedures performed to 
support both transaction- and balance-related audit objectives. For example, 
management implements internal controls to ensure that all required footnote 
disclosures are included and that amounts and other information disclosed are 
accurate. Auditor tests of those controls provide evidence supporting the completeness 
and accuracy presentation and disclosure-related audit objectives. Auditors also 
perform substantive tests to obtain sufficient appropriate evidence that information 
disclosed in the footnotes reflects actual transactions and balances that have occurred 
and that represent obligations of the client to support the occurrence and rights and 
obligation objectives. A considerable portion of the auditor’s testing related to 
presentation and disclosure-related objectives is done during the first three phases, but 
additional testing is done in phase IV. 

During this last phase of the audit, auditors perform audit procedures related to 
contingent liabilities and subsequent events. Contingent liabilities are potential 
liabilities that must be disclosed in the client’s footnotes. Auditors must make sure that 
the disclosure is complete and accurate. Subsequent events represent events that 
occasionally occur after the balance sheet date, but before the issuance of the financial 
statements and auditor’s report, that have an effect on the financial statements. Specific 


Phase IV: 

Complete the Audit 
and Issue an Audit 
Report 
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review procedures are designed to bring to the auditor’s attention any subsequent 
events that affect the financial statements. Both contingent liabilities and subsequent 
events are studied in Chapter 24. 


Accumulate Final Evidence In addition to the evidence obtained for each cycle 
during phases I and II, and for each account during phase III, auditors must gather the 
following evidence for the financial statements as a whole during the completion phase: 


* Perform final analytical procedures 

» Evaluate the going-concern assumption 

* Obtain a client representation letter 

* Read information in the annual report to make sure that it is consistent with the 
financial statements 


Issue Audit Report The type of audit report issued depends on the evidence accumu- 
lated and the audit findings. The appropriate reports for differing circumstances were 
studied in Chapter 3. 


Communicate with Audit Committee and Management The auditor is required to 
communicate significant deficiencies in internal control to the audit committee or senior 
management. Auditing standards also require the auditor to communicate certain other 
matters to those charged with governance, such as the audit committee or a similarly 
designated body upon completion of the audit, if not sooner. Although not required, 
auditors often also make suggestions to management to improve business performance. 


Analytical procedures—use of compari- 
sons and relationships to assess whether 


ESSENTIAL TERMS 


design and implementation of specific 
controls 


accouly ia PDFuEnhance£ ive tests—audit procedures de- 


reasonable 


Evidence mix—the combination of the 
types of tests to obtain sufficient appro- 
priate evidence for a cycle; there are likely 
to be variations in the mix from cycle to 
cycle depending on the circumstances of 
the audit 


Further audit procedures—combination 
of tests of controls, substantive tests of 
transactions, analytical procedures, and 
tests of details of balances performed in 
response to risks of material misstatement 
identified by the auditor’s risk assessment 
procedures 


Phases of the audit process—the four 
aspects of a complete audit: (1) plan and 
design an audit approach, (2) perform 
tests of controls and substantive tests of 
transactions, (3) perform analytical pro- 
cedures and tests of details of balances, 
and (4) complete the audit and issue an 
audit report 


Procedures to obtain an understanding 
of internal control—procedures used by 
the auditor to gather evidence about the 
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signed to test for dollar (monetary) mis- 
statements of financial statement balances 


Substantive tests of transactions—audit 
procedures testing for monetary misstate- 
ments to determine whether the six 
transaction-related audit objectives have 
been satisfied for each class of trans- 
actions 


Tests of controls—audit procedures 
to test the effectiveness of controls in 
support of a reduced assessed control 
risk 

Tests of details of balances—audit pro- 
cedures testing for monetary misstate- 
ments to determine whether the eight 
balance-related audit objectives have 
been satisfied for each significant account 
balance 


Types of tests—the five categories of 
audit tests auditors use to determine 
whether financial statements are fairly 
stated: risk assessment procedures, tests 
of controls, substantive tests of trans- 
actions, analytical procedures, and tests of 
details of balances 


REVIEW QUESTIONS 


13-1 (Objective 13-1) What are the five types of tests auditors use to determine whether 
financial statements are fairly stated? Identify which tests are performed to reduce control 
risk and which tests are performed to reduce planned detection risk. Also, identify which 
tests will be used when auditing internal control over financial reporting. 


13-2 (Objective 13-1) What is the purpose of risk assessment procedures and how do they 
differ from the four other types of audit tests? 


13-3 (Objective 13-1) What is the purpose of tests of controls? Identify specific accounts on 
the financial statements that are affected by performing tests of controls for the acquisition 
and payment cycle. 


13-4 (Objective 13-1) Distinguish between a test of control and a substantive test of trans- 
actions. Give two examples of each. 


13-5 (Objectives 13-1, 13-4) State a test of control audit procedure to test the effectiveness 
of the following control: Approved wage rates are used in calculating employees’ earnings. 
State a substantive test of transactions audit procedure to determine whether approved 
wage rates are actually used in calculating employees’ earnings. 


13-6 (Objective 13-1) A considerable portion of the tests of controls and substantive tests 
of transactions are performed simultaneously as a matter of audit convenience. But the 
substantive tests of transactions procedures and sample size, in part, depend on the results 
of the tests of controls. How can the auditor resolve this apparent inconsistency? 


13-7 (Objectives 13-2, 13-4) Evaluate the following statement: “Tests of sales and cash 
receipts transactions are such an essential part of every audit that I like to perform them as 
near the end of the audit as possible. By that time I have a fairly good understanding of the 
client’s business and its internal controls because confirmations, cutoff tests, and other 


procedures have already been compleag5 ago PDF Enhancer 


13-8 (Objectives 13-1, 13-2) Explain how the calculation and comparison to previous years 
of the gross margin percentage and the ratio of accounts receivable to sales are related 
to the confirmation of accounts receivable and other tests of the accuracy of accounts 
receivable. 


13-9 (Objective 13-1) Distinguish between substantive tests of transactions and tests of 
details of balances. Give one example of each for the acquisition and payment cycle. 


13-10 (Objective 13-3) The auditor of Ferguson’s Inc. identified two internal controls in 
the sales and collection cycle for testing. In the first control, the computer verifies that a 
planned sale on account will not exceed the customer’s credit limit entered in the accounts 
receivable master file. In the second control, the accounts receivable clerk matches bills of 
lading, sales invoices, and customer orders before recording in the sales journal. Describe 
how the presence of general controls over software programs and master file changes 
affects the extent of audit testing of each of these two internal controls. 


13-11 (Objective 13-4) Assume that the client’s internal controls over the recording and 
classifying of fixed asset additions are considered deficient because the individual respon- 
sible for recording new acquisitions has inadequate technical training and limited 
experience in accounting. How will this situation affect the evidence you should accumu- 
late in auditing fixed assets as compared with another audit in which the controls are 
excellent? Be as specific as possible. 


13-12 (Objective 13-2) For each of the eight types of evidence discussed in Chapter 7, 
identify whether it is applicable for risk assessment procedures, tests of controls, sub- 
stantive tests of transactions, analytical procedures, and tests of details of balances. 


13-13 (Objective 13-2) Rank the following types of tests from most costly to least costly: 
analytical procedures, tests of details of balances, risk assessment procedures, tests of 
controls, and substantive tests of transactions. 
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13-14 (Objective 13-2) In Figure 13-3 (p. 411), explain the difference among C;, C,, and 
C,. Explain the circumstances under which it will be a good decision to obtain audit 
assurance from substantive tests at point C,. Do the same for points C, and C,. 

13-15 (Objective 13-4) Table 13-3 (p. 413) illustrates variations in the emphasis on different 
types of audit tests. What are the benefits to the auditor of identifying the best mix of tests? 
13-16 (Objective 13-5) State the four-step approach to designing tests of controls and 
substantive tests of transactions. 

13-17 (Objective 13-5) Explain the relationship between the methodology for designing 
tests of controls and substantive tests of transactions in Figure 13-4 (p. 415) and the 
methodology for designing tests of details of balances in Figure 13-6 (p. 417). 

13-18 (Objective 13-5) Why is it desirable to design tests of details of balances before 
performing tests of controls and substantive tests of transactions? State the assumptions that 
the auditor must make in doing so. What does the auditor do if the assumptions are wrong? 
13-19 (Objective 13-5) Explain the relationship of tolerable misstatement, inherent risk, 
and control risk to planned tests of details of balances. 

13-20 (Objective 13-5) List the eight balance-related audit objectives in the verification of the 
ending balance in inventory and provide one useful audit procedure for each of the objectives. 
13-21 (Objective 13-7) Why do auditors often consider it desirable to perform audit tests 
throughout the year rather than wait until year-end? List several examples of evidence that 
can be accumulated before year-end. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


13-22 (Objective 13-1, 13-5, 13-7) The following questions concern types of audit tests. 
Choose the best response. 


a. TAPaiGOoP DEn EnhanGenrate sales invoices to see whether the 
accuracy of invoices has been verified. This is an example of 
(1) a test of details of balances. 
(2) atest of control. 
(3) a substantive test of transactions. 
(4) both a test of control and a substantive test of transactions. 


b. An auditor’s decision either to apply analytical procedures as substantive tests or to per- 
form substantive tests of transactions and account balances usually is determined by the 
(1) availability of data aggregated at a high level. 

(2) relative effectiveness and efficiency of the tests. 
(3) timing of tests performed after the balance sheet date. 
(4) auditor’s familiarity with industry trends. 


c. The auditor faces a risk that the audit will not detect material misstatements that occur 
in the accounting process. To minimize this risk, the auditor relies primarily on 
(1) substantive tests. (3) internal control. 
(2) tests of controls. (4) statistical analysis. 


d. A conceptually logical approach to the auditor’s evaluation of internal control consists 
of the following four steps: 
I. Determining the internal controls that should prevent or detect errors and fraud. 
II. Identifying control deficiencies to determine their effect on the nature, timing, or 
extent of auditing procedures to be applied and suggestions to be made to the client. 
UI. Determining whether the necessary internal control procedures are prescribed 
and are being followed satisfactorily. 
IV. Considering the types of errors and fraud that can occur. 


What should be the order in which these four steps are performed? 
(1) LI, Il, andIv (3) IL IV,I,and II 
(2) LUI, IV,and I (4) IV,1, IU, and II 
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13-23 (Objective 13-1) The following questions deal with tests of controls. Choose the best 
response. 


a. 


DISCUSSION QUESTIONS AND PROBLEMS 


Which of the following statements about tests of controls is most accurate? 

(1) Auditing procedures cannot concurrently provide both evidence of the effective- 
ness of internal control procedures and evidence required for substantive tests. 

(2) Tests of controls include observations of the proper segregation of duties. 

(3) Tests of controls provide direct evidence about monetary misstatements in trans- 
actions. 

(4) Tests of controls ordinarily should be performed as of the balance sheet date or 
during the period subsequent to that date. 


. To support the auditor’s initial assessment of control risk below maximum, the auditor 


performs procedures to determine that internal controls are operating effectively. 
Which of the following audit procedures is the auditor performing? 

(1) Tests of details of balances (3) Tests of controls 

(2) Substantive tests of transactions (4) Tests of trends and ratios 


. The primary objective of performing tests of controls is to obtain 


(1) a reasonable degree of assurance that the client’s internal controls are operating 
effectively on a consistent basis throughout the year. 

(2) sufficient, appropriate audit evidence to afford a reasonable basis for the auditor’s 
opinion, without the need for additional evidence. 

(3) assurances that informative disclosures in the financial statements are reasonably 
adequate. 

(4) knowledge and understanding of the client’s prescribed procedures and methods. 


. To test the effectiveness of controls, an auditor ordinarily selects from a variety of tech- 


niques, including 
(1) analysis. (3) reperformance. 
(2) confirmation. (4) comparison. 


13-24 (Objectives 13-1, 13-2) The following are 11 audit procedures taken from an audit 
program: 


1. 
2. 
2. 


10. 


11. 


a. 


b. 


Foot the accounts payable trial balance and compare the total with the general ledger. 

Confirm accounts payable balances directly with vendors. 

Account for a sequence of checks in the cash disbursements journal to determine 

whether any have been omitted. 

. Examine vendors’ invoices to verify the ending balance in accounts payable. 

. Compare the balance in payroll tax expense with previous years. The comparison 
takes the increase in payroll tax rates into account. 

. Examine the internal auditor’s initials on monthly bank reconciliations as an 
indication of whether they have been reviewed. 

. Examine vendors’ invoices and other documentation in support of recorded trans- 
actions in the acquisitions journal. 

. Multiply the commission rate by total sales and compare the result with commission 
expense. 

. Examine vendors’ invoices and other supporting documents to determine whether 

large amounts in the repair and maintenance account should be capitalized. 

Discuss the duties of the cash disbursements clerk with him and observe whether he 

has responsibility for handling cash or preparing the bank reconciliation. 

Inquire about the accounts payable supervisor’s monthly review of a computer- 

generated exception report of receiving reports and purchase orders that have not 

been matched with a vendor invoice. 

Indicate whether each procedure is a test of control, substantive test of transactions, 

analytical procedure, or a test of details of balances. 

Identify the type of evidence for each procedure. 
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13-25 (Objectives 13-1, 13-2) The following are audit procedures from different transaction 
cycles: 


1 


nw 


8. 


Required a. 


b. 


. Examine duplicate copy of shipping documents for evidence that quantities were 
verified before shipment. 

. Select a sample of payroll checks and agree hours to employee time records. 

. Use audit software to foot and cross-foot the sales journal and trace the balance to 
the general ledger. 

. Examine voucher packages and related vendor invoices for evidence of approval of 
account classification. 

. Trace a sample of shipping documents to entry in the sales journal. 

. Examine a sample of warehouse removal slips for signature of authorized official. 

. Select a sample of entries in the cash receipts journal and trace to posting in individual 

customer accounts receivable records. 

Select a sample of sales invoices and agree prices to the approved price list. 


For each audit procedure, identify whether it is a test of control or a substantive test of 
transactions. 

For each audit procedure, identify the transaction-related audit objective or objectives 
being satisfied. 


13-26 (Objectives 13-1, 13-2, 13-3, 13-6) The following are audit procedures from different 


trans 


1. 


Required 


action cycles: 


Use audit software to foot and cross-foot the cash disbursements journal and trace 

the balance to the general ledger. 

. Select a sample of entries in the acquisitions journal and trace each one to a related 
vendor’s invoice to determine whether one exists. 

. Examine documentation for acquisition transactions before and after the balance 
sheet date to determine whether they are recorded in the proper period. 

. Inquire of the credit manager whether each account receivable on the aged trial 
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. Compufé inventory turnover for each major product and compare with previous 
years. 

. Confirm a sample of notes payable balances, interest rates, and collateral with lenders. 

. Use audit software to foot the accounts receivable trial balance and compare the 

balance with the general ledger. 


. For each audit procedure, identify the transaction cycle being audited. 

. For each audit procedure, identify the type of evidence. 

. For each audit procedure, identify whether it is a test of control or a substantive test. 

. For each substantive audit procedure, identify whether it is a substantive test of trans- 


actions, a test of details of balances, or an analytical procedure. 


. For each test of control or substantive test of transactions procedure, identify the 


transaction-related audit objective or objectives being satisfied. 


. For each analytical procedure or test of details of balances procedure, identify the 


balance-related audit objective or objectives being satisfied. 


13-27 (Objectives 13-1, 13-5, 13-6) The following are independent internal controls 
commonly found in the acquisition and payment cycle. Each control is to be considered 
independently. 


1 


Zs 


. At the end of each month, an accounting clerk accounts for all prenumbered receiving 
reports (documents evidencing the receipt of goods) issued during the month, and 
traces each one to the related vendor’s invoice and acquisitions journal entry. The 
clerk’s tests do not include testing the quantity or description of the merchandise 
received. 

The cash disbursements clerk is prohibited from handling cash. The bank account is 
reconciled by another person even though the clerk has sufficient expertise and time 
to do it. 
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3. Before a check is prepared to pay for acquisitions by the accounts payable depart- 
ment, the related purchase order and receiving report are attached to the vendor’s 
invoice being paid. A clerk compares the quantity on the invoice with the receiving 
report and purchase order, compares the price with the purchase order, recomputes 
the extensions, re-adds the total, and examines the account number indicated on the 
invoice to determine whether it is correctly classified. He indicates his performance 
of these procedures by initialing the invoice. 

4. Before a check is signed by the controller, she examines the supporting docu- 
mentation accompanying the check. At that time, she initials each vendor’s invoice to 
indicate her approval. 

5. After the controller signs the checks, her secretary writes the check number and the 
date the check was issued on each of the supporting documents to prevent their reuse. 


a. For each of the internal controls, state the transaction-related audit objective(s) the 
control is meant to fulfill. 


b. For each control, list one test of control the auditor could perform to test the effective- 
ness of the control. 


c. For each control, list one substantive test the auditor could perform to determine 
whether financial misstatements are actually taking place. 


13-28 (Objectives 13-1, 13-5, 13-6) The following internal controls for the acquisition and 
payment cycle were selected from a standard internal control questionnaire. 


1. Checks are mailed by the owner or manager or a person under her supervision after 
signing. 

2. All supporting documents are cancelled after checks are signed or electronic funds 
transfers are approved. 

3. The authorized signer compares data on supporting documents with checks and 
electronic funds transfer authorizations. 

4. Vendors’ invoices are recalculated before payment. 

5. Approved purchase orders are Apagoil PDFio Enhancer 

6. Prenumbered receiving reports are prepared as support for acquisitions and numerically 
accounted for. 

7. Dates on receiving reports are compared with vendors’ invoices before entry into the 
acquisitions journal. 

8. The accounts payable master file is updated, balanced, and reconciled to the general 
ledger monthly. 

9. Account classifications are reviewed by someone other than the preparer. 

10. All checks are signed by the owner or manager. 


a. For each control, identify which element of the five categories of control activities is 
applicable (separation of duties, proper authorization, adequate documents or records, 
physical control over assets and records, or independent checks on performance). 


b. For each control, state which transaction-related audit objective(s) is (are) applicable. 


c. For each control, write an audit procedure that could be used to test the control for 
effectiveness. 


d. For each control, identify a likely misstatement, assuming that the control does not 
exist or is not functioning. 


e. For each likely misstatement, identify a substantive audit procedure to determine 
whether the misstatement exists. 


13-29 (Objective 13-3) Beds and Spreads, Inc. specializes in bed and bath furnishings. Its 
inventory system is linked through the Internet to key suppliers. The auditor identified the 
following internal controls in the inventory cycle: 


1. The computer initiates an order only when perpetual inventory levels fall below 
prespecified inventory levels in the inventory master file. 

2. The sales and purchasing department managers review inventory reorder points on 
a monthly basis for reasonableness. Approved changes to reorder points are entered 
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into the master file by the purchasing department manager and an updated printout 
is generated for final review. Both managers verify that all changes were entered 
correctly and initial the final printout indicating final approval. These printouts are 
maintained in the purchasing department. 

3. The computer will initiate a purchase order only for inventory product numbers 
maintained in the inventory master file. 

4. The purchasing department manager reviews a computer-generated exception 
report that highlights weekly purchases that exceed $10,000 per vendor. 

5. Sales clerks send damaged merchandise on the store shelves to the back storage room. The 
sales department manager examines the damaged merchandise each month and pre- 
pares a listing showing the estimated salvage value by product number. The accounting 
department uses the listing to prepare a monthly adjustment to recorded inventory values. 

Required a. Consider each of the preceding controls separately. Identify whether the control is a(n) 
(1) automated control embedded in computer software. 
(2) manual control with effectiveness based significantly on IT-generated information. 
(3) manual control with effectiveness not significantly reliant on IT-generated infor- 
mation. 
b. Describe how the extent of testing of each control will be affected in subsequent years 
if general controls are effective, particularly controls over program and master file 
changes. 


13-30 (Objectives 13-5, 13-7) Following are evidence decisions for the three audits 
described in Figure 13-3 on page 411: 


Audit A Ineffective client internal controls 
Audit B Very effective client internal controls 
Audit C Somewhat effective client internal controls 


Evidence Decisions 
1. The auditor performed paste positive confirmations at the balance sheet date. 


: Apago PDF Enh AC ywols and minimal substantive tests. 

. [fre audttor decided it was possi ar assess control risk below the maximum. 

. The auditor performed substantive tests. 

. This audit was likely the least expensive to conduct. 

. The auditor confirmed receivables at an interim date. 

. The auditor identified effective controls and also identified some deficiencies in 


controls. 
8. The auditor performed tests of controls. 
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Required a. Explain why Audit B represents the maximum amount of reliance that can be placed 
on internal control. Why can’t all the audit assurance be obtained by tests of controls? 
b. Explain why the auditor may not place the maximum extent of reliance on controls in 
Audit B and Audit C. 
c. For each of the eight evidence decisions, indicate whether the evidence decision 
relates to each of the audits described above. Every evidence decision relates to at least 
one of the audits, and some may relate to two or all three audits. 


13-31 (Objectives 13-4, 13-5) Following are several decisions that the auditor must make in 
an audit of a nonpublic company. Letters indicate alternative conclusions that could be made. 


Decisions Alternative Conclusions 





It is cost effective 
It is not cost effective 


1. Determine whether it is cost effective to perform 
tests of controls. 





Perform reduced tests 
. Perform expanded tests 


2. Perform substantive tests of details of balances. 





Controls are effective 
Controls are ineffective 


3. Complete initial assessment of control risk. 





Controls are effective 
Controls are ineffective 


4. Perform tests of controls. 
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a. Identify the sequence in which the auditor should make decisions 1 to 4. Required 


b. For the audit of the sales and collection cycle and accounts receivable, an auditor 
reached the following conclusions: A, D, E, H. Put the letters in the appropriate 
sequence and evaluate whether the auditor’s logic was reasonable. Explain your answer. 


c. For the audit of inventory and related inventory cost records, an auditor reached the 
following conclusions: B, C, E, G. Put the letters in the appropriate sequence and 
evaluate whether the auditor used good professional judgment. Explain your answer. 


d. For the audit of property, plant, and equipment and related acquisition records, an 
auditor reached the following conclusions: A, C, F, G. Put the letters in the appropriate 
sequence and evaluate whether the auditor used good professional judgment. Explain 
your answer. 


e. For the audit of payroll expenses and related liabilities, an auditor recorded the 
following conclusions: D, F. Put the letters in the appropriate sequence and evaluate 
whether the auditor used good professional judgment. Explain your answer. 


13-32 (Objective 13-4) The following are three situations, all involving nonpublic 
companies, in which the auditor is required to develop an audit strategy: 


1. The client has inventory at approximately 50 locations in a three-state region. The 
inventory is difficult to count and can be observed only by traveling by automobile. 
The internal controls over acquisitions, cash disbursements, and perpetual records 
are considered effective. This is the fifth year that you have done the audit, and audit 
results in past years have always been excellent. The client is in excellent financial 
condition. 

2. This is the first year of an audit of a medium-sized company that is considering 
selling its business because of severe underfinancing. A review of the acquisition and 
payment cycle indicates that controls over cash disbursements are excellent but 
controls over acquisitions cannot be considered effective. The client lacks receiving 
reports and a policy as to the Wis) aye’ POR CRNH vat oy.review 
the general ledger, you observe ek dre many large adjus i@ 1 EP oorrect 
accounts payable. 

3. You are doing the audit of a small loan company with extensive receivables from cus- 
tomers. Controls over granting loans, collections, and loans outstanding are 
considered effective, and there is extensive follow-up of all outstanding loans weekly. 
You have recommended a new computer system for the past 2 years, but manage- 
ment believes the cost is too great, given their low profitability. Collections are an 
ongoing problem because many of the customers have severe financial problems. 
Because of adverse economic conditions, loans receivable have significantly increased 
and collections are less than normal. In previous years, you have had relatively few 
adjusting entries. 


a. For audit 1, recommend an evidence mix for the five types of tests for the audit of | Required 
inventory and cost of goods sold. Justify your answer. Include in your recommen- 
dations both tests of controls and substantive tests. 


b. For audit 2, recommend an evidence mix for the audit of the acquisition and payment 
cycle, including accounts payable. Justify your answer. 


c. For audit 3, recommend an evidence mix for the audit of outstanding loans. Justify 
your answer. 


13-33 (Objective 13-4) Kim Bryan, a new staff auditor, is confused by the inconsistency of 
the three audit partners she has been assigned to on her first three audit engagements. On 
the first engagement, she spent a considerable amount of time in the audit of cash 
disbursements by examining cancelled checks, electronic payments, and supporting 
documentation, but almost no testing was spent in the verification of fixed assets. On the 
second engagement, a different partner had her do less intensive tests in the cash disburse- 
ments area and take smaller sample sizes than in the first audit, even though the company 
was much larger. On her most recent engagement under a third audit partner, there was a 
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thorough test of cash disbursement transactions, far beyond that of the other two audits, 
and an extensive verification of fixed assets. In fact, this partner insisted on a complete 
physical examination of all fixed assets recorded on the books. The total audit time on the 
most recent audit was longer than that of either of the first two audits despite the smaller 
size of the company. Bryan’s conclusion is that the amount of evidence to accumulate 
depends on the audit partner in charge of the engagement. 


a. State several factors that can explain the difference in the amount of evidence accu- 
mulated in each of the three audit engagements as well as the total time spent. 


b. What could the audit partners have done to help Bryan understand the difference in 
the audit emphasis on the three audits? 


c. Explain how these three audits are useful in developing Bryan’s professional judg- 
ment. How could the quality of her judgment have been improved on the audits? 


d. Which audit most likely represents an integrated audit of a public company’s financial 
statements and internal control over financial reporting? 


13-34 (Objectives 13-5, 13-7) The following are parts of a typical audit for a company with 
a fiscal year-end of July 31. 


1. Confirm accounts payable. 

2. Do tests of controls and substantive tests of transactions for the acquisition and 
payment and payroll and personnel cycles. 

. Do other tests of details of balances for accounts payable. 

. Do tests for review of subsequent events. 

. Accept the client. 

. Issue the audit report. 

. Understand internal control and assess control risk. 

. Do analytical procedures for accounts payable. 

. Set acceptable audit risk and decide preliminary judgment about materiality and 
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a. Identify the phase of the audit in which each activity occurs. 
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b. Put parts 1 through 9 of the audit in the sequential order in which you will expect them 
to be performed in a typical audit. 


c. Identify those parts that will frequently be done before July 31. 


CASES 


13-35 (Objectives 13-4, 13-5) Gale Brewer, CPA, has been the partner in charge of the audit 
of Merkle Manufacturing Company, a nonpublic company, for 13 years. Merkle has had 
excellent growth and profits in the past decade, primarily as a result of the excellent leader- 
ship provided by Bill Merkle and other competent executives. Brewer has always enjoyed a 
close relationship with the company and prides himself on having made several constructive 
comments over the years that have aided in the success of the firm. Several times in the past 
few years, Brewer’s CPA firm has considered rotating a different audit team on the engage- 
ment, but this has been strongly resisted by both Brewer and Merkle. 

For the first few years of the audit, internal controls were inadequate and the account- 
ing personnel had inadequate qualifications for their responsibilities. Extensive audit 
evidence was required during the audit, and numerous adjusting entries were necessary. 
However, because of Brewer’s constant prodding, internal controls improved gradually 
and competent personnel were hired. In recent years, there were normally no audit 
adjustments required, and the extent of the evidence accumulation was gradually reduced. 
During the past 3 years, Brewer was able to devote less time to the audit because of the 
relative ease of conducting the audit and the cooperation obtained throughout the 
engagement. 
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In the current year’s audit, Brewer decided that the total time budget for the engagement 
should be kept approximately the same as in recent years. The senior in charge of the audit, 
Phil Warren, was new on the job and highly competent, and he had the reputation of being 
able to cut time off the budget. The fact that Merkle had recently acquired a new division 
through merger will probably add to the time, but Warren’s efficiency will probably 
compensate for it. 

The interim tests of controls took somewhat longer than expected because of the use 
of several new assistants, a change in the accounting system to computerize the inventory 
and other accounting records, a change in accounting personnel, and the existence of a 
few more errors in the tests of the system. Neither Brewer nor Warren was concerned 
about the budget deficit, however, because they could easily make up the difference at 
year-end. 

At year-end, Warren assigned the responsibility for inventory to an assistant who also 
had not been on the audit before but was competent and extremely fast at his work. Even 
though the total value of inventory increased, he reduced the size of the sample from that 
of other years because there had been few errors in the preceding year. He found several 
items in the sample that were overstated as a result of errors in pricing and obsolescence, 
but the combination of all of the errors in the sample was immaterial. He completed the 
tests in 25% less time than the preceding year. The entire audit was completed on schedule 
and in slightly less time than the preceding year. There were only a few adjusting entries 
for the year, and only two of them were material. Brewer was extremely pleased with the 
results and wrote a letter to Warren and the inventory assistant complimenting them on 
the audit. 

Six months later, Brewer received a telephone call from Merkle and was informed that 
the company was in serious financial trouble. Subsequent investigation revealed that the 
inventory had been significantly overstated. The major cause of the misstatement was the 
inclusion of obsolete items in inventory (especially in the new division), errors in pricing as 
a result of the new computer system, and the inclusion of nonexistent inventory in the final 
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compensate for the reduction in sales’v m the preceding year: 
a. List the major deficiencies in the audit and state why they took place. 
b. What things should have been apparent to Brewer in the conduct of the audit? 


c. If Brewer’s firm is sued by creditors, what is the likely outcome? 


13-36 (Objectives 13-4, 13-5) McClain Plastics has been an audit client of Belcor, Rich, 
Smith & Barnes, CPAs (BRS&B), for several years. McClain Plastics was started by Evers 
McClain, who owns 51% of the company’s stock. The balance is owned by about 20 
stockholders who are investors with no operational responsibilities. McClain Plastics 
makes products that have plastic as their primary material. Some are made to order, but 
most products are made for inventory. An example of a McClain-manufactured product is 
a plastic chair pad that is used in a carpeted office. Another is a plastic bushing that is used 
with certain fastener systems. 

McClain has grown from a small, two-product company, when they first engaged 
BRS&B, to a successful diverse company. At the time Randall Sessions of BRS&B became 
manager of the audit, annual sales had grown to $200 million and profits to $10.9 million. 
Historically, the company presented no unusual audit problems, and BRS&B had issued an 
unqualified opinion every year. 

The audit approach BRS&B always used on the audit of McClain Plastics was a “sub- 
stantive” audit approach. Under this approach, the in-charge auditor obtained an under- 
standing of internal control as part of the risk assessment procedures, but control risk was 
assessed at the maximum (100%). Extensive analytical procedures were done on the 
income statement, and unusual fluctuations were investigated. Detailed audit procedures 
emphasized balance sheet accounts. The theory was that if the balance sheet accounts were 
correct at year-end and had been audited as of the beginning of the year, then retained 
earnings and the income statement must be correct. 
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Part I 


In evaluating the audit approach for McClain for the current year’s audit, Sessions believed 
that a substantive approach was really only appropriate for the audits of small nonpublic 
companies. In his judgment, McClain Plastics, with sales of $200 million and 146 employees, 
had reached the size where it was not economical, and probably not wise, to concentrate all 
the tests on the balance sheet. Furthermore, although McClain is not a public company, 
Sessions recognized that similar public companies are required by Section 404 of the 
Sarbanes—Oxley Act and related PCAOB standards to have an integrated audit of the 
financial statements and internal control over financial reporting. Therefore, he designed an 
audit program that emphasized identifying internal controls in all major transaction cycles 
and included tests of controls. The intended economic benefit of this “reducing control risk” 
approach was that the time spent testing controls will be more than offset by reduced tests of 
details of the balance sheet accounts. 

In planning tests of inventories, Sessions used the audit risk model included in auditing 
standards to determine the number of inventory items BRS&B will test at year-end. Because 
of the number of different products, features, sizes, and colors, McClain’s inventory 
consisted of 2,450 different items. These were maintained on a perpetual inventory manage- 
ment system that used a relational database. 

In using the audit risk model for inventories, Sessions believed that an audit risk of 
5% was acceptable. He assessed inherent risk as high (100%) because inventory, by its 
nature, is subject to many types of misstatements. Based on his understanding of the 
relevant transaction cycles, Sessions believed that internal controls were good. He 
therefore assessed control risk as low (50%) before performing tests of controls. Sessions 
also planned to use analytical procedures for tests of inventory. These planned tests 
included comparing gross profit margins by month and reviewing for slow-moving items. 
Sessions believed that these tests will provide assurance of 40%. Substantive tests of details 
will include tests of inventory quantities, costs, and net realizable values at an interim date 
2 months before year-end. Cutoff tests will be done at year-end. Inquiries and analytical 
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a. Decide which of the following will likely be done under both a reducing control risk 
approach and a substantive approach: 
(1) Assess inherent risk. 
(2) Obtain an understanding of internal control. 
(3) Perform tests of controls. 
(4) Perform analytical procedures. 
(5) Assess planned detection risk. 


b. What advantages does the reducing control risk approach Sessions plans to use have 
over the substantive approach previously used in the audit of McClain Plastics? 


c. What advantages did the substantive approach have over the reducing control risk 
approach? 


Part Il 
The engagement partner agreed with Sessions’s recommended approach. In planning the 
audit evidence for detailed inventory tests, the audit risk model was applied with the 
following results: 

AAR 


IR X CR x APR 


TDR = 





where: 


TDR = test of details risk 
AAR = acceptable audit risk 
IR = inherent risk 
CR = control risk 
APR = analytical procedures risk 
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Therefore, using Sessions’s assessments and judgments as described previously, 


05 
TDR = ——__—_ 
1.0 x .5 X .6 
TDR = .17 
a. Explain what .17 means in this audit. Required 


b. Calculate TDR assuming that Sessions had assessed control risk at 100% and all other 
risks as they are stated. 
c. Explain the effect of your answer in requirement b on the planned audit procedures 
and sample size in the audit of inventory compared with the .17 calculated by Sessions. 
Part Ill 
Although the planning went well, the actual testing yielded some surprises. When con- 
ducting tests of controls over acquisitions and additions to the perpetual inventory, the 
staff person performing the tests found that the exception rates for several key controls 
were significantly higher than expected. As a result, the staff person considered internal 
control to not be operating effectively, supporting an 80% control risk rather than the 50% 
level used. Accordingly, the staff person “reworked” the audit risk model as follows: 
05 
1.0 x .8 X .6 


TDR = .10 


TDR = 


A 10% test of details risk still seemed to the staff person to be in the “moderate” range, so 
he recommended no increase in planned sample size for substantive tests. 


Do you agree with the staff person’s revised judgments about the effect of tests of controls Required 
on planned substantive tests? Explain the nature and basis of any disagreement. Also, 
describe the implications of these results on the auditor’s report on internal control over 
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INTERNET PROBLEM 13-1: 





ASSESSING EFFECTS OF EVIDENCE MIX 


Auditors develop overall audit plans to ensure that they obtain sufficient appropriate audit 
evidence. The timing and extent of audit procedures auditors use is a matter of professional 
judgment, which depends upon a number of factors. Decisions about the mix of audit 
procedures and the timing of procedures significantly impact the date on which the audit 
report is issued. Visit the company Web sites for Google Inc. (www.google.com), Cisco 
Systems, Inc. (www.cisco.com), and McDonald’s Corporation (www.aboutmcdonalds.com). 
Search under “Investor Relations” for the most recent annual report and locate the indepen- 
dent auditor’s report. 


a. Identify the year-end for each company. Did any company have a year-end other than Required 
December 31st? Will the company’s year-end have any impact on the audit procedures 
used and their timing? 
b. Indicate the number of days between each company’s year-end and the date of the 
audit report. What factors may impact the number of days to issue the audit report? 
c. Based on the number of days between each company’s year-end and the date of the 
audit report, and your knowledge of each company’s operations, on which audit do 
you think the auditors placed the greatest reliance on substantive tests of details of 
balances? Explain. 
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CHAPTERS 


14-17 





APPLICATION OF THE 
AUDIT PROCESS TO THE 
SALES AND COLLECTION CYCLE 


The four chapters of Part 3 apply the concepts you learned in Part 2 to the 
audit of sales, cash receipts, and the related income statement and balance sheet 
accounts in the cycle. 

For you to appreciate how auditing is done in practice, you need to 
understand how auditing concepts are applied to specific auditing areas. We'll 
first look at one important part of every audit, the sales and collection cycle, to 
examine the practical application of auditing concepts. 


e Chapter 14 will help you learn the methodology for designing tests of 
controls and substantive tests of transactions audit procedures for sales, cash 
receipts, and the other classes of transactions in the sales and collection cycle. 

e Chapter 15 deals with nonstatistical and statistical sampling methods for 
tests of controls and substantive tests of transactions. 

e Chapter 16 presents the methodology for designing audit procedures for the 
audit of accounts receivable and other account balances in the sales and 
collection cycle. 


e Chapter 17 covers audit sampling for tests of details of balances. 










AUDIT OF THE SALES 
AND COLLECTION CYCLE LEARNING OBJECTIVES 
TESTS OF CONTROLS yearnenenmrmam 


you should be able to 


AND SUBSTANTIVE TESIS i Sne== 


sales and collection cycle. 


C) F TRAN SACT| CO N S 14-2 Describe the business functions 
and the related documents and 


records in the sales and collection 


cycle. 
The Choice Is Simple _ 14-3 Understand internal control, and 
Rely On Internal Control Or Resign From The Audit Gesigt ald penloruiestse 
controls and substantive tests of 
City Finance is the largest client managed out of the Pittsburgh office of a Big transactions for sales. 
Four firm. It is a financial services conglomerate with almost 1,000 offices in 14-4 Apply the methodology for 
the United States and Canada, as well as correspondent offices overseas. controls over sales transactions to 
The company’s records contain more than a million accounts receivable and Slee sales returns and 


it processes millions of sales and other transactions annually. 
14-5 Understand internal control, and 


The company’s computer data center is in a large, enyi ntally controlled design and perform tests of 
room that contains several large Abad rvelS lal PHWaneer controls and substantive tests of 
ancillary equipment. There are two complete online systems, one serving as PAUSES SBIR ENTE GEIS. 

a backup for the other, as systems failure would preclude operations in all of 14-6 Apply the methodology for 

the company’s branches. controls over the sales and 


collection cycle to write-offs of 
uncollectible accounts receivable. 








The company has an unusual system of checks and balances in which 
branch office transaction records are reconciled to data processing controls 
daily, which, in turn, are reconciled to outside bank account records monthly. 
Whenever this reconciliation process indicates a significant out-of-balance condition, procedures are initiated to resolve 
the problem as quickly as possible. A large internal audit staff oversees any special investigative efforts. 


4 





Because City Finance is a large public company, it must file its annual financial report including management's report on 
internal control over financial reporting on Form 10-K with the Securities and Exchange Commission within 60 days after 
its fiscal year-end. In addition, the company likes to announce annual earnings and issue its annual report as soon after 
year-end as reasonably feasible. Under these circumstances, there is always a great deal of pressure on the CPA firm to 
complete the audit quickly. 


The CPA firm must conduct an integrated audit of the financial statements and internal control over financial reporting in 
accordance with PCAOB Standard 5. In the case of City Finance, there is no question that the auditor must rely 
extensively on internal control in the integrated audit and extensively test internal control over financial reporting. Even 
if the auditing standards requirements did not exist, it would be difficult to complete the audit within the reporting 
deadlines without extensively relying on key controls. In all honesty, if City Finance did not have excellent internal 
controls, the CPA firm admits that an audit of the financial statements just could not be done. 


he circumstances of City Finance in the opening story illustrate an audit in which extensive reliance on internal 
controls in the sales and collection cycle will likely require the auditor to do extensive tests of controls and 
substantive tests of transactions. In other situations not involving the audit of an accelerated filer public company, 
the auditor may rely far less on internal controls but as was shown in Chapter 10, will still need to understand the 
internal controls over sales and cash receipts. Auditors need to know when they should rely extensively on internal 
controls and when they shouldn't. This chapter studies assessing control risk and designing tests of controls and 
substantive tests of transactions for each of the classes of transactions in the sales and collection cycle. 
Before we study assessing control risk and designing tests of controls and substantive tests of transactions for each 
class of transactions in detail, we will cover two related topics. 
1. You need to know the sales and collection cycle classes of transactions and account balances in a typical 
company. We discussed these earlier, but we review them again here. 
2. Because a considerable portion of the audit of transactions in the sales and collection cycle involves 
documents and records, it is essential to understand the typical documents and records used in the cycle. 


ACCOUNTS AND CLASSES OF TRANSACTIONS 


IN THE SALES AND COLLECTION CYCLE 





OBJECTIVE 14-1 





Identify the accounts and the 
classes of transactions in the 
sales and collection cycle. 


The overall objective in the audit of the sales and collection cycle is to evaluate whether 
the account balances affected by the cycle are fairly presented in accordance with 
accounting standards. Figure 14-1 shows typical accounts included in the sales and collec- 
tion cycle using T accounts. The nature of the accounts may vary, of course, depending 


on the industry and client involved. There are differences in the nature and account titles 
for a service industry, a retail company, and an insurance company, but the key concepts 
remain the same. To provide a frame of reference for understanding the material in this 
chapter, let’s assume we’re dealing with a wholesale merchandising company. 

Figure 14-1 sho wawacgounting information flows through the various 
accou AIGes lec HEGET,. shows that there are five classes of 


transactions in the sales and collection cycle: 


ae et Accounts in the Sales and Collection Cycle ) 














































Sales Cash in bank 
Cash 
sales 
Accounts receivable 
Sales on eS 
account Beginning | Cash receipts 
balance 
Sales returns Cash discounts 
Sales on | and allowances ____taken 
account : 
Write-off of 
Ending uncollectible 
balance accounts Sales returns 
and allowances 
Allowance for Ss 
uncollectible accounts 
Write-off of | Beginning 
y uncollectible | balance 
accounts Estimate of bad Bad debt 
debt expense EXPEOse 
Ending 
balance 
\ y 
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Sales (cash and sales on account) 
Cash receipts 

Sales returns and allowances 
Write-off of uncollectible accounts 
Estimate of bad debt expense 


OU ee ee 


Figure 14-1 also shows that, with the exception of cash sales, every transaction and 
amount is ultimately included in one of two balance sheet accounts, accounts receivable 
or allowance for uncollectible accounts. For simplicity, we assume that the same 
internal controls exist for both cash and credit sales. 


BUSINESS FUNCTIONS IN THE CYCLE AND 


RELATED DOCUMENTS AND RECORDS 








The sales and collection cycle involves the decisions and processes necessary for the OBJECTIVE 14-2 

transfer of the ownership of goods and services to customers after they are made Rees penne bacnees 

available for sale. It begins with a request by a customer and ends with the conversion flincdons ancitieleiated 

of material or service into an account receivable, and ultimately into cash. documents and records in 
The eight business functions for the sales and collection cycle are shown in the _| the sales and collection cycle. 





third column of Table 14-1. They occur in every business in the recording of the five 
classes of transactions in the sales and collection cycle. Under “Business Functions,” 
observe that the first four processes are for recording sales, while every other class of 
transactions includes only one business function. In this section, we'll explain each of 
the eight business functions and describe typical documents and records for each 
function, which appear in the fourth column of Table 14-1. Before auditors can assess 
control risk and design tests of controls and substantive tests of transactions, they need 


to understand the business functioneRysgo PDF reqgayha PASr 





for the Sales and Collection Cycle 





TABLE 14-1 Classes of Transactions, Accounts, Business Functions, and Related Documents and Records 





Classes of Transactions Accounts Business Functions Documents and Records 
Sales Sales Processing customer orders Customer order 
Accounts receivable Sales order 
Granting credit Customer order or sales order 
Shipping goods Shipping document 
Billing customers Sales invoice 
and recording sales Sales transaction file 


Sales journal or listing 

Accounts receivable master file 
Accounts receivable trial balance 
Monthly statement 














Cash receipts Cash in bank (debits from Processing and recording Remittance advice 
cash receipts) cash receipts Prelisting of cash receipts 
Accounts receivable Cash receipts transaction file 
Cash receipts journal or listing 
Sales returns and allowances _— Sales returns and allowances _— Processing and recording sales Credit memo 
Accounts receivable returns and allowances Sales returns and allowances journal 
Write-off of uncollectible Accounts receivable Writing off uncollectible accounts Uncollectible account 
accounts Allowance for uncollectible receivable authorization form 
accounts General journal 
Bad debt expense Bad debt expense Providing for bad debts General journal 


Allowance for 
uncollectible accounts 
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Processing 
Customer Orders 


Granting Credit 


Shipping Goods 


Billing Customers 
and Recording Sales 


A customer’s request for goods initiates the entire cycle. Legally, it is an offer to buy 
goods under specified terms. The receipt of a customer order often results in the 
immediate creation of a sales order. 


Customer Order A customer order is a request for merchandise by a customer. It 
may be received by telephone, letter, a printed form that has been sent to prospective 
and existing customers, through salespeople, electronic submission of the customer 
order through the Internet, or other network linkage between the supplier and the 
customer. 


Sales Order A sales order is a document for communicating the description, 
quantity, and related information for goods ordered by a customer. This is often used 
to indicate credit approval and authorization for shipment. 


Before goods are shipped, a properly authorized person must approve credit to the 
customer for sales on account. Weak practices in credit approval often result in excessive 
bad debts and accounts receivable that may be uncollectible. An indication of credit 
approval on the sales order often serves as the approval to ship the goods. In some 
companies, the computer automatically approves a credit sale based on preapproved 
credit limits maintained in a customer master file. The computer allows the sale to 
proceed only when the proposed sales order total plus the existing customer balance is 
less than the credit limit in the master file. 


This critical function is the first point in the cycle at which the company gives up assets. 
Most companies recognize sales when goods are shipped. A shipping document is 
prepared at the time of shipment, which can be done automatically by a computer, 
based on sales order information. The shipping document, which is often a multicopy 
bill of lading, is essential to the proper billing of shipments to customers. Companies 


that mgintain perpetyalinventgry records also update them based on shipping records. 
shinPA 3.'BD) en ancer to initiate shipment of the 


goods, indicating the description of the merchandise, the quantity shipped, and other 
relevant data. The company sends the original to the customer and retains one or more 
copies. The shipping document serves as a signal to bill the customer and may be in 
electronic or paper form. 

One type of shipping document is a bill of lading, which is a written contract 
between the carrier and the seller of the receipt and shipment of goods. Often, bills of 
lading include only the number of boxes or pounds shipped, rather than complete 
details of quantity and description. (For the purpose of this textbook, however, we will 
assume that complete details are included on bills of lading.) 

The bill of lading is often transmitted electronically, once goods have been shipped, 
and automatically generates the related sales invoice as well as the entry in the sales 
journal. Many companies use bar codes and handheld computers to record removal of 
inventory from the warehouse. This information is used to update the perpetual 
inventory records. 


Because billing customers is the means by which the customer is informed of the 
amount due for the goods, it must be done correctly and on a timely basis. The most 
important aspects of billing are: 


* All shipments made have been billed (completeness) 
* No shipment has been billed more than once (occurrence) 
* Each one is billed for the proper amount (accuracy) 


Billing the proper amount is dependent on charging the customer for the quantity 
shipped at the authorized price, which includes consideration for freight charges, 
insurance, and terms of payments. 


Aad, Part 3 / APPLICATION OF THE AUDIT PROCESS TO THE SALES AND COLLECTION CYCLE 








assets by at least $1.4 billion between 1999 and 
2002 to meet analysts’ forecasts. According to the 
SEC complaint, almost all of the earnings reported 
by the company were attributable to the 
misstated assets. 

Instead of increasing revenues directly, the 
company decreased “contractual adjustments,” a 
contra revenue account that decreased reported 
revenue. The contractual adjustments represent 
differences between the amount billed and 
recorded as revenue and the amount that 
healthcare insurers will pay for treatment. The 
amounts recorded in this account were based on 
estimates and were more difficult for auditors to 
verify than revenue entries. 

The entries that increased net revenue were 
balanced by entries that increased fixed assets. 
The adjustments were made through a series of 
entries to make them difficult to detect. Fixed 
assets at each facility were increased by a fictitious 
line item called “AP Summary.” These fixed asset 


OVERSTATED eae ee . pie ee arene | craters ae te deans ad 
uilt HealthSouth Corp. into a illion hospita ercent of recorded assets. The amount o 
REVENUES KEEP empire. However, by 1657 the company ye ns fixed assets varied by facility to decrease 
EARNINGS __ declining government reimbursements, and suspicion. Further, the company was aware that 
operating margins and profits plunged. The SEC the auditors only examined fixed asset additions 
HEALTHY alleged that HealthSouth Corp. overstated its at each facility that exceeded a dollar threshold 


and was careful not to exceed this limit. 

Scrushy was ultimately acquitted for his alleged 
involvement. However, several senior executives 
who worked under Scrushy pled guilty and have 
been sentenced for their involvement in the fraud. 

Despite Scrushy’s acquittal in the criminal trial 
related to the fraud, he was found guilty in 2007 
in a separate government corruption scandal for 
allegedly bribing a former governor of Alabama 
and was sentenced to seven years in prison. In 
2009, he was also found liable in a subsequent 
civil trial related to the HealthSouth fraud with a 
state court judge ultimately ordering him to repay 
$2.9 billion to shareholders. 


Sources: 1. Securities and Exchange Commission vs. 
HealthSouth Corporation and Richard M. Scrushy; 
2. Charles Haddad, Arlene Weintraub, and Brian 
Grow, “Too Good to Be True,” BusinessWeek (April 
14, 2003), pp. 70-72; 3. Jack Healy, “Ex-Chief of 
HealthSouth Loses Civil Suit,” The New York Times 
(une 18, 2009). 





In most systems, billing of the customer includes ee of an electronic 


record or a multicopy sales invoice APaga uD of! 


ACREns file, 


accounts receivable master file, and general ledger master file for sales and accounts 
receivable. The accounting system uses this information to generate the sales journal 
and, along with cash receipts and miscellaneous credits, to prepare the accounts 
receivable trial balance. 


Sales Invoice A sales invoice is a document or electronic record indicating the 
description and quantity of goods sold, the price, freight charges, insurance, terms, and 
other relevant data. The sales invoice is the method of indicating to the customer the 
amount of a sale and the payment due date. Companies send the original to the cus- 
tomer, and retain one or more copies. Typically, the computer automatically prepares 
the sales invoice after the customer number, quantity, destination of goods shipped, and 
sales terms are entered. The computer calculates the invoice extensions and total sales 
amount using the information entered, along with prices in the inventory master file. 


Sales Transaction File This is a computer-generated file that includes all sales 
transactions processed by the accounting system for a period, which could be a day, 
week, or month. It includes all information entered into the system and information 
for each transaction, such as customer name, date, amount, account classification or 
classifications, salesperson, and commission rate. The file can also include returns 
and allowances or there can be a separate file for those transactions. 

The information in the sales transaction file is used for a variety of records, listings, 
or reports, depending on the company’s needs. These may include a sales journal, 
accounts receivable master file, and transactions for a certain account balance or division. 


Sales Journal or Listing This isa listing or report generated from the sales transaction 
file that typically includes the customer name, date, amount, and account classification 
or classifications for each transaction, such as division or product line. It also identifies 
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Processing 
and Recording 
Cash Receipts 


whether the sale was for cash or accounts receivable. The journal or listing is usually for 
a month but can cover any period of time. Typically, the journal or listing includes totals 
of every account number for the time period. The same transactions included in the 
journal or listing are also posted simultaneously to the general ledger and, if they are on 
account, to the accounts receivable master file. The journal or listing can also include 
returns and allowances or there can be a separate journal or listing of those transactions. 


Accounts Receivable Master File This is a computer file used to record individual 
sales, cash receipts, and sales returns and allowances for each customer and to maintain 
customer account balances. The master file is updated from the sales, sales returns and 
allowances, and cash receipts computer transaction files. The total of the individual 
account balances in the master file equals the total balance of accounts receivable in the 
general ledger. A printout of the accounts receivable master file shows, by customer, the 
beginning balance in accounts receivable, each sales transaction, sales returns and 
allowances, cash receipts, and the ending balance. 

In this book, we use the term master file to refer to either the computer file or a 
printout of that file, but it is sometimes called the accounts receivable subsidiary ledger 
or subledger. 


Accounts Receivable Trial Balance This list or report shows the amount receivable 
from each customer at a point in time. It is prepared directly from the accounts 
receivable master file, and is usually an aged trial balance that includes the total balance 
outstanding and the number of days the receivable has been outstanding, by category 
of days (such as less than 30 days, 31 to 60 days and so on). 


Monthly Statement This is a document sent by mail or electronically to each customer 
indicating the beginning balance of their accounts receivable, the amount and date of 
each sale, cash payments received, credit memos issued, and the ending balance due. It 
is, in essence, a copy of the customer’s portion of the accounts receivable master file. 


The (AR AGA.LRPE. Aahaencer for getting the goods into the hands 


of customers, correctly billing them, and reflecting the information in the accounting 
records. The remaining four functions involve the collection and recording of cash, 
sales returns and allowances, write-off of uncollectible accounts, and providing for bad 
debt expense. 

Processing and recording cash receipts includes receiving, depositing, and recording 
cash. Cash includes currency, checks, and electronic funds transfers. The most important 
concern is the possibility of theft. Theft can occur before receipts are entered in the 
records or later. It is important that all cash receipts are deposited in the bank at the 
proper amount on a timely basis and recorded in the cash receipts transaction file. This 
file is used to prepare the cash receipts journal and update the accounts receivable and 
general ledger master files. 


Remittance Advice A remittance advice is a document mailed to the customer and 
typically returned to the seller with the cash payment. It indicates the customer name, 
the sales invoice number, and the amount of the invoice. A remittance advice is used as 
a record of the cash received to permit the immediate deposit of cash and to improve 
control over the custody of assets. If the customer fails to include the remittance advice 
with the payment, it is common for the person opening the mail to prepare one at that 
time. 


Prelisting of Cash Receipts This is a list prepared when cash is received by someone 
who has no responsibility for recording sales, accounts receivable, or cash, and who has 
no access to accounting records. It is used to verify whether cash received was recorded 
and deposited at the correct amounts and on a timely basis. 

Many companies use a bank to process cash receipts from customers. Some com- 
panies use a lockbox system in which customers mail payments directly to an address 
maintained by the bank. The bank is responsible for opening all receipts, maintaining 
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records of all customer payments received at the lockbox address, and depositing receipts 
into the company’s bank account on a timely basis. In other cases, receipts are submitted 
electronically from a customer’s bank account to a company bank account through the 
use of electronic funds transfer (EFT). When customers purchase goods by credit card, 
the issuer of the credit card uses EFT to transfer funds into the company’s bank account. 
For both lockbox systems and EFT transactions, the bank provides information to the 
company to prepare the cash receipt entries in the accounting records. 


Cash Receipts Transaction File This is a computer-generated file that includes all 
cash receipts transactions processed by the accounting system for a period, such as a day, 
week, or month. It includes the same type of information as the sales transaction file. 


Cash Receipts Journal or Listing This listing or report is generated from the cash 
receipts transaction file and includes all transactions for a time period. The same 
transactions, including all relevant information, are included in the accounts receivable 
master file and general ledger. 


When a customer is dissatisfied with the goods, the seller often accepts the return of the 
goods or grants a reduction in the charges. The company prepares a receiving report 
for returned goods and returns them to storage. Returns and allowances are recorded 
in the sales returns and allowances transaction file, as well as the accounts receivable 
master file. Credit memos are issued for returns and allowances to aid in maintaining 
control and to facilitate record keeping. 


Credit Memo A credit memo indicates a reduction in the amount due from a cus- 
tomer because of returned goods or an allowance. It often takes the same general form 
as a sales invoice, but it supports reductions in accounts receivable rather than increases. 


Sales Returns and Allowances Journal This is the journal used to record sales 
returns and allowances. It performs the same function as the sales journal. Many 


companies record these transactions ApagouPDEheEknhaneepunal. 


Regardless of the diligence of credit departments, some customers do not pay their 
bills. After concluding that an amount cannot be collected, the company must write it 
off. Typically, this occurs after a customer files for bankruptcy or the account is turned 
over to a collection agency. Proper accounting requires an adjustment for these 
uncollectible accounts. 


Uncollectible Account Authorization Form This is a document used internally to 
indicate authority to write an account receivable off as uncollectible. 


Because companies cannot expect to collect on 100% of their sales, accounting prin- 
ciples require them to record bad debt expense for the amount they do not expect 
to collect. Most companies record this transaction at the end of each month or 
quarter. 


Processing 

and Recording 
Sales Returns 
and Allowances 


Writing Off 
Uncollectible 
Accounts Receivable 


Providing for 
Bad Debts 


METHODOLOGY FOR DESIGNING TESTS OF CONTROLS 


AND SUBSTANTIVE TESTS OF TRANSACTIONS FOR SALES 





In this chapter, we’ve discussed account balances, classes of transactions, business 
functions, and related documents and records for the sales and collection cycle. Now, 
we will study the design of tests of controls and substantive tests of transactions for 
each of the five classes of transactions in the cycle. 

Figure 14-2 (p. 448) illustrates the methodology for obtaining an understanding of 
internal control and designing tests of controls and substantive tests of transactions for 
sales. The content of the figure was introduced and explained in Chapter 13. We will 


OBJECTIVE 14-3 


Understand internal 
control, and design and 


perform tests of controls 
and substantive tests of 
transactions for sales. 
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Understand 
Internal Control 
— Sales 


Assess 
Planned Control Risk 
— Sales 





Methodology for Designing Tests of Controls and Substantive 
Tests of Transactions for Sales 


Understand 
internal control — sales 


Assess planned 
control risk — sales 


—__—— 


Determine 
extent of 
testing controls* 























Audit procedures 


Design tests of 
controls and 
substantive tests 
of transactions 





Sample size 








to meet Items to select 
transaction-related 
audit objectives Timing 














*Extent of testing of controls is determined by planned reliance on controls. For accelerated filer 
public companies, testing must be sufficient to issue an opinion on internal control over financial 
reporting. 











organize the following discussion around this illustration and apply it to sales and cash 
receipe pa go. Hardware Co. 
© PDF Enhancer 


How bis inc lee obtain an understanding of internal control? Using one typical approach 
for sales, auditors study the client’s flowcharts, make inquiries of the client using an 
internal control questionnaire, and perform walkthrough tests of sales. We will examine 
the flowchart of the sales and cash receipts function for Hillsburg Hardware Co. in Figure 
14-3 to demonstrate the design of tests of controls and substantive tests of transactions 
audit procedures. 


The auditor uses the information obtained in understanding internal control to assess 
control risk. Four steps are essential steps to this assessment. 


1. The auditor needs a framework for assessing control risk. The six transaction- 
related audit objectives provide this framework. These are shown for sales for 
Hillsburg Hardware in Figure 10-5 (p. 309). These six objectives are the same 
for every audit of sales. 

2. The auditor must identify the key internal controls and deficiencies for sales, 
also shown in Figure 10-5. These will differ for every audit because every client 
has different internal controls. The controls and deficiencies for Hillsburg 
Hardware Co. were identified from the flowchart in Figure 14-3 and the 
internal control checklist in Figure 10-4 (p. 306). 

3. After identifying the controls and deficiencies, the auditor associates them 
with the objectives, as shown with C’s and D’s in appropriate columns in 
Figure 10-5. 

4. The auditor assesses control risk for each objective by evaluating the controls and 
deficiencies for each objective. This step is critical because it affects the auditor’s 
decisions about both tests of controls and substantive tests. It is a highly subjective 
decision. The bottom row of Figure 10-5 labeled “Assessed control risk” shows 
the auditor’s conclusions about assessed control risk for Hillsburg Hardware. 
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Hillsburg Hardware — Flowchart of Sales and Cash Receipts 
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NOTES 

1. All correspondence is sent to the president. 
All sales order numbers are accounted for weekly by the controller. 
All bills of lading numbers are accounted for weekly by the controller. 


YS 


BS 

4. 
The price list is stored in the inventory master file and can be changed 
only with authorization of the vice president of sales. 

. Duplicate sales invoice is compared with bill of lading daily by Pam 
Dilley for descriptions and quantities and the sales invoice is reviewed 

for reasonableness of the extensions and footing. She initials a copy 

of the invoice before the original is mailed to the customer. 

Sales are batched daily by Pam Dilley. The batch totals are compared 

with the sales journal weekly. 

Statements are sent to customers monthly. 

. Accounts receivable master file total is compared with general ledger 
by the controller on a monthly basis. 


ui 


io) 


on 


Sales amount recorded on sales invoice is based on standard price list. 








prelisting 











Prelisting 





Checks 








Key cash 
receipts 
transaction 


tz) 


Cash receipts 
transactions 
file 














Deposit 
slip 
prepared 











Gach Prelisting 


receipts 
journal 





. Unpaid invoices are filed separately from paid invoices. 

10. The receptionist stamps incoming checks with a restrictive 
endorsement immediately upon receipt. 

11. There are no cash sales. 

12. Deposits are made daily. 

13. Cash receipts are batched daily by the receptionist. The batch 

totals are compared with the cash receipts journal weekly. 

The bank account is reconciled by the controller on a monthly 

basis. 

All bad debt expense and write-off of bad debts are approved 

by the president after being initiated by the controller. 

Financial statements are printed monthly by the controller 

and reviewed by the president. 

17. All errors are reviewed daily by the controller immediately 

after the updating run. Corrections are made the same day. 


14. 


15. 


16. 








We next examine key control activities for sales. Knowledge of these control 
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activities assists in identifying the key controls and deficiencies for sales. 


Adequate Separation of Duties Proper separation of duties helps prevent various 
types of misstatements due to both errors and fraud. To prevent fraud, management 
should deny cash access to anyone responsible for entering sales and cash receipts 
transaction information into the computer. The credit-granting function should be 
separated from the sales function, because credit checks are intended to offset the 
natural tendency of sales personnel to optimize volume even at the expense of high bad 
debt write-offs. Personnel responsible for doing internal comparisons should be inde- 
pendent of those entering the original data. For example, comparison of batch control 
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Determine 
Extent of 
Testing Controls 


totals with summary reports and comparison of accounts receivable master file totals 
with the general ledger balance should be done by someone independent of those who 
input sales and cash receipt transactions. 


Proper Authorization The auditor is concerned about authorization at three key 
points: 

1. Credit must be properly authorized before a sale takes place. 

2. Goods should be shipped only after proper authorization. 

3. Prices, including basic terms, freight, and discounts, must be authorized. 


The first two controls are meant to prevent the loss of company assets by shipping to 
fictitious customers or those who will fail to pay for the goods. Price authorization is 
meant to ensure that the sale is billed at the price set by company policy. Authorization 
may be done for each individual transaction or general authorization may be given for 
specific classes of transactions. General authorizations are often done automatically by 
computer. 


Adequate Documents and Records Because each company has a unique system of 
originating, processing, and recording transactions, auditors may find it difficult to 
evaluate whether each client’s procedures are designed for maximum control. Never- 
theless, adequate record-keeping procedures must exist before most of the transaction- 
related audit objectives can be met. Some companies, for example, automatically 
prepare a multicopy prenumbered sales invoice at the time a customer order is received. 
Copies of this document are used to approve credit, authorize shipment, record the 
number of units shipped, and bill customers. This system greatly reduces the chance of 
the failure to bill a customer if all invoices are accounted for periodically, but controls 
have to exist to ensure the sale isn’t recorded until shipment occurs. Under a system in 
which the sales invoice is prepared only after a shipment has been made, the likelihood 
of failure to bill a customer is high unless some compensating control exists. In many 
organ pPagioaPbDinEnhance @Gd no paper documents are prepared. 


Prenumbered Documents Prenumbering is meant to prevent both the failure to bill 
or record sales and the occurrence of duplicate billings and recordings. Of course, it does 
not do much good to have prenumbered documents unless they are properly accounted 
for. To use this control effectively, a billing clerk will file a copy of all shipping documents 
in sequential order after each shipment is billed, while someone else will periodically 
account for all numbers and investigate the reason for any missing documents. 


Monthly Statements Sending monthly statements is a useful control because it 
encourages customers to respond if the balance is incorrectly stated. These statements 
should be controlled by persons who have no responsibility for handling cash or 
recording sales or accounts receivable to avoid the intentional failure to send the 
statements. For maximum effectiveness, all disagreements about the account balance 
should be directed to a designated person who has no responsibility for handling cash 
or recording sales or accounts receivable. 


Internal Verification Procedures Computer programs or independent personnel 
should check that the processing and recording of sales transactions fulfill each of the 
six transaction-related audit objectives. Examples include accounting for the numerical 
sequence of prenumbered documents, checking the accuracy of document preparation, 
and reviewing reports for unusual or incorrect items. 


After auditors identify the key internal controls and control deficiencies, they assess 
control risk, often using a matrix format similar to Figure 10-5 on page 309. For audits of 
accelerated filer public companies, the auditor must perform extensive tests of key 
controls and evaluate the impact of the deficiencies on the auditor’s report on internal 
control over financial reporting. The extent of testing of controls in audits of non- 
accelerated filers and nonpublic companies depends on the effectiveness of the controls 


450 Part 3 / APPLICATION OF THE AUDIT PROCESS TO THE SALES AND COLLECTION CYCLE 


and the extent to which the auditor believes they can be relied on to reduce control risk. 
In determining the extent of reliance to place on controls, the auditor also considers the 
cost of the increased tests of controls compared to the potential reduction in substantive 
tests. A lower assessed level of control risk will result in increased testing of controls to 
support the lower control risk, with a corresponding increase in detection risk and 
decrease in the amount of substantive tests. 


For each key control, one or more tests of controls must be designed to verify its 
effectiveness. In most audits, it is relatively easy to determine the nature of the test of 
the control from the nature of the control. For example, if the internal control is to 
initial customer orders after they have been approved for credit, the test of control is to 
examine the customer order for proper initials. 

The first three columns of Table 14-2 (pp. 452-453) illustrate the design of tests of 
controls for sales for Hillsburg Hardware Co. Column three shows one test of control 
for each key internal control in column two. Observe that this table is organized by 
transaction-related audit objective. For example, the second key internal control for 
the occurrence objective is “sales are supported by authorized shipping documents and 
approved customer orders.” The test of control is to “examine sales invoice for sup- 
porting bill of lading and customer order.” For this test, the auditor should start with 
sales invoices and examine documents in support of the sales invoices rather than 
going in the opposite direction. If the auditor traced from shipping documents to sales 
invoices, it is a test of completeness. (Direction of tests is discussed further on page 455.) 

As shown in the third column of Table 14-2 for the completeness objective, a 
common test of control for sales is to account for a sequence of various types of docu- 
ments. For example, accounting for a sequence of shipping documents and tracing each 
one to the duplicate sales invoice and recording in the sales journal provides evidence of 
completeness. 

To simultaneously provide evidence_of both. currence and completeness 
objectives, an auditor can check AR AGO: s Fienhance: Me sales 
journal and watch for duplicate and omitted numbers or invoices outside the normal 
sequence. Assume the auditor selects sales invoices #18100 to #18199. The completeness 
objective for this procedure will be satisfied if all 100 sales invoices are recorded. The 
occurrence objective will be satisfied if there is no duplicate recording of any of the 
invoice numbers. As indicated in Table 14-2, the lack of verification to prevent the possi- 
bility of duplicate recording of sales invoices is a deficiency at Hillsburg Hardware Co. 

The appropriate tests of controls for separation of duties are ordinarily restricted 
to the auditor’s observations of activities and discussions with personnel. For example, 
it is possible to observe whether the billing clerk has access to cash when incoming mail 
is opened or cash is deposited. It is usually also necessary to ask personnel what their 
responsibilities are and if there are any circumstances where their responsibilities are 
different from the normal policy. For example, the employee responsible for billing 
customers may state that he or she does not have access to cash. Further discussion may 
reveal that he or she actually takes over the cashier’s duties when the cashier is on vacation. 

Several of the tests of controls in Table 14-2 can be performed using the computer. 
For example, the auditor can test whether credit is properly authorized by the com- 
puter by attempting to initiate transactions that exceed a customer’s credit limit. If the 
control is working effectively, the proposed sales order should be rejected. The 
occurrence of sales can be similarly tested by attempting to input nonexistent customer 
numbers, which should be rejected by the computer. This key control will reduce the 
likelihood of fictitious sales. 


In deciding substantive tests of transactions, auditors commonly use some procedures 
on every audit regardless of the circumstances, whereas others are dependent on the 
adequacy of the controls and the results of the tests of controls. In the fifth column of 
Table 14-2, the substantive tests of transactions are related to the transaction-related 


Design Tests 
of Controls 
for Sales 


Design 
Substantive Tests of 
Transactions for Sales 
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TABLE 14-2 





Transaction-Related Audit Objectives, Key Existing Controls, Tests of Controls, Deficiencies, 
and Substantive Tests of Transactions for Sales—Hillsburg Hardware Co. 





Transaction- 
Related 
Audit Objectives 


Key Existing Controls* 


Test of Controlst Deficiencies* 


Substantive Tests 
of Transactionst 





Recorded sales are 
for shipments 
actually made 
to nonfictitious 
customers 
(occurrence). 


Credit is approved 
automatically by computer 
by comparison to 
authorized credit 
limits (C1). 

Sales are supported by 
authorized shipping 
documents and 
approved customer 
orders (C2). 

Batch totals of quantities 
shipped are compared 
with quantities billed (C6). 


Statements are sent 
to customers each 
month (C9). 


Examine customer order There is a lack 


for evidence of of internal 
credit approval verification for 
(13e). the possibility 


of sales invoices 
being recorded 
more than once 


(D1). 


Examine sales invoice 
for supporting bill of 
lading and customer 
order (13b). 


Examine file of batch 
totals for initials 
of data control 
clerk (8). 

Observe whether 
monthly statements 
are sent (6). 


Account for a sequence 
of sales invoices (12). 

Review sales journal 
and master file 
for unusual 
transactions and 
amounts (1). 

Trace sales journal 
entries to supporting 
documents, 
including duplicate 
sales invoice, bill 
of lading, sales 
order, and customer 
order (14). 





Existing sales 
transactions 
are recorded 
(completeness). 


Shipping documents are 
prenumbered and 
accounted for weekly 
(C5). 


Batch totals of quantities 
shipped are compared 
with quantities billed (C6). 


Account for a sequence 
of shipping 
documents (10). 


Examine file of batch 
totals for initials 
of data control 
clerk (8). 


Trace selected 
shipping documents 
to the sales journal 
to be sure that 
each one is included 


(11). 





Recorded sales are 
for the amount 
of goods 
shipped and are 
correctly billed 
and recorded 
(accuracy). 


Sales are supported by 
authorized shipping 
documents and approved 
customer orders (C2). 

Batch totals of quantities 
shipped are compared 
with quantities billed (C6). 


Unit selling prices are 
obtained from the price list 
master file of approved 
prices (C7). 

Statements are sent 
to customers each 
month (C9). 


Examine sales invoice 
for supporting 
documents (13b). 


Examine file of batch 
totals for initials 
of data control 
clerk (8). 

Examine the approved 
price list for accuracy 
and proper 
authorization (9). 

Observe whether 
monthly statements 
are sent (6). 


Trace entries in sales 
journal to sales 
invoices (13b). 

Recompute prices and 
extensions on sales 
invoices (13b). 

Trace details on sales 
invoices to 
* shipping 

documents (13c) 
* sales order (13d) 
* customer order (13e) 





Sales transactions 
are correctly 
included in the 
accounts 
receivable master 
file and are 
correctly 
summarized 
(posting and 
summarization). 





Computer automatically posts 
transactions to the 
accounts receivable 
master file and general 
ledger (C10). 

Accounts receivable master 
file is reconciled to the 
general ledger on a 
monthly basis (C11). 


Statements are sent to 
customers each month 
(C9). 


Examine evidence that 
accounts receivable 
master file is 
reconciled to the 
general ledger (7). 

Examine evidence that 
accounts receivable 
master file is 
reconciled to the 
general ledger (7). 

Observe whether 
monthly statements 
are sent (6). 


Trace selected sales 
invoices from the 
sales journal to the 
accounts receivable 
master file and test 
for amount, date, 
and invoice number 
(13a). 

Use audit software to 
foot and cross-foot 
the sales journal 
and trace totals to the 
general ledger (2) 





y 
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(Table 14-2 continued on next page) 


Part 3 / APPLICATION OF THE AUDIT PROCESS TO THE SALES AND COLLECTION CYCLE 





and Substantive Tests of Transactions for Sales—Hillsburg Hardware Co. (Cont.) 


Transaction-Related Audit Objectives, Key Existing Controls, Tests of Controls, Deficiencies, 


) 





Transaction- 





(classification). 


Related Substantive Tests 

Audit Objectives Key Existing Controls* Test of Controlst Deficiencies* of Transactionst 

Sales transactions Account classifications are Examine document Examine duplicate 
are correctly internally verified (C8). package for internal sales invoice 
classified verification (13b). for proper 


account classification 


(13b). 





the accountant (C5). 





XX 


Sales are recorded Shipping documents are Account for a sequence There is a lack of 
on the correct prenumbered and of shipping control to test for 
dates (timing). accounted for weekly by documents (10). timely recording 


Compare date of 
recording of sale in 
sales journal with 
duplicate sales 
invoice and bill 
of lading (13b 
and 13c). 





J 





* Controls (C) and Deficiencies (D) are from the control matrix for sales in Figure 10-5 (p. 309). Controls C3 and C4 from the control matrix are not included here. 
t The number in parentheses after each test of control and substantive test of transaction refers to an audit procedure in the performance format audit program in 


Figure 14-6 (p. 462). 


audit objectives in the first column and are designed to determine whether any monetary 
misstatements for that objective exist in the transaction. The audit procedures used are 
affected by the internal controls and tests of controls for that objective. Materiality, 
results of the prior year, and the other factors discussed in Chapter 9 also influence the 


procedures used. 
Determining the proper subst AAPA PRE RARANSehates is 


relatively difficult because they vary considerably depending on the circumstances. 
Table 14-2 addresses the substantive tests of transactions procedures in the order of the 
sales transaction-related audit objectives. Note that some audit procedures fulfill more 
than one transaction-related audit objective (For example, audit procedure (13b) is 
included for three objectives). 

The following paragraphs discuss substantive tests of transaction audit procedures 
that are done only when there are specific circumstances that require special audit 
attention, such as when there is a deficiency in internal control. 


Recorded Sales Occurred For this objective, the auditor is concerned with the 
possibility of three types of misstatements: 


1. Sales included in the journals for which no shipment was made. 
2. Sales recorded more than once. 
3. Shipments made to nonexistent customers and recorded as sales. 


The first two types of misstatements can be due to an error or fraud. The last type 
is always a fraud. The potential consequences of all three are significant because they 
lead to an overstatement of assets and income. 

Unintentional overstatements of sales are typically more easily discovered than 
fraudulent overstatements. An unintentional overstatement normally also results in an 
overstatement of accounts receivable, which the client can detect by sending monthly 
statements to customers. Unintentional misstatements at year-end can often be easily 
found by the auditor through confirmation procedures. With fraudulent overstatements, 
the perpetrator will attempt to conceal the overstatement, making it more difficult for 
auditors to find. Substantive tests of transactions may be necessary to discover overstated 
sales in these circumstances. 
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IDENTIFIES 


TECHNIQUES TO 


454 


FRAUDULENTLY 
MISSTATE 
REVENUE 


The appropriate substantive tests of transactions for testing the occurrence objec- 
tive depend on where the auditor believes misstatements are likely. Many auditors do 
substantive tests of transactions for the occurrence objective only if they believe that a 
control deficiency exists. Therefore, the nature of the tests depends on the nature of the 
potential misstatement as follows: 


Recorded Sale for Which There Was No Shipment The auditor can vouch selected 
entries in the sales journal to related copies of shipping and other supporting docu- 
ments to make sure they occurred. If the auditor is concerned about the possibility of a 
fictitious duplicate copy of a shipping document, it may be necessary to trace the 
amounts to the perpetual inventory records as a test of whether inventory was reduced. 


Sale Recorded More Than Once Duplicate sales can be determined by reviewing a 
numerically sorted list of recorded sales transactions for duplicate numbers. The 
auditor can also test for the proper cancellation of shipping documents. Proper 
cancellation decreases the likelihood that a shipping document will be used to record 
another sale. 


Shipment Made to Nonexistent Customers This type of fraud normally occurs only 
when the person recording sales is also in a position to authorize shipments. Deficient 
internal controls make it difficult to detect fictitious shipments, such as shipments to 
other locations of the company. To test for nonexistent customers, the auditor can trace 
customer information on the sales invoice to the customer master file. These revenue 
frauds are often referred to as “sham sales.” 


Another effective approach to detecting the three types of misstatements of sales 
transactions just discussed is to trace the credit in the accounts receivable master file to 
its source. If the receivable was actually collected in cash or the goods were returned, a 
sale must have originally occurred. If the credit was for a bad debt write-off or a credit 


A recent study commissioned by the Committee agreement to “hold” goods until the 

of Sponsoring Organizations of the Treadway customer was ready for receipt of those 
Commission (COSO) analyzes fraudulent financial goods. 

reporting by U.S public companies over the period Premature revenues before all the terms 
1998-2007. The study found that 61 percent of the sale were completed. Generally this 
of the 347 alleged cases examined involved involved recording sales after the goods 
companies fraudulently misstating revenues using were ordered but before they were shipped 
a variety of techniques including the following: to the customer. 


¢ Sham sales. To conceal the fraud, manage- Improper cutoff of sales. To increase 
ment often falsified inventory records, revenues, the accounting records were 
shipping records, and invoices to record a held open beyond the balance sheet date 
sale. In some cases, the company recorded to record sales of the subsequent accounting 
sales for goods merely shipped to another period in the current period. 
company location. © Improper use of the percentage of com- 
Conditional sales. These transactions were pletion method. Revenues were overstated 
recorded as revenues even though the sales by accelerating the estimated percentage of 
involved unresolved contingencies or the completion for projects in process. 
terms of the sale were amended afterwards Unauthorized shipments. Revenues were 
by side letter agreements. overstated by shipping goods never ordered 

 Round-tripping or recording loans as sales. by the customer or by shipping defective 
In some cases, management recorded loan products and recording revenues at full, 
proceeds as revenues. In other cases, rather than discounted, prices. 
companies recorded sales by shipping o Consignment sales. Revenues were recorded 
goods to alleged customers and then for consignment shipments or shipments of 
providing funds to the customers to pay goods for customers to consider on a trial 
back to the company. basis. 

¢ Bill and hold transactions. Several Source: Adapted from Fraudulent Financial 
companies improperly recorded revenue Reporting: 1998-2007, An Analysis of U.S. Public 
by billing customers in advance with an Companies, COSO, New York, 2010 (www.coso.org). 
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memo, or if the account was still unpaid at the time of the audit, this could indicate an 
inappropriately recorded sales transaction. The auditor must examine shipping and 
customer order documents to determine if there is adequate support that a sales trans- 
action actually occurred. 

SAS 99 indicates that the auditor should normally identify improper revenue 
recognition as a fraud risk. However, substantive tests of transactions should be necessary 
for improper revenue recognition only if the auditor is concerned about fraud due to 
inadequate controls. 


Existing Sales Transactions Are Recorded In many audits, no substantive tests of 
transactions are done for the completeness objective. This is because overstatements of 
assets and income from sales transactions are more likely than understatements, and 
overstatements also represent a Breage r source of “454 ee oF rols are inadequate, 
which is likely if the client does Apagau. 3) nhan AGE pping 
documents to the sales journal, substantive tests are necessary. 

To test for unbilled shipments, auditors can trace selected shipping documents 
from a file in the shipping department to related duplicate sales invoices and the sales 
journal. To conduct a meaningful test using this procedure, the auditor must be confi- 
dent that all shipping documents are included in the file. This can be done by accounting 
for a numerical sequence of the documents. Generalized audit software tools, such as 
ACL or IDEA, can be used to efficiently identify duplicates and gaps in the numerical 
sequence of electronic records. 


Direction of Tests Auditors need to understand the difference between tracing from 
source documents to the journals and vouching from the journals back to source docu- 
ments. The former tests for omitted transactions (completeness objective); the latter 
tests for nonexistent transactions (occurrence objective). 

To test for the occurrence objective, the auditor starts by selecting a sample of invoice 
numbers from the journal and vouches them to duplicate sales invoices, shipping docu- 
ments, and customer orders as illustrated in Figure 14-4. In testing for the completeness 
objective, the auditor typically starts by selecting a sample of shipping documents and 
traces them to duplicate sales invoices and the sales journal as a test of omissions. 

When designing audit procedures for the occurrence and completeness objectives, 
the starting point for the test is essential. This is called the direction of tests illustrated 
in Figure 14-4. For example, if the auditor is concerned about the occurrence objective 
but tests in the wrong direction (from shipping documents to the journals), a serious 
audit deficiency exists. In testing for the other four transaction-related audit objectives, 
the direction of tests is usually not relevant. For example, the accuracy of sales trans- 
actions can be tested by testing from a duplicate sales invoice to a shipping document 
or vice versa. 
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Sales Are Accurately Recorded The accurate recording of sales transactions 
concerns: 


» Shipping the amount of goods ordered 
* Accurately billing for the amount of goods shipped 
* Accurately recording the amount billed in the accounting records 


Auditors typically do substantive tests of transactions in every audit to ensure that 
each of these three aspects of accuracy are done correctly by recalculating information 
in the accounting records and comparing information on different documents. 
Auditors commonly compare prices on duplicate sales invoices with an approved price 
list, recalculate extensions and footings, and compare the details on the invoices with 
shipping records for description, quantity, and customer identification. Often, auditors 
also examine customer orders and sales orders for the same information. 

The comparison of tests of controls and substantive tests of transactions for the 
accuracy objective is a good example of how audit time can be saved when effective 
internal controls exist. Obviously, the test of control for this objective takes almost 
no time because it involves examining only an initial or other evidence of internal 
verification. If this control is effective, the sample size for substantive tests of trans- 
actions can be reduced, yielding a significant savings. 

When sales invoices are automatically calculated and posted by a computer, the 
auditor may be able to reduce substantive tests of transactions for the accuracy 
objective. If the auditor determines that the computer is programmed accurately and 
the price list master file is authorized and correct, detailed invoice computations can be 
reduced or eliminated. In this case, the auditor focuses on determining that effective 
computer controls exist to ensure that the computer is properly programmed and has 
not been altered since it was last tested by the auditor. Tests of controls would focus on 
the authorization and accuracy of changes to the price list master file. 


2 AB AGE n or aban jn the Master File and Correctly 
Sum. e POF. S e ansactions in the accounts receivable 
master file is essential because the accuracy of these records affects the client’s ability to 
collect outstanding receivables. Similarly, the sales journal must be correctly totaled 
and posted to the general ledger if the financial statements are to be correct. In most 
engagements, auditors perform some clerical accuracy tests, such as footing the 
journals and tracing the totals and details to the general ledger and the master file, to 
check whether there are errors or fraud in the processing of sales transactions. The 
extent to which such tests are needed is determined by the quality of internal controls. 
Generalized audit software allows for efficient testing of the accuracy of electronic 
journals and records. 

Tracing from the sales journal to the master file is typically done as a part of ful- 
filling other transaction-related audit objectives, but footing the sales journal and 
tracing the totals to the general ledger are done as separate procedures. 

Posting and summarization tests differ from those for other transaction-related 
audit objectives because they include footing journals, master file records, and ledgers, 
and tracing from one to the other among these three. 

When footing and comparisons are restricted to these three records, the transaction- 
related audit objective is posting and summarization. When the journals, master files, 
or ledgers are traced to or from a document, the objective is one of the other five 
objectives, depending on what is being verified. To illustrate, when an auditor compares 
an amount on a duplicate sales invoice with either the sales journal or master file entry, 
it is an accuracy audit objective procedure. When an auditor traces an entry from the 
sales journal to the master file, it is a posting and summarization procedure. 


Recorded Sales Are Correctly Classified Although it is less of a problem in sales 
than in some transaction cycles, auditors must still be concerned that transactions are 
charged to the correct general ledger account. With cash and credit sales, company 
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personnel should not debit accounts receivable for a cash sale or credit sales for collec- 
tion of a receivable. They should also not classify sales of operating assets, such as 
buildings, as sales. For those companies using more than one sales classification, such 
as companies issuing segmented earnings statements, proper classification is essential. 
Auditors commonly test sales for proper classification as part of testing for accuracy. 
They examine supporting documents to determine the proper classification of a given 
transaction and compare this with the actual account to which it is charged. 


Sales Are Recorded on the Correct Dates Sales should be billed and recorded as 
soon after shipment takes place as possible to prevent the unintentional omission of 
transactions from the records and to make sure that sales are recorded in the proper 
period. Timely recorded transactions are also less likely to contain misstatements. 
When auditors do substantive tests of transactions procedures for accuracy they 
commonly compare the date on selected bills of lading or other shipping documents 
with the date on related duplicate sales invoices, the sales journal, and the accounts 
receivable master file. Significant differences indicate potential cutoff problems in the 
test of year-end balances. 


Figure 14-2 (p. 448) is an overview of how auditors design tests of controls and sub- 
stantive tests of transactions for sales. Table 14-2 (pp. 452-453) is a matrix that shows 
how auditors decide tests of controls and substantive tests of transactions for sales after 
controls and control deficiencies have been identified. The following is a discussion of 
Table 14-2. 


Transaction-Related Audit Objectives (Column 1) The transaction-related audit 
objectives for sales in Table 14-2 are derived from the framework presented in earlier 
chapters. Although certain internal controls satisfy more than one objective, auditors 
should consider each objective separately to facilitate a better assessment of control risk. 


Key Existing Controls (Column Apagon PDFsEnhancerols for 
sales to achieve the six transaction-related audit objectives. If the controls necessary to 
satisfy any one of the objectives are inadequate, the likelihood of misstatements 
related to that objective is increased, regardless of the controls for the other objectives. 
(The methodology for determining existing controls was addressed on page 308 in 
Chapter 10.) 

The controls in column 2 were identified by the auditor earlier in the audit and 
come from the auditor’s control risk matrix such as the one illustrated in Figure 10-5 
(p. 309). A control is included in more than one row in Table 14-2 if there is more than 
one C for that control on the control risk matrix. 


Tests of Controls (Column 3) For each internal control in column 2, the auditor 
designs a test of control to verify its effectiveness. Observe that the tests of controls in 
Table 14-2 relate directly to the internal controls. For each control, there should be at 
least one test of control, but there can be more than one. 


Deficiencies (Column 4) Deficiencies identified by the auditor indicate the absence 
of effective controls. The auditor should evaluate control deficiencies by considering 
potential misstatements that could occur and any compensating controls. An auditor 
can respond to a deficiency in internal control in a financial statement audit by expand- 
ing substantive tests of transactions to determine whether the deficiency resulted in a 
significant number of misstatements. 


Substantive Tests of Transactions (Column 5) These tests help auditors deter- 
mine whether monetary misstatements exist in sales transactions. In Table 14-2, the 
substantive tests of transactions directly relate to the objectives in the first column. 


It is essential for auditors to understand the relationships among the columns in 
Table 14-2. 


Summary of 
Methodology for Sales 
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* The first column includes the six transaction-related audit objectives. The 
general objectives are the same for any class of transactions, but the specific 
objectives vary for sales, cash receipts, or any other classes of transactions. 

* Column 2 lists one or more illustrative internal controls for each transaction- 
related audit objective. Each control must be related to one or more audit objectives. 

* Column 3 includes one test of control that tests the internal control in column 
2. A test of control has no meaning unless it tests a specific control. The table 
contains one test of control in column 3 for each internal control in column 2, 
but the auditor can decide to use more than one test of control for a given control. 

* Column 4 includes internal control deficiencies. They represent a lack of 
effective internal controls and are determined using the same approach used for 
identifying controls. 

* The last column includes common substantive tests of transactions that support 
a specific transaction-related audit objective in column 1. The substantive tests of 
transactions are not directly related to the key control or test of control columns, 
but the extent of substantive tests of transactions depends, in part, on which key 
controls exist, the results of the tests of controls, and any internal control 
deficiencies for the transaction-related audit objective. 


Design and The information presented in Table 14-2 (pp. 452-453) is intended to help auditors 
Performance Format design audit programs that satisfy the transaction-related audit objectives in a given set 
Audit Procedures of circumstances. This methodology helps the auditor design an effective and efficient 


audit program that responds to the unique risks of material misstatements at each client. 
After the appropriate audit procedures for a given set of circumstances have been 
designed, they must, of course, be performed. However, it is likely to be inefficient to do 
the audit procedures as they are stated in the design format of Table 14-2. In converting 
from a design format audit program to a performance format audit program, pro- 
cedur Ap combine HHA following: 
34, Apago,. Pb icaté proce Lia 
* Makes sure that when a given document is examined, all procedures to be 
performed on that document are done at that time. 
* Enables the auditor to do the procedures in the most effective order. For example, 
by footing the journal and reviewing the journal for unusual items first, the 
auditor gains a better perspective in doing the detailed tests. 


Figure 14-6 (p. 462) illustrates a performance format audit program for sales and 
cash receipts for Hillsburg Hardware. It is a summary of the audit procedures in Tables 
14-2 and 14-3 (p. 461). The numbers for the audit procedures in Figure 14-6 correspond 
to the numbers at the end of the tests of control and substantive audit procedures in 
Tables 14-2 and 14-3. These numbers are included to help you see the relationship 
between the two tables and Figure 14-6. 


SALES RETURNS AND ALLOWANCES 





OBJECTIVE 14-4 The transaction-related audit objectives and the client’s methods of controlling mis- 

ik statements are essentially the same for processing credit memos as those described for 
pply the methodology ‘ : ; ais i 

fan Gans GER GAGE sales, with two differences. The first is materiality. In many instances, sales returns and 

transactions to controls allowances are so immaterial the auditor can ignore them. 

over sales returns and The second difference is emphasis on the occurrence objective. For sales returns and 

allowances. allowances, auditors usually emphasize testing recorded transactions to uncover any theft 





of cash from the collection of accounts receivable that was covered up by a fictitious sales 
return or allowance. (Although auditors usually emphasize the occurrence objective for sales 
returns and allowances transactions, the completeness objective is especially important in 
tests of account balances to determine if sales and returns are understated at year-end.) 
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purchase up to 2 years’ inventory of contact lenses. 
The lenses had to be purchased before December 
24, when Bausch & Lomb closed its books. The 
distributors claimed that their oral agreements 
with Bausch & Lomb meant they would not have 
to pay for the lenses until they were sold. If these 
agreements existed, the shipments of lenses 
should not have been recognized as sales. 

Ten months after the December sales, most of 
the lenses had not been sold and Bausch & Lomb 
had collected less than 15 percent of the accounts 
receivable from the sales. In October 1994, Bausch 


& Lomb agreed to take back three-quarters of the 
inventory that had been shipped the previous 
December, resulting in an unexpected charge to 


In 2006, Bausch & Lomb was forced to recall 
all of its ReNu with MoistureLoc contact lens 
solution because of a reported association with 
eye infections. Although the company’s CEO 
estimated that costs associated with the recall 
would be in the $50 million to $70 million range, 
an analyst estimated that the potential liability 
from the recall could rise to the $500 million to 
$1 billion level. 


SALES CAN __ Significant sales returns can occur due to product 
defects or because the client shipped unwanted 
BE RETURNED product. Bausch & Lomb experienced significant 
( AND COME BACK _ ‘eturns for both reasons. quarterly earnings. 
Late in 1993, Bausch & Lomb, Inc. informed its 
TO HAUNT YOU) independent distributors that they would have to 


Source: Adapted from: 1. Mark Maremont, 
“Numbers Game at Bausch & Lomb?” BusinessWeek 
(December 19, 1994), pp. 108-110. 2. Reuters, 
“Bausch Extends Lens Solution Recall Worldwide,” 
www.moneycentral.msn.com (May 15, 2006). 





Naturally, other objectives should not be ignored. But because the objectives and 


methodology for auditing sales returns and allowances are essentially the same as for 
sales, we do not include a detailed study of them. If you need to audit sales returns and 
allowances, you should be able to apply the same logic to arrive at suitable controls, 
tests of controls, and substantive tests of transactions to verify the amounts. 


METHODOLOGY FOR DESIGNING TESTS OF CONTROLS 


AND SUBSTANTIVE TESTS OF TRANSACTIONS FOR CASH RECEIPTS 





Auditors use the same methodology for designing tests of controls and substantive 
tests of transactions for cash receipts as they use for sales. Cash receipts tests of controls 
and substantive tests of transactions audit procedures are developed around the same 
framework used for sales, but of course the specific objectives are applied to cash 
receipts. Given the transaction-related audit objectives, the auditor follows this 
process: 


* Determine key internal controls for each audit objective 

* Design tests of control for each control used to support a reduced control risk 

* Design substantive tests of transactions to test for monetary misstatements for 
each objective 


As in all other audit areas, the tests of controls depend on the controls the auditor 
identifies, the extent they will be relied on to reduce assessed control risk, and whether 
the company being audited is publicly traded. 

Figure 14-5 (p. 460) presents the control risk matrix for cash receipts for Hillsburg 
Hardware. It is based on the information in the sales and cash receipts flowchart in 
Figure 14-3 (p. 449). 

Table 14-3 lists key internal controls, common tests of controls, and common 
substantive tests of transactions to satisfy each of the transaction-related audit objec- 
tives for cash receipts for Hillsburg Hardware Co. Table 14-3 follows the same format 
used for sales as shown in Table 14-2. The tests of controls and substantive tests of 
transactions for cash receipts are combined with those for sales in the performance 
format audit program in Figure 14-6. 

Because the methodology for cash receipts is similar to that for sales, our discus- 
sion is not as detailed as our discussion of the internal controls, tests of controls, and 


OBJECTIVE 14-5 





Understand internal control, 
and design and perform tests 
of controls and substantive 
tests of transactions for cash 
receipts. 
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Control Risk Matrix for Hillsburg Hardware Co.— Cash Receipts 








CASH RECEIPTS TRANSACTION-RELATED AUDIT OBJECTIVES 


Cash received is recorded in the cash 
receipts journal (completeness). 





Cash receipts are correctly included 
in the accounts receivable master 
file and are correctly summarized 


(posting and summarization). 
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correctly classified (classification). 
Cash receipts are recorded on the 


recorded at the amounts received 
correct dates (timing). 


Cash receipts are deposited and 
(accuracy). 


Cash receipts transactions are 


INTERNAL CONTROL 


Accountant independently 
reconciles bank account (C1). 


Oo 





Prelisting of cash receipts is prepared (C2). 





jo) 


Checks are restrictively endorsed (C3). 


Batch totals of cash receipts are compared with 
computer summary reports (C4). 


(o) 
(a) 





Statements are sent to customers 
each month (C5). 


(@) 
(@) 
(@) 


CONTROLS 


Cash receipts transactions are internally verified (C6). 


Procedures require recording of cash 
on a daily basis (C7). 





Computer automatically posts transactions to 
the accounts receivable master file and to the 
general ledger (C8). 





Accounts receivable master file is reconciled to the 
general ledger on a monthly basis (C9). 





Prelisting of cash is not used to verify recorded cash 
receipts (D1). 


iS) 


DEFICIENCY 


Assessed control risk Low Medium Low Low Low Low 




















(oa) 
(o) G) 
G) 


C = Control; D = Significant deficiency or material weakness 
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substantive tests of transactions for the audit of sales. Instead, we focus on the 
substantive audit procedures that are most likely to be misunderstood. 

An essential part of the auditor’s responsibility in auditing cash receipts is to 
identify deficiencies in internal control that increase the likelihood of fraud. To expand 
on Table 14-3, we emphasize those audit procedures that are designed primarily for the 
discovery of fraud. We omit discussion of some procedures only because their purpose 
and the methodology for applying them should be apparent from the description 
provided in Table 14-3. 
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TABLE 14-3 


Transaction-Related Audit Objectives, Key Existing Controls, Tests of Controls, Deficiencies, ) 
and Substantive Tests of Transactions for Cash Receipts — Hillsburg Hardware Co. 





Transaction- 
Related 
Audit Objectives 


Key Existing Controls* 


Test of Controlst 


Deficiencies* 


Substantive Tests 
of Transactionst 





Recorded cash 
receipts are for 
funds actually 
received by the 
company 
(occurrence). 


Accountant independently 
reconciles bank account 


(Cl): 


Batch totals of cash 
receipts are compared 
with computer summary 
reports (C4). 


Observe whether 
accountant 
reconciles bank 
account (3). 

Examine file of batch 
totals for initials 
of data control 
clerk (8). 


Review cash receipts 
journal and master file 
for unusual transactions 
and amounts (1). 

Trace cash receipts entries 
from the cash receipts 
journal entries to the 
bank statement (19). 

Prepare a proof of cash 
receipts (18). 





Cash received is 
recorded in the 
cash receipts 
journal 
(completeness). 


Prelisting of cash receipts 
is prepared (C2). 

Checks are restrictively 
endorsed (C3). 


Batch totals of cash receipts 
are compared with computer 
summary reports (C4). 
Statements are sent to cus- 
tomers each month (C5). 


Observe prelisting of 
cash receipts (4). 

Observe endorsement 
of incoming 
checks (5). 

Examine file of batch 
totals for initials of 
data control clerk (8). 

Observe whether monthly 


statements are sent (6). 


Prelisting of cash 
is not used to 
verify recorded 
cash receipts 


(D1). 


Obtain prelisting of cash 
receipts and trace amounts 
to the cash receipts 
journal, testing for names, 
amounts, and dates (15). 

Compare the prelisting with 
the duplicate deposit 


slip (16). 





Cash receipts 
are deposited and 
recorded at the 
amounts received 
(accuracy). 


Accountant independently 
reconciles bank account 
(C1). 

Batch totals of cash receipts 
are compared with computer 
summary reports (C4). 

Statements are sent to cus- 
tomers each month (C5). 


Observe whether 
accountant reconciles 
bank account (3). 

Examine file of batch 
totals for initials of 
data control clerk (8). 

Observe whether monthly 


statements are sent (6). 


Obtain prelisting of cash 
receipts and trace 
amounts to the cash 
receipts journal, testing 
for names, amounts, 
and dates (15). 

Prepare proof of cash 
receipts (18). 





Cash receipts are 
correctly included in 
the accounts 
receivable master file 
and are correctly 
summarized (posting 
and summarization). 


Statements are sent to 
customers each month 
(C5). 

Computer automatically 
posts transactions to 
the accounts receivable 
master file and 
general ledger (C8). 

Accounts receivable 
master file is reconciled 
to the general ledger on 
a monthly basis (C9). 


Observe whether 
monthly statements 
are sent (6). 

Examine evidence that 
accounts receivable 
master file is 
reconciled to 
general ledger (7). 

Examine evidence that 
accounts receivable 
master file is 
reconciled to 
general ledger (7). 


Trace selected entries from 
the cash receipts journal 
to the accounts receivable 
master file and test for 
dates and amounts (20). 

Trace selected credits from 
the accounts receivable 
master file to the cash 
receipts journal and test 
for dates and amounts (21). 

Use audit software to foot 
and cross-foot the sales 
journal and trace totals 
to the general ledger (2). 





Cash receipts transactions 
are correctly classified 
(classification). 


Cash receipts transactions 
are internally verified 
(C6). 


Examine evidence of 
internal verification 


(15). 


Examine prelisting for 
proper account 
classification (17). 





Cash receipts are 
recorded on the 
correct dates 
(timing). 





Procedures require 
recording of cash on 
a daily basis (C7). 


Observe unrecorded cash 
at a point in time (4). 


Compare date of deposit per 
bank statement to the 
dates in the cash receipts 
journal and prelisting of 
cash receipts (16). 








* Controls (C) and Deficiencies (D) are from control matrix for cash receipts in Figure 14-5. 
t The number in parentheses after each test of control and substantive test of transaction refers to an audit procedure in the performance format audit program in 


Figure 14-6 (p. 462). 
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Determine Whether 
Cash Received 
Was Recorded 








Audit Program for Tests of Controls and Substantive Tests of 
Transactions for Sales and Cash Receipts for Hillsburg Hardware 
Co. (Performance Format) 


HILLSBURG HARDWARE CO. 

Tests of Controls and Substantive Tests of Transactions Audit Procedures 
for Sales and Cash Receipts 

(Sample size and the items in the sample are not included.) 


General 
1. Review journals and master file for unusual transactions and amounts. 
2. Use audit software to foot and cross-foot the sales and cash receipts journals and 
trace the totals to the general ledger. 

. Observe whether accountant reconciles the bank account. 

. Observe whether cash is prelisted and the existence of any unrecorded cash. 

. Observe whether restrictive endorsement is used on cash receipts. 

. Observe whether monthly statements are sent. 

. Observe whether accountant compares master file total with general ledger account. 

. Examine file of batch totals for initials of data control clerk. 

. Examine the approved price list in the inventory master file for accuracy and proper 
authorization. 


Shipment of Goods 

10. Account for a sequence of shipping documents. 

11. Trace selected shipping documents to the sales journal to be sure that each one has 
been included. 


Billing of Customers and Recording the Sales in the Records 
12. Account for a sequence of sales invoices in the sales journal. 
13. Trace selected sales invoice numbers from the sales journal to 

a. accounts receivable master file and test for amount, date, and invoice number. 

b. duplicate sales invoice and check for the total amount recorded in the journal, 
date, customer name, and account classification. Check the pricing, extensions, 
and footings. Examine underlying documents for indication of internal verification. 

c. bill of lading and test for customer name, product description, quantity, and date. 

d. duplicate sales order and test for customer name, product description, quantity, 
date, and indication of internal verification. 

e. customer order and test for customer name, product description, quantity, date, 
and credit approval. 

14. Trace recorded sales from the sales journal to the file of supporting documents, which 
includes a duplicate sales invoice, bill of lading, sales order, and customer order. 


Processing Cash Receipts and Recording the Amounts in the Records 

15. Obtain the prelisting of cash receipts and trace amounts to the cash receipts journal, 
testing for names, amounts, dates, and internal verification. 

16. Compare the prelisting of cash receipts with the duplicate deposit slip, testing for 
names, amounts, and dates. Trace the total from the cash receipts journal to the 
bank statement, testing for a delay in deposit. 

17. Examine prelisting for proper account classification. 

18. Prepare a proof of cash receipts. 

19. Trace cash receipt entries from the cash receipts journal to the bank statement, 
testing for dates and amounts of deposits. 

20. Trace selected entries from the cash receipts journal to entries in the accounts 
receivable master file and test for dates and amounts. 

21. Trace selected credits from the accounts receivable master file to the cash receipts 
journal and test for dates and amounts. 


ODNAUBW 





The most difficult type of cash embezzlement for auditors to detect is when it occurs 
before the cash is recorded in the cash receipts journal or other cash listing, especially if 
the sale and cash receipt are recorded simultaneously. For example, if a grocery store 
clerk takes cash and intentionally fails to record the sale and receipt of cash on the cash 
register, it is extremely difficult to discover the theft. To prevent this type of fraud, 
internal controls such as those included in the second objective in Table 14-3 (p. 461) 
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are implemented by many companies. The type of control will, of course, depend on 
the type of business. For example, the controls for a retail store in which the cash is 
received by the same person who sells the merchandise and enters cash receipts in a 
cash register should be different from the controls for a company in which all receipts 
are received through the mail several weeks after the sales have taken place. 

It is normal practice to trace from prenumbered remittance advices or prelists of 
cash receipts to the cash receipts journal and subsidiary accounts receivable records as 
a substantive test of the recording of actual cash received. This test will be effective only 
if a cash register tape or some other prelisting was prepared at the time cash was received. 


A useful audit procedure to test whether all recorded cash receipts have been deposited 
in the bank account is a proof of cash receipts. In this test, the total cash receipts 
recorded in the cash receipts journal for a given period, such as a month, are reconciled 
with the actual deposits made to the bank during the same period. A difference in the 
two may be the result of deposits in transit and other items, but the amounts can be 
reconciled and compared. This procedure is not useful in discovering cash receipts that 
have not been recorded in the journals or time lags in making deposits, but it can help 
uncover recorded cash receipts that have not been deposited, unrecorded deposits, 
unrecorded loans, bank loans deposited directly into the bank account, and similar 
misstatements. Ordinarily, this somewhat time-consuming procedure is used only when 
the controls are deficient. In rare instances, when controls are extremely weak, the 
period covered by the proof of cash receipts may cover the entire year. 


Lapping of accounts receivable is the postponement of entries for the collection of 
receivables to conceal an existing cash shortage. The embezzlement is perpetrated by a 
person who handles cash receipts and then enters them into the computer system. He or 
she defers recording the cash receipts from one customer and covers the shortages with 
receipts of another. These in turn are covered from the receipts of a third customer a few 
days later. The employee must contiApagohPDEse Enhlanaee fpping, 
replace the stolen money, or find another way to conceal the shortage. 

This embezzlement can be easily prevented by separation of duties and a mandatory 
vacation policy for employees who both handle cash and enter cash receipts into the 
system. It can be detected by comparing the name, amount, and dates shown on remit- 
tance advices with cash receipts journal entries and related duplicate deposit slips. 
Because this procedure is relatively time-consuming, it is ordinarily performed only when 
specific concerns with embezzlement exist because of a deficiency in internal control. 


Prepare Proof 
of Cash Receipts 


Test to 
Discover Lapping of 
Accounts Receivable 


AUDIT TESTS FOR THE WRITE-OFF OF UNCOLLECTIBLE ACCOUNTS 


The same as for sales returns and allowances, the auditor’s primary concern in the 
audit of the write-off of uncollectible accounts receivable is the possibility of client 
personnel covering up an embezzlement by writing off accounts receivable that have 
already been collected (the occurrence transaction-related audit objective). The major 
control for preventing this fraud is proper authorization of the write-off of 
uncollectible accounts by a designated level of management only after a thorough 
investigation of the reason the customer has not paid. 

Normally, verification of the accounts written off takes relatively little time. 
Typically, the auditor examines approvals by the appropriate persons. For a sample of 
accounts written off, it is also usually necessary for the auditor to examine corres- 
pondence in the client’s files establishing their uncollectibility. In some cases, the 
auditor also examines credit reports such as those provided by Dun & Bradstreet. After 
the auditor has concluded that the accounts written off by general journal entries are 
proper, selected items should be traced to the accounts receivable master file to test 
whether the write-off was properly recorded. 


OBJECTIVE 14-6 


Apply the methodology for 
controls over the sales and 


collection cycle to write-offs 
of uncollectible accounts 
receivable. 
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The estimation of bad debt expense, which is the fifth class of transactions in the 
sales and collection cycle, obviously relates to the write-off of uncollectible accounts. 
However, because the estimation of bad debts is based on the year-end accounts 
receivable balances, the auditor evaluates the estimate for uncollectible accounts as 
part of the tests of details of ending accounts receivable balances, which we discuss in 
Chapter 16. 


ADDITIONAL INTERNAL CONTROLS OVER ACCOUNT BALANCES 


AND PRESENTATION AND DISCLOSURE 





Our preceding discussion emphasized internal controls, tests of controls, and substan- 
tive tests of transactions for the five classes of transactions that affect account balances 
in the sales and collection cycle. If the internal controls for these classes of transactions 
are determined to be effective and the related substantive tests of transactions support 
the conclusions, the likelihood of misstatements in the financial statements is reduced. 
In addition, internal controls directly related to account balances and presen- 
tations and disclosures may exist, even if they have not been identified or tested as a 
part of tests of controls or substantive tests of transactions. For the sales and collection 
cycle, these are most likely to affect the realizable value and rights and obligations 
balance-related objectives and the four presentation and disclosure objectives. 
Realizable value is an essential balance-related audit objective for accounts receivable 
because collectibility of receivables is often a major financial statement item. It has been 
an issue in a number of accountants’ liability cases. Therefore, auditors commonly set 
inherent risk as high for the realizable value objective. Ideally, clients establish several 
controls to reduce the likelihood of uncollectible accounts. We’ve already discussed 


credit RBAGS By ani BBE" shah por Lee other controls are: 
: e BS inn Oo erlodic age ec oounis receivable trial balance for review 
and follow-up by appropriate management personnel. 


» A policy of writing off uncollectible accounts when they are no longer likely to 
be collected. 


Rights and obligations and presentation and disclosure are rarely a significant 
problem for accounts receivable. Therefore, competent accounting personnel are 
typically sufficient controls for these audit objectives. 


EFFECT OF RESULTS OF TESTS OF CONTROLS 


AND SUBSTANTIVE TESTS OF TRANSACTIONS 





The results of the tests of controls and substantive tests of transactions have a 
significant effect on the remainder of the audit, especially on substantive tests of details 
of balances. The parts of the audit most affected by the tests of controls and substantive 
tests of transactions for the sales and collection cycle are the balances in accounts 
receivable, cash, bad debt expense, and allowance for doubtful accounts. 

Furthermore, if the test results are unsatisfactory, it is necessary to do additional 
substantive testing of sales, sales returns and allowances, write-off of uncollectible 
accounts, and processing cash receipts. Auditors of accelerated filer public companies 
must also consider the impact of the unsatisfactory test results on the audit of internal 
control over financial reporting. 

At the completion of the tests of controls and substantive tests of transactions, 
auditors must analyze each exception, for both public and nonpublic audits, to 
determine its cause and the implication of the exception on assessed control risk, 
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Types of Audit Tests for the Sales and Collection Cycle 
(see Figure 14-1 on page 442 for accounts) 





Sales Accounts Receivable Cash in Bank 





<— Sales transactions ——» |~<—Cash receipts transactions» 
Audited by 


TOC, STOT, and AP 





Audited by 
TOC, STOT, and AP 


Ending balance Ending balance 


Audited by Audited by 
AP and TDB AP and TDB 























Tests of controls Substantive Analytical Tests of 
(including procedures to s tests of ie ee eee a details of | _ 
obtain an understanding transactions P (AP) balances 


of internal control) (TOC) (STOT) (TDB) 





























Sufficient 
appropriate 
evidence 




















which may affect the supported detection risk and related remaining substantive tests. 
The methodology and implications of exceptions analysis are explained more fully in 
the next chapter. 

The most significant effect of the results of the tests of controls and substantive 
tests of transactions in the sales and collection cycle is on the confirmation of accounts 
receivable. The type of confirmation, the size of the sample, and the timing of the test 
are all affected. The effect of the tests on accounts receivable, bad debt expense, and 
allowance for uncollectible account tod PDEthhhancer 

Figure 14-7 illustrates the major accounts in the sales and collection cycle and the 
types of audit tests used to audit these accounts. This figure was introduced in the 
preceding chapter (p. 406) and is presented here for further review. 


SUMMARY 


This chapter deals with designing tests of controls and substantive tests of transactions for 
each of the five classes of transactions in the sales and collection cycle, including sales, cash 
receipts, sales returns and allowances, write-off of uncollectible accounts receivable, and 
bad debt expense. 

The methodology for designing tests of controls and substantive tests of transactions is, in 
concept, the same for each of the five classes of transactions and includes the following steps: 


* Understand internal control 

* Assess planned control risk 

* Determine the extent of testing controls 

* Design tests of controls and substantive tests of transactions to meet transaction- 
related audit objectives 


In designing tests of controls for each class of transactions, auditors focus on testing 
internal controls that they intend to rely upon to reduce control risk. First, the auditor 
identifies internal controls, if any exist, for each transaction-related audit objective. After 
assessing control risk for each objective, the auditor then determines the extent of tests of 
controls that must be performed. 

If the auditor is reporting on the effectiveness of internal control over financial reporting, 
extensive tests of controls must be performed to provide the basis for the auditor’s report. 
For audits of non-accelerated filers and nonpublic companies, the decision to perform tests 
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of controls is based on the effectiveness of controls and the extent to which the auditor 
intends to rely on them to reduce control risk. 

The auditor also designs substantive tests of transactions for each class of transactions to 
determine whether the monetary amounts of transactions are correctly recorded. Like tests 
of controls, substantive tests of transactions are designed for each transaction-related audit 
objective. 

After the design of tests of controls and substantive tests of transactions for each audit 
objective and each class of transactions is completed, the auditor organizes the audit 
procedures into a performance format audit program. The purpose of this audit program 


is to help the auditor complete the audit tests efficiently. 


Business functions for the sales and 
collection cycle—the key activities that 
an organization must complete to execute 
and record business transactions for sales, 
cash receipts, sales returns and allow- 
ances, write-off of uncollectible accounts, 
and bad debt expense 


Classes of transactions in the sales and 
collection cycle—the categories of trans- 
actions for the sales and collection cycle 
in a typical company: sales, cash receipts, 
sales returns and allowances, write-off 
of uncollectible accounts, and bad debt 
expense 


ESSENTIAL TERMS 


receivables to conceal an existing cash 
shortage 

Performance format audit program—the 
audit procedures for a class of trans- 
actions organized in the format in which 
they will be performed; this audit pro- 
gram is prepared from a design format 
audit program 

Proof of cash receipts—an audit pro- 
cedure to test whether all recorded cash 
receipts have been deposited in the bank 
account by reconciling the total cash 
receipts recorded in the cash receipts 
journal for a given period with the actual 


Desig APAIQi: PDF, Enhancéss made to the bank 


: ae Sales and collection cycle—involves the 
procedures resulting from the auditor’s deca d forth 
decisions about the appropriate audit sie salen adhe eater an eeaa 

Be . transfer of the ownership of goods and 
procedures for each audit objective; this 


: : services to customers after they are made 
audit program is used to prepare a perfor- : ; : : 
: available for sale; it begins with a request by 
mance format audit program 


a customer and ends with the conversion 
Lapping of accounts receivable—the post- of material or service into an account 
ponement of entries for the collection of receivable, and ultimately into cash 


REVIEW QUESTIONS 


14-1 (Objective 14-2) Describe the nature of the following documents and records and 
explain their use in the sales and collection cycle: bill of lading, sales invoice, credit memo, 
remittance advice, monthly statement to customers. 

14-2 (Objective 14-2) Explain the importance of proper credit approval for sales. What 
effect do adequate controls in the credit function have on the auditor’s evidence accumu- 
lation? 

14-3 (Objective 14-2) Distinguish between the sales journal and the accounts receivable 
master file. What type of information is recorded in each and how do these accounting 
records relate? 

14-4 (Objective 14-2) BestSellers.com sells fiction and nonfiction books to customers 
through the company’s Web site. Customers place orders for books via the Web site by 
providing their name, address, credit card number, and expiration date. What internal 
controls could BestSellers.com implement to ensure that shipments of books occur only for 
customers who have the ability to pay for those books? At what point will BestSellers.com be 
able to record the sale as revenue? 
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14-5 (Objective 14-3) List the transaction-related audit objectives for the audit of sales 
transactions. For each objective, state one internal control that the client can use to reduce 
the likelihood of misstatements. 


14-6 (Objective 14-3) State one test of control and one substantive test of transactions that 
the auditor can use to verify the following sales transaction-related audit objective: 
Recorded sales are stated at the proper amounts. 


14-7 (Objective 14-3) List the most important duties that should be segregated in the sales 
and collection cycle. Explain why it is desirable that each duty be segregated. 


14-8 (Objective 14-3) Explain how prenumbered shipping documents and sales invoices 
can be useful controls for preventing misstatements in sales. 


14-9 (Objective 14-3) What three types of authorizations are commonly used as internal 
controls for sales? For each authorization, state a substantive test that the auditor could use 
to verify whether the control was effective in preventing misstatements. 


14-10 (Objective 14-3) Explain the purpose of footing and cross-footing the sales journal 
and tracing the totals to the general ledger. 


14-11 (Objective 14-4) What is the difference between the auditor’s approach in verifying 
sales returns and allowances and that for sales? Explain the reasons for the difference. 


14-12 (Objective 14-5) Explain why auditors usually emphasize the detection of fraud in 
the audit of cash receipts. Is this consistent or inconsistent with the auditor’s responsibility 
in the audit? Explain. 

14-13 (Objective 14-5) List the transaction-related audit objectives for the verification of 
cash receipts. For each objective, state one internal control that the client can use to reduce 
the likelihood of misstatements. 


14-14 (Objective 14-5) List several audit procedures that the auditor can use to determine 
whether all cash received was recorded. 


14-15 (Objective 14-5) Explain Maw \ }-Ke (oll ppr of Ses piete its 


purpose. 
14-16 (Objective 14-5) Explain what is meant by lapping and discuss how the auditor can 
uncover it. Under what circumstances should the auditor make a special effort to uncover 
lapping? 

14-17 (Objective 14-6) What audit procedures are most likely to be used to verify accounts 
receivable written off as uncollectible? State the purpose of each of these procedures. 


14-18 (Objectives 14-3, 14-5) State the relationship between the confirmation of accounts 
receivable and the results of the tests of controls and substantive tests of transactions. 


14-19 (Objectives 14-3, 14-5) Under what circumstances is it acceptable to perform tests of 
controls and substantive tests of transactions for sales and cash receipts at an interim date? 


14-20 (Objective 14-3) Diane Smith, CPA, performed tests of controls and substantive tests 
of transactions for sales for the month of March in an audit of the financial statements for 
the year ended December 31, 2011. Based on the excellent results of both the tests of 
controls and the substantive tests of transactions, she decided to significantly reduce her 
substantive tests of details of balances at year-end. Evaluate this decision. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


14-21 (Objectives 14-3, 14-4, 14-5, 14-6) The following questions deal with internal 
controls in the sales and collection cycle. Choose the best response. 

a. The accounting system will not post a sales transaction to the sales journal without a 
valid bill of lading number. This control is most relevant to which transaction-related 
objective for sales? 

(1) Accuracy (3) Completeness 
(2) Occurrence (4) Posting and summarization 
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b. The accounting system automatically obtains the unit price based on scans of bar 


codes for merchandise sold. This control is most relevant to which transaction-related 
objective for sales? 

(1) Accuracy 

(2) Occurrence 

(3) Completeness 

(4) Posting and summarization 


. Which of the following controls would be most effective in detecting a failure to 


record cash received from customers paying on their accounts? 

(1) A person in accounting reconciles the bank deposit to the cash receipts journal. 

(2) Transactions recorded in the cash receipts journal are posted on a real-time basis 
to the accounts receivable master file. 

(3) Monthly statements are sent to customers and any discrepancies are resolved by 
someone independent of cash handling and accounting. 

(4) Deposits of cash received are made daily. 


d. A key internal control in the sales and collection cycle is the separation of duties 


between cash handling and record keeping. The objective most directly associated 
with this control is to verify that 

(1) cash receipts recorded in the cash receipts journal are reasonable. 

(2) cash receipts are correctly classified. 

(3) recorded cash receipts result from legitimate transactions. 

(4) existing cash receipts are recorded. 


14-22 (Objectives 14-3, 14-4) For each of the following types of misstatements (parts a 
through d), select the control that should have prevented the misstatement: 


a. A manufacturing company received a substantial sales return in the last month of the 


year, but the credit memorandum for the return was not prepared until after the 
auditors had ans their testing. The returned merchandise was included in the 
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(2) Credit memoranda are prenumbered and all numbers are accounted for. 

(3) A reconciliation of the trial balance of customers’ accounts with the general ledger 
control is prepared periodically. 

(4) Receiving reports are prepared for all materials received and such reports are 
accounted for on a timely basis. 


. Which of the following controls most likely will be effective in offsetting the tendency 


of sales personnel to maximize sales volume at the expense of high bad debt write-offs? 

(1) Employees responsible for authorizing sales and bad debt write-offs are denied 
access to cash. 

(2) Shipping documents and sales invoices are matched by an employee who does not 
have the authority to write off bad debts. 

(3) Employees involved in the credit-granting function are separated from the sales 
function. 

(4) Subsidiary accounts receivable records are reconciled to the control account by an 
employee independent of the authorization of credit. 


c. A sales invoice for $5,200 was computed correctly but, by mistake, was entered as 


$2,500 to the sales journal and posted to the accounts receivable master file. The 

customer remitted only $2,500, the amount on his monthly statement. 

(1) Prelistings and predetermined totals are used to control postings. 

(2) Sales invoice numbers, prices, discounts, extensions, and footings are independ- 
ently checked. 

(3) The customers’ monthly statements are verified and mailed by a responsible 
person other than the bookkeeper who prepared them. 

(4) Unauthorized remittance deductions made by customers or other matters in dis- 
pute are investigated promptly by a person independent of the accounts receivable 
function. 
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Shipments occurring in December 2011 did not get recorded until the first few days of 

January 2012. 

(1) The system automatically assigns bill of lading numbers and ensures no duplicates 
are issued. 

(2) As goods leave the shipping dock, the system generates a bill of lading and associ- 
ated sales invoice, which is automatically recorded in the sales journal. 

(3) The accounting system requires entry of a valid bill of lading number provided by 
the shipping department before a sales transaction is accepted for entry. 

(4) The system prevents the creation of a bill of lading without a customer order dated 
prior to the shipping date. 


14-23 (Objectives 14-1, 14-3) The following questions deal with audit evidence for the 


sales 
a: 


and collection cycle. Choose the best response. 

An auditor is performing substantive tests of transactions for sales. One step is to trace 

a sample of debit entries from the accounts receivable master file back to the sup- 

porting duplicate sales invoices. What will the auditor intend to establish by this step? 

(1) Sales invoices represent existing sales. 

(2) All sales have been recorded. 

(3) All sales invoices have been correctly posted to customer accounts. 

(4) Debit entries in the accounts receivable master file are correctly supported by 
sales invoices. 


. To verify that all sales transactions have been recorded, a substantive test of trans- 


actions should be completed on a representative sample drawn from 

(1) entries in the sales journal. 

(2) the billing clerk’s file of sales orders. 

(3) a file of duplicate copies of sales invoices for which all prenumbered forms in the 
series have been accounted. 

(4) the shipping clerk’s file of duplicate copies of bills of lading. 


* (1) Trace sample of postings AR AA Sou E tac A ANE ener 


DISCUSSION QUESTIONS AND PROBLEMS 


ledger. 
(2) Vouch a sample of recorded sales from the sales journal to shipping documents. 
(3) Prepare an aging of accounts receivable. 
(4) Trace a sample of initial sales orders to sales recorded in the sales journal. 


14-24 (Objectives 14-2, 14-3, 14-4, 14-5) Items 1 through 9 are selected questions of the 
type generally found in internal control questionnaires used by auditors to obtain an under- 
standing of internal control in the sales and collection cycle. In using the questionnaire for a 
client, a “yes” response to a question indicates a possible internal control, whereas a “no” 
indicates a potential deficiency. 


1 


2 
ae 
4 


. Are customer orders evaluated for credit approval by someone independent of sales? 

. Are online sales automatically recorded in the sales system? 

Are unit prices obtained from a pre-approved and restricted master file of unit prices? 

. Is the bill of lading information forwarded in a timely fashion to accounting to ensure 
recording in the sales journal? 

. Is the numerical sequence of bills of ladings accounted for to identify duplicates or 
missing documents? 

. Are entries in the sales journal restricted to those that are supported by a valid bill of 
lading? 

. Are sales invoice amounts independently verified for correctness? 

. Are individuals responsible for handling cash collections independent of accounting 
and shipping functions? 

. Are entries in the sales journal timely recorded in the accounts receivable master file? 
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. For each of the preceding questions, state the transaction-related audit objectives 
being fulfilled if the control is in effect. 


b. For each control, list a test of control to test its effectiveness. 


c. For each of the preceding questions, identify the nature of the potential financial mis- 
statements. 


d. For each of the potential misstatements in part c, list a substantive audit procedure to 
determine whether a material misstatement exists. 


14-25 (Objectives 14-3, 14-4, 14-5) The following are commonly performed tests of con- 
trols and substantive tests of transactions audit procedures in the sales and collection 
cycle: 
1. Account for a sequence of shipping documents and examine each one to make sure 
that a duplicate sales invoice is attached. 
2. Account for a sequence of sales invoices and examine each one to make sure that a 
duplicate copy of the shipping document is attached. 
3. Compare the quantity and description of items on shipping documents with the 
related duplicate sales invoices. 
4. Trace recorded sales in the sales journal to the related accounts receivable master file 
and compare the customer name, date, and amount for each one. 
. Examine sales returns for approval by an authorized official. 
. Review the prelisting of cash receipts to determine whether cash is prelisted daily. 
7. Reconcile the recorded cash receipts on the prelisting with the cash receipts journal 
and the bank statement for a 1-month period. 


nu 


Required a. Identify whether each audit procedure is a test of control or a substantive test of trans- 
actions. 


b. State which of the six transaction-related audit objectives each of the audit procedures 
fulfills. 


C. IApagorPDRaEnhanceriit procedure, such as documentation 


and observation. 


14-26 (Objective 14-3) The following are selected transaction-related audit objectives and 
audit procedures for sales transactions: 


Transaction-Related Audit Objectives 
1. Recorded sales exist. 
2. Existing sales are recorded. 
3. Sales transactions are correctly included in the accounts receivable master file and 
are correctly summarized. 


Procedures 

1. Trace a sample of shipping documents to related duplicate sales invoices and the 
sales journal to make sure that the shipment was billed. 

2. Examine a sample of duplicate sales invoices to determine whether each one has a 
shipping document attached. 

3. Examine the sales journal for a sample of sales transactions to determine whether 
each one has a posting reference in the margin indicating that it has been auto- 
matically compared by the computer with the accounts receivable master file for 
customer name, date, and amount. 

4, Examine a sample of shipping documents to determine whether each one has a 
duplicate sales invoice number printed on the bottom left corner. 

5. Trace a sample of debit entries in the accounts receivable master file to the sales journal 
to determine whether the date, customer name, and amount are the same. 

6. Vouch a sample of duplicate sales invoices to related shipping documents filed in the 
shipping department to make sure that a shipment was made. 


Required a. For each objective, identify at least one specific misstatement that could occur. 
b. Describe the differences between the purposes of the first and second objectives. 
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c. For each audit procedure, identify it as a test of control or substantive test of trans- 
actions. (There are three of each.) 


d. For each objective, identify one test of control and one substantive test of transactions. 


e. For each test of control, state the internal control that is being tested. Also, identify or 
describe a misstatement that the client is trying to prevent by use of the control. 


14-27 (Objectives 14-2, 14-3) The following sales procedures were encountered during the 
annual audit of Marvel Wholesale Distributing Company: 

Customer orders are received by the sales order department. A clerk computes the 
approximate dollar amount of the order and sends it to the credit department for approval. 
Credit approval is stamped on the order and sent to the accounting department. A com- 
puter is then used to generate two copies of a sales invoice. The order is filed in the 
customer order file. 

The customer copy of the sales invoice is held in a pending file awaiting notification that 
the order was shipped. The shipping copy of the sales invoice is routed through the ware- 
house, and the shipping department has authority for the respective departments to release 
and ship the merchandise. Shipping department personnel pack the order and manually 
prepare a three-copy bill of lading: The original copy is mailed to the customer, the second 
copy is sent with the shipment, and the other is filed in sequence in the bill of lading file. 
The sales invoice shipping copy is sent to the accounting department with any changes 
resulting from lack of available merchandise. 

A clerk in accounting matches the received sales invoice shipping copy with the sales 
invoice customer copy from the pending file. Quantities on the two invoices are compared 
and prices are compared to an approved price list. The customer copy is then mailed to the 
customer, and the shipping copy is sent to the data processing department. 

The data processing clerk in accounting enters the sales invoice data into the computer, 
which is used to prepare the sales journal and update the accounts receivable master file. 
She files the shipping copy in the sales invoice file in numerical sequence. 


a. To determine whether the intenApPagor:RDReciEnh ance mtances 
of failure to post invoices to customers’ accounts receivable master file, the auditor 
would select a sample of transactions from the population represented by the 
(1) customer order file. (3) customers’ accounts receivable master file. 
(2) bill of lading file. (4) sales invoice file. 


b. To determine whether the internal controls operated effectively to minimize instances 
of failure to invoice a shipment, the auditor would select a sample of transactions 
from the population represented by the 
(1) customer order file. (3) customers’ accounts receivable master file. 
(2) bill of lading file. (4) sales invoice file. 


c. To gather audit evidence that uncollected items in customers’ accounts represented 
existing trade receivables, the auditor would select a sample of items from the popula- 


tion represented by the 
(1) customer order file. (3) customers’ accounts receivable master file. 
(2) bill of lading file. (4) sales invoice file.* 


14-28 (Objectives 14-3, 14-5) The following are common audit procedures for tests of sales 
and cash receipts: 


1. Compare the quantity and description of items on duplicate sales invoices with related 
shipping documents. 

2. Trace recorded cash receipts in the accounts receivable master file to the cash receipts 
journal and compare the customer name, date, and amount of each one. 

3. Examine duplicate sales invoices for an indication that unit selling prices were 
compared to the approved price list. 

4, Examine duplicate sales invoices to determine whether the account classification for 
sales has been included on the document. 


*AICPA adapted. 
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Required 


Required 


5. Examine the sales journal for related-party transactions, notes receivable, and other 
unusual items. 

6. Select a sample of customer orders and trace the document to related shipping docu- 
ments, sales invoices, and the accounts receivable master file for comparison of 
name, date, and amount. 

7. Perform a proof of cash receipts. 

. Examine a sample of remittance advices for approval of cash discounts. 

9. Account for a numerical sequence of remittance advices and determine whether there 
is a cross-reference mark for each one, indicating that it has been recorded in the cash 
receipts journal. 


co 


a. Identify whether each audit procedure is a test of control or substantive test of trans- 
actions. 


b. State which transaction-related audit objective(s) each of the audit procedures fulfills. 


c. For each test of control in part a, state a substantive test that could be used to determine 
whether there was a monetary misstatement. 


14-29 (Objective 14-3) The following are a list of possible errors or fraud (1 through 5) involv- 
ing cash receipts and controls (a through g) that may prevent or detect the errors or fraud: 


Possible Errors or Fraud 

1. Customer checks are properly credited to customer accounts and are properly 
deposited, but errors are made in recording receipts in the cash receipts journal. 

2. Customer checks are misappropriated before being forwarded to the cashier for 
deposit. 

3. Customer checks are received for less than the customers’ full account balances, but 
the customers’ full account balances are credited. 

4. Customer checks are credited to incorrect customer accounts. 

5. Different customer accounts are each credited for the same cash receipt. 
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a. Customerorders are compared with an approved customer list. 
b. Prenumbered credit memos are used for granting credit for returned goods. 


c. Remittance advices are separated from the checks in the mailroom and forwarded to 
the accounting department. 


d. The cashier examines each check for proper endorsement. 


e. Total amounts posted to the accounts receivable subsidiary records from remittance 
advices are compared with the validated bank deposit slip. 


f. Monthly statements are mailed to customers with outstanding balances. 
g. An employee, other than the bookkeeper, periodically prepares a bank reconciliation. 


For each error or fraud, select one internal control that if properly designed and imple- 
mented, most likely would be effective in preventing or detecting the errors and fraud. Each 
response in the list of controls may be used once, more than once, or not at all.” 


14-30 (Objective 14-5) You have been asked by the board of trustees of a local church to 
review its accounting procedures. As part of this review you have prepared the following 
comments about the collections made at weekly services and record keeping for members’ 
pledges and contributions: 

1. The church’s board of trustees has delegated responsibility for financial management 
and audit of the financial records to the finance committee. This group prepares the annual 
budget and approves major cash disbursements but is not involved in collections or record 
keeping. No audit has been considered necessary in recent years because the same trusted 
employee has kept church records and served as financial secretary for 15 years. 

2. The collection at the weekly service is taken by a team of ushers. The head usher counts 
the collection in the church office after each service. She then places the collection and a 
notation of the amount in the church safe. The next morning, the financial secretary opens 
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the safe and recounts the collection. He withholds about $100 to meet cash expenditures 
during the coming week and deposits the remainder intact. To facilitate the deposit, members 
who contribute by check are asked to enter “Cash” on the payee line. 

3. At their request, a few members are furnished prenumbered predated envelopes in which 
to insert their weekly contributions. The head usher removes the cash from the envelopes to be 
counted with the loose cash included in the collection and discards the envelopes. No record is 
maintained of issuance or return of the envelopes, and the envelope system is not encouraged. 

4, Each member is asked to prepare a contribution pledge card annually. The pledge is 
regarded as a moral commitment by the member to contribute a stated weekly amount. 
Some members have inquired about having weekly contributions automatically withdrawn 
from their bank account or charged to their credit card, but the church has not established 
procedures that would allow payments other than by cash or check at weekly services. 
Based on the amounts shown on the pledge cards, the financial secretary furnishes a letter 
to members, upon request, to support the tax deductibility of their contributions. 


Identify the deficiencies and recommend improvements in procedures for collection made 
at weekly services and record keeping for members’ pledges and contributions. Use the 
methodology for identifying deficiencies discussed in Chapter 10. Organize your answer 
sheets as follows:* 

Deficiency Recommended Improvement 





14-31 (Objectives 14-3, 14-5) Items 1 through 10 present various internal control strengths 
or internal control deficiencies. 
1. Credit is granted by a credit department. 
2. Once shipment occurs and is recorded in the sales journal, all shipping documents 
are marked “recorded” by the accounting staff. 
. Sales returns are presented to a sales department clerk who prepares a written, 
prenumbered receiving report. 
. Cash receipts received in the mgil are received re ith ng recordkeeping 
responsibility. Apago BDF Enhanéer 
. Cash receipts received in the mail are forwarded unopened with remittance advices 
to accounting. 
. The cash receipts journal is prepared by the treasurer’s department. 
. Cash is deposited weekly. 
. Statements are sent monthly to customers. 
. Write-offs of accounts receivable are approved by the controller. 
. The bank reconciliation is prepared by individuals independent of cash receipts 
recordkeeping. 
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a. For each of the preceding 1-10 items, indicate whether the item represents an: 
A. Internal control strength for the sales and collection cycle. 
B. Internal control deficiency for the sales and collection cycle. 


b. For each item that you answered (A), indicate the transaction-related audit objec- 
tive(s) to which the control relates. 


c. For each item that you answered (B), indicate the nature of the deficiency.* 


14-32 (Objective 14-3) YourTeam.com is an online retailer of college and professional sports 
team memorabilia, such as hats, shirts, pennants and other sports logo products. Consumers 
select the college or professional team from a pull-down menu on the company’s Web site. 
For each listed team, the Web site provides a product description, picture, and price for all 
products sold online. Customers click on the product number of the items they wish to pur- 
chase. The following are internal controls YourTeam.com has established for its online sales: 
1. Only products shown on the Web site can be purchased online. Other company 
products not shown on the Web site listing are unavailable for online sale. 
2. The online sales system is linked to the perpetual inventory system that verifies quan- 
tities on hand before processing the sale. 


*AICPA adapted. 
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. Before the sale is authorized, YourTeam.com obtains credit card authorization codes 
electronically from the credit card agency. 

4. Online sales are rejected if the customer’s shipping address does not match the credit 
card’s billing address. 

. Before the sale is finalized, the online screen shows the product name, description, unit 
price, and total sales price for the online transaction. Customers must click on the 
Accept or Reject sales buttons to indicate approval or rejection of the online sale. 

6. Once customers approve the online sale, the online sales system generates a Pending 

Sales file, which is an online data file that is used by warehouse personnel to process 

shipments. Online sales are not recorded in the sales journal until warehouse 

personnel enter the bill of lading number and date of shipment into the Pending Sales 
data file. 


a. For each control, identify the transaction-related audit objective(s) being fulfilled if 
each control is in effect. 


wn 


b. For each control, describe potential financial misstatements that could occur if the 
control was not present. 


CASE 


14-33 (Objective 14-4) The Meyers Pharmaceutical Company, a drug manufacturer, has 
the following internal controls for billing and recording accounts receivable: 


1. An incoming customer’s purchase order is received in the order department by a clerk 
who prepares a prenumbered company sales order form on which is inserted the pertinent 
information, such as the customer’s name and address, customer’s account number, quantity, 
and items ordered. After the sales order form has been prepared, the customer’s purchase 
order is attached to it. 

2. Thg sales order form is then ohe the credit department for credit approval. Rough 
appro Rag Q nea En @NCs@Hre made in the credit department for 
those accounts on which credit limitations are imposed. After investigation, approval of 
credit is noted on the form. 

3. Next, the sales order form is passed to the billing department, where a clerk uses a 
computer to generate the customer’s invoice. It automatically multiplies the number of 
items times the unit price and adds the extended amounts for the total amount of the 
invoice. The billing clerk determines the unit prices for the items from a list of billing prices. 
The invoice copies are designated as follows: 

(a) Customer’s copy. 

(b) Sales department copy, for information purposes. 

(c) File copy. 

(d) Shipping department copy, which serves as a shipping order. Bills of lading are also 
prepared as carbon copy by-products of the invoicing procedure. 

4. The shipping department copy of the invoice and the bills of lading are then sent to the 
shipping department. After the order has been shipped, copies of the bill of lading are 
returned to the billing department. The shipping department copy of the invoice is filed in 
the shipping department. 

5. In the billing department, one copy of the bill of lading is attached to the customer’s 
copy of the invoice and both are mailed to the customer. The other copy of the bill of lading, 
together with the sales order form, is then attached to the invoice file copy and filed in invoice 
numerical order. 

6. As the computer generates invoices, it also stores the transactions in an electronic file 
that is used to update the accounting records daily. A summary report is generated and all 
journals and ledgers are printed for a hardcopy of the records. 

7. Periodically, an internal auditor traces a sample of sales orders all the way through the 
system to the journals and ledgers, testing both the procedures and dollar amounts. The 
procedures include comparing control totals with output, recalculating invoices and 
refooting journals, and tracing totals to the master file and general ledger. 
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. Flowchart the billing function as a means of understanding the system. Required 
. List the internal controls over sales for each of the six transaction-related audit objectives. 
. For each control, list a useful test of control to verify the effectiveness of the control. 
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. For each transaction-related audit objective for sales, list appropriate substantive tests 
of transactions audit procedures, considering internal controls. 


e. Combine the audit procedures from parts c and d into an efficient audit program for 
sales. 


INTEGRATED CASE APPLICATION — 


PINNACLE MANUFACTURING: PART V 





14-34 (Objectives 14-3, 14-5) In Part IT] of this case study, you obtained an understanding 
of internal control and made an initial assessment of control risk for each transaction- 
related audit objective for acquisition and cash disbursement transactions. The purpose of 
Part V is to continue the assessment of control risk by determining the appropriate tests of 
controls and substantive tests of transactions. In order to do this, you must complete the 
steps needed to prepare a high-quality performance format audit program for tests of 
controls and substantive tests of transactions for acquisitions and cash disbursements. 

Assume in Part III that you identified the following as the key controls you want to rely 
on (even though your answers were likely different from these): 

1. Segregation of the purchasing, receiving, and cash disbursements functions 
. Use of prenumbered voucher packages, properly accounted for 
. Use of prenumbered checks, properly accounted for 
. Use of prenumbered receiving reports, properly accounted for 
. Internal verification of document package before check preparation 
. Review of supporting documents and signing of checks by an independent, author- 
ized person Apago PDF Enhancer 

. Cancellation of documents prior {0 sigifing of the check 
. Monthly reconciliation of the accounts payable master file with the general ledger 
9. Independent reconciliation of the monthly bank statements 
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. Prepare an audit file listing the nine controls or download them from the textbook Required 
Web site. 

b. After each control, identify the transaction-related audit objective(s) that it partially 

or fully satisfies. 


a 


. Immediately below the control, list one audit procedure to test the control. Use the 
most reliable test of control evidence that you can think of. Write the audit procedure 
in good form. 

d. Immediately below the test of control, list one substantive test of transactions audit 

procedure to test whether the control failed to be effective. Use the most reliable sub- 

stantive tests of transactions evidence that you can think of. 


oO 


. Create a separate audit schedule labeled “Acquisitions Substantive Tests of Trans- 
actions.” Decide and write one substantive test of transactions audit procedure for each 
transaction-related audit objective for acquisitions. The audit procedures must be 
different than the ones in requirement d. The schedule should be designed as follows: 


Acquisitions Substantive Tests of Transactions 





Occurrence Write the substantive audit procedure 
Completeness Write the substantive audit procedure 
Etc. 


rh 


Using a separate heading labeled “Cash Disbursements Substantive Tests of Trans- 
actions,” decide and write one substantive test of transactions audit procedure for 
each transaction-related audit objective for cash disbursements. The audit procedures 
must be different than the ones in requirements d and e. The audit schedule should be 
designed the same as the one in requirement e. 
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g. Prepare a performance audit program for acquisitions and cash disbursements using 
all audit procedures in requirements c through f. See Figure 14-6 (p. 462) for a format. 
To the extent possible, follow the approach in procedure 13 a through e in Figure 14-6 
of having “one starting point” procedure followed by other related procedures. Do this 
for both acquisitions and cash disbursements. Be sure to eliminate any duplicate audit 
procedures. 


ACL PROBLEM 


rs 


14-35 (Objectives 14-4 and 14-5) This problem requires the use of ACL software, which is 
included in the CD attached to the text. Information about installing and using ACL and 
solving this problem can be found in Appendix, pages 838-842. You should read all of the 
reference material preceding the instructions for “Quick Sort” before locating the appro- 
priate command to answer questions a-e. For this problem use the Metaphor_AR_2002 file 
in ACL_Demo. The suggested command or other source of information needed to solve the 
problem requirement is included at the end of each question. 


a. Determine the total number and amount of September 2002 transactions in the file. 
(Filter, Count, and Total Field) 


b. Determine and print the total amount for each of the five types of 2002 transactions 
for comparison to the general ledger. (Summarize) Which transaction type has the 
highest count? 


c. For sales invoices (IN), determine the number of transactions, total amount, largest 
amount and average size. (Filter and Statistics) 

d. Determine the number of days difference between the invoice date (DATE1) and the 
due date (DUE) for sales invoices (IN) and evaluate the internal controls over these 
two dates. (Computed Field) 

e. TAPS Gore BOB rnEnhancexrsting, you decide to stratify 2002 sales 


invoices (IN) after excluding all invoices less than $300. Print the output. (Filter and 
Stratify) 


INTERNET PROBLEM 14-1: REVENUE RECOGNITION FRAUD 


Required 


The Securities and Exchange Commission (SEC) found that Bally Total Fitness Holding 
Corporation, a nationwide commercial operator of fitness centers, fraudulently accounted 
for three types of revenues it received from members. The SEC also charged the audit firm 
and six partners for their roles in the accounting violations. Visit the SEC’s website 
(www.sec.gov) and search the link to “Litigation Releases” to locate Litigation Release 
20470 issued on February 28, 2008 against Bally Total Fitness Holding Corporation to learn 
more about this revenue fraud. 


a. Read the release and the accompanying complaint in this matter and briefly summarize 
the three types of alleged revenue frauds. 


b. Return to the opening page on the SEC’s website and search the link for “Press 
Releases” to locate the December 17, 2009 announcement of the SEC’s charges against 
the audit firm and the six partners. 

c. Read the press release and briefly summarize the SEC’s description of the nature of 
audit risk associated with the Bally’s audit engagement. 


d. Read the complaint against the audit engagement partner, who served as the 2001 and 
2002 engagement partner. What factors caused the audit firm to recognize Bally as a 
high risk audit client for 1996-2003? 
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AUDIT SAMPLING FOR 
TESTS OF CONTROLS 
AND SUBSTANTIVE 
TESTS OF TRANSACTIONS 


If You Are Not Going To Believe It, Don’t Use It 


Brooks & Company, CPAs, uses random samples when performing audit 
tests whenever possible. They believe that this gives them the best chance of 
getting representative samples of their clients’ accounting information. In the 
audit of Sensational Products, a random sample of 30 inventory items was 
taken from a population of 1,800 items for testing unit and total costs. Only 
1 of the 30 items was in error, but it was large. In investigating the error, 
Harold Davis, the audit staff person doing the test, was told by Sensational’s 
controller that the error occurred while the regular inventory clerk was on 
vacation and was really only an “isolated error.” 


Harold knew auditing standards require errors in samples to be 
projected to the entire population. Apage..6 bi) mahancer 


multiplying the error found by a factor of 60 (1,800 divided by 30). This 
would result in an audit adjustment or additional audit work. Harold knew 
that the client would not be happy about this because the adjustment would 


LEARNING OBJECTIVES 


After studying this chapter, 
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you should be able to 

15-1 Explain the concept of 
representative sampling. 

15-2 Distinguish between statistical 
and nonstatistical sampling 
and between probabilistic and 
nonprobabilistic sample selection. 

15-3 Select representative samples. 

15-4 Define and describe audit 
sampling for exception rates. 

15-5 Use nonstatistical sampling in 
tests of controls and substantive 
tests of transactions. 

15-6 Define and describe attributes 
sampling and a sampling 
distribution. 

15-7 Use attributes sampling in tests 


of controls and substantive tests 
of transactions. 





reduce an already “strained” net income figure and additional auditing would increase the audit fee. If the error was, in 
fact, an isolated one, it would not be significant enough to require an audit adjustment. 


Harold decided to look at the situation in terms of the probability of the error being an isolated occurrence. He 
calculated the odds to be about 1 in 60 for a sample of 30 from a population of 1,800 to include an isolated error. He 
then looked at accepting the client's representation about the uniqueness of the error as a bet. If he accepted the 
representation and didn’t do the projection and act on it, he was in effect betting his career on a situation where the 
odds were 60 to 1 against him. It didn’t take Harold long to recognize the wisdom of the professional standards and 


conclude that the projection should be done. 





hapter 14 dealt with designing tests of controls and substantive tests of transactions for tests of the sales and 

collection cycle. Before these tests can be performed, the auditor needs to decide for each audit procedure the 
sample size and sample items to select from the population. When the auditor decides to select less than 100 percent of 
the population for testing to make inferences about the population, it is called audit sampling. As demonstrated by the 
story about Harold Davis of Brooks & Company, evaluating audit samples is an essential and often challenging part of 
auditing. When is a sample size sufficiently large to evaluate a population? Does a given sample accurately represent the 
accounting information? This chapter discusses sampling issues such as these for tests of controls and substantive tests of 
transactions. The discussion is limited to the sales and collection cycle, but the sampling concepts apply equally to all 


other cycles. 


REPRESENTATIVE SAMPLES 


OBJECTIVE 15-1 


Explain the concept of 
representative sampling. 





When selecting a sample from a population, the auditor strives to obtain a representative 
sample. A representative sample is one in which the characteristics in the sample are 
approximately the same as those of the population. This means that the sampled items 
are similar to the items not sampled. Assume a client’s internal controls require a clerk to 
attach a shipping document to every duplicate sales invoice, but the clerk fails to follow 
the procedure exactly 3 percent of the time. If the auditor selects a sample of 100 
duplicate sales invoices and finds three are missing attached shipping documents, the 
sample is highly representative. If two or four such items are found in the sample, the 
sample is reasonably representative. If no or many missing items are found, the sample 
is nonrepresentative. 

In practice, auditors never know whether a sample is representative, even after all 
testing is complete. (The only way to know if a sample is representative is to subse- 
quently audit the entire population.) However, auditors can increase the likelihood of 
a sample being representative by using care in designing the sampling process, sample 
select MPA OucE DE Sa I&OE@Mple result can be nonrepresentative 
due to nonsampling error or sampling error. The risk of these two types of errors 
occurring is called nonsampling risk and sampling risk. Both of these can be 
controlled. 

Nonsampling risk is the risk that audit tests do not uncover existing exceptions in 
the sample. The two causes of nonsampling risk are the auditor’s failure to recognize 
exceptions and inappropriate or ineffective audit procedures. 

An auditor might fail to recognize an exception because of exhaustion, boredom, 
or lack of understanding of what to look for. In the preceding example, assume 3 
shipping documents were not attached to duplicate sales invoices in a sample of 100. If 
the auditor concluded that no exceptions existed, that is a nonsampling error. An 
ineffective audit procedure for detecting the exceptions in question would be to 
examine a sample of shipping documents and determine whether each is attached to a 
duplicate sales invoice, rather than to examine a sample of duplicate sales invoices to 
determine if shipping documents are attached. In this case, the auditor has done the 
test in the wrong direction by starting with the shipping document instead of the 
duplicate sales invoice. Careful design of audit procedures, proper instruction, 
supervision, and review are ways to control nonsampling risk. 

Sampling risk is the risk that an auditor reaches an incorrect conclusion because 
the sample is not representative of the population. Sampling risk is an inherent part of 
sampling that results from testing less than the entire population. For example, assume 
the auditor decided that a control is not effective if there is a population exception rate 
of 6 percent. Assume the auditor accepts the control as effective based on tests of the 
control with a sample of 100 items that had two exceptions. If the population actually 
has an 8 percent exception rate, the auditor incorrectly accepted the population 
because the sample was not sufficiently representative of the population. 
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Auditors have two ways to control sampling risk: 


1. Adjust sample size 
2. Use an appropriate method of selecting sample items from the population 


Increasing sample size reduces sampling risk, and vice versa. At one extreme, a 
sample of all the items of a population has a zero sampling risk. At the other extreme, a 
sample of one or two items has an extremely high sampling risk. 

Using an appropriate sample selection method increases the likelihood of repre- 
sentativeness. This does not eliminate or even reduce sampling risk, but it does allow 
the auditor to measure the risk associated with a given sample size if statistical methods 
of sample selection and evaluation are used. 


STATISTICAL VERSUS NONSTATISTICAL SAMPLING AND 


PROBABILISTIC VERSUS NONPROBABILISTIC SAMPLE SELECTION 





Before discussing the methods of sample selection to obtain representative samples, it 
is useful to make distinctions between statistical versus nonstatistical sampling, and 
probabilistic versus nonprobabilistic sample selection. 


Audit sampling methods can be divided into two broad categories: statistical sampling 
and nonstatistical sampling. These categories are similar in that they both involve three 
phases: 

1. Plan the sample 

2. Select the sample and perform the tests 

3 Evaluate the results 

The purpose of planning the s j a th tity " e€ per- 
formed in a manner that provides t Jao" DP Et tance Fe like- 
lihood of nonsampling error. Selecting the sample involves deciding how a sample is 
selected from the population. The auditor can perform the audit tests only after the 
sample items are selected. Evaluating the results is the drawing of conclusions based on 
the audit tests. 

Assume that an auditor selects a sample of 100 duplicate sales invoices from a 


population, tests each to determine whether a shipping document is attached, and 
determines that there are three exceptions. Let’s look at those actions step-by-step: 


Action Step 





* Decide that a sample size of 100 is needed. 1. Plan the sample 





* Decide which 100 items to select from the population. 
* Perform the audit procedure for each of the 100 items and 
determine that three exceptions exist. 


2. Select the sample 
Perform the tests 





* Reach conclusions about the likely exception rate in the total 3. Evaluate the results 


population when the sample exception rate equals 3 percent. 





Statistical sampling differs from nonstatistical sampling in that, by applying 
mathematical rules, auditors can quantify (measure) sampling risk in planning the 
sample (step 1) and in evaluating the results (step 3). (You may remember calculating a 
statistical result at a 95 percent confidence level in a statistics course. A 95 percent 
confidence level provides a 5 percent sampling risk.) 

In nonstatistical sampling, auditors do not quantify sampling risk. Instead, auditors 
select sample items they believe will provide the most useful information, given the 
circumstances, and reach conclusions about populations on a judgmental basis. For that 
reason, the use of nonstatistical sampling is often termed judgmental sampling. 


Statistical Versus 
Nonstatistical 
Sampling 


OBJECTIVE 15-2 


Distinguish between statistical 
and nonstatistical sampling 


and between probabilistic 
and nonprobabilistic sample 
selection. 
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Probabilistic Versus Both probabilistic and nonprobabilistic sample selection fall under step 2. When 

Nonprobabilistic using probabilistic sample selection, the auditor randomly selects items such that 

Sample Selection each population item has a known probability of being included in the sample. This 
process requires great care and uses one of several methods discussed shortly. In 
nonprobabilistic sample selection, the auditor selects sample items using professional 
judgment rather than probabilistic methods. Auditors can use one of several 
nonprobabilistic sample selection methods. 


Applying Statistical Auditing standards permit auditors to use either statistical or nonstatistical sampling 
and Nonstatistical methods. However, it is essential that either method be applied with due care. All steps 
Sampling in Practice of the process must be followed carefully. When statistical sampling is used, the sample 
and Sample must be a probabilistic one and appropriate statistical evaluation methods must be used 
Selection Methods with the sample results to make the sampling risk computations. Auditors may make 


nonstatistical evaluations when using probabilistic selection, but it is never acceptable 
to evaluate a nonprobabilistic sample using statistical methods. 

Three types of sample selection methods are commonly associated with 
nonstatistical audit sampling. All three methods are nonprobabilistic. Four types of 
sample selection methods are commonly associated with statistical audit sampling. All 
four methods are probabilistic. 

Nonprobabilistic (judgmental) sample selection methods include the following: 


1. Directed sample selection 
2. Block sample selection 
3. Haphazard sample selection 


Probabilistic sample selection methods include the following: 


1. Simple random sample selection 
2. Systematic sample selection 


; Apage. proportional to “ ae le selection 
Apago...BDE..&nhancer 


We will now discuss each of these seven sample selection methods, starting with 
nonprobabilistic methods. 


NONPROBABILISTIC SAMPLE SELECTION METHODS 


Nonprobabilistic sample selection methods are those that do not meet the technical 
requirements for probabilistic sample selection. Because these methods are not based 
on mathematical probabilities, the representativeness of the sample may be difficult to 


determine. 
Directed In directed sample selection auditors deliberately select each item in the sample based 
Sample Selection on their own judgmental criteria instead of using random selection. Commonly used 


approaches include: 


Items Most Likely to Contain Misstatements Auditors are often able to identify 
which population items are most likely to be misstated. Examples are accounts receivable 
outstanding for a long time, purchases from and sales to officers and affiliated companies, 
and unusually large or complex transactions. The auditor can efficiently investigate these 
types of items and the results can be applied to the population judgmentally. In 
evaluating such samples, auditors typically reason that if none of the items selected are 
misstated, it is unlikely that the population is materially misstated. 


Items Containing Selected Population Characteristics By selecting one or more 
items with different population characteristics, the auditor may be able to design the 
sample to be representative. For example, the auditor might select a sample of cash 
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disbursements that includes some from each month, each bank account or location, and 
each major type of acquisition. 


Large Dollar Coverage Auditors can sometimes select a sample that includes a large 
portion of total population dollars and thereby reduce the risk of drawing an improper 
conclusion by not examining small items. This is a practical approach on many audits, 
especially smaller ones, where a few population items make up a large portion of the total 
population value. Some statistical sampling methods are also designed to accomplish the 
same effect. 


Block 
Sample Selection 


In block sample selection auditors select the first item in a block, and the remainder of 
the block is chosen in sequence. For example, assume the block sample will be a 
sequence of 100 sales transactions from the sales journal for the third week of March. 
Auditors can select the total sample of 100 by taking 5 blocks of 20 items, 10 blocks of 
10, 50 blocks of 2 or one block of 100. 

It is ordinarily acceptable to use block samples only if a reasonable number of 
blocks is used. If few blocks are used, the probability of obtaining a nonrepresentative 
sample is too great, considering the possibility of employee turnover, changes in the 
accounting system, and the seasonal nature of many businesses. For example, in the 
previous example, sampling 10 blocks of 10 from the third week of March is far less 
appropriate than selecting 10 blocks of 10 from 10 different months. 

Block sampling can also be used to supplement other samples when there is a high 
likelihood of misstatement for a known period. For example, the auditor might select 
all 100 cash receipts from the third week of March if that is when the accounting clerk 
was on vacation and an inexperienced temporary employee processed the cash receipt 
transactions. 


Haphazard 
Sample Selection 


Haphazard sample selection is the selection of items without any conscious bias by the 
auditor. In such cases, the auditor selects population wipho regard to their size, 
source, or other distinguishing i ABA ° PDE nhance r 

The most serious shortcoming of haphazard sample selection is the difficulty of 
remaining completely unbiased in the selection. Because of the auditor’s training and 
unintentional bias, certain population items are more likely than others to be included 
in the sample. 

Although haphazard and block sample selection appear to be less logical than directed 
sample selection, they are often useful in situations where the cost of more complex 
sample selection methods outweighs the benefits obtained from using these approaches. 
For example, assume that the auditor wants to trace credits from the accounts receivable 
master files to the cash receipts journal and other authorized sources as a test for 





P 
U.S. CENSUS ___ The Constitution of the United States calls for an are torn down. Some people don't like to 
actual enumeration of the people every ten years. provide the government with information about 
TAKING Census data is used to allocate seats in the House themselves. Sometimes the census forms are 





of Representatives among the states and for 
numerous other purposes such as the allocation 
of Medicaid funding to states. The first official 
Census was conducted in 1790 under Thomas 
Jefferson, who was the Secretary of State. That 
census, taken by U.S. marshals on horseback, 
counted 3.9 million inhabitants. Since that time, 
the Census has been conducted every ten years, 
generally on April 1 in years ending in a zero, with 
the most recent occurring in 2010. 

Conducting the census is a huge undertaking. 
New homes are constantly being built, and others 


lost, or people forget to fill them out. A limited 
number of questions are asked of every person 
and housing unit in the United States that address 
factors such as age, race, gender, and household 
relationships. Other information, such as ancestry, 
income, and occupation, is gathered on a sample 
basis, generally involving 1 out of 6 households. 
From that, the Census Bureau develops national 
estimates and they also use all data gathered to 
make projections about future population trends. 
Source: “Population Estimates” U.S. Census Bureau 
(www.census.gov). 
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fictitious credits in the master files. In this situation, many auditors use a haphazard or 
block approach, because it is simpler and much less costly than other selection methods. 
However, for many nonstatistical sampling applications involving tests of controls and 
substantive tests of transactions, auditors prefer to use a probabilistic sample selection 
method to increase the likelihood of selecting a representative sample. 


PROBABILISTIC SAMPLE SELECTION METHODS 


OBJECTIVE 15-3 


Select representative samples. 





Simple Random 
Sample Selection 


Systematic 
Sample Selection 


Statistical sampling requires a probabilistic sample to measure sampling risk. For 
probabilistic samples, the auditor uses no judgment about which sample items are 
selected, except in choosing which of the four selection methods to use. 


In a simple random sample, every possible combination of population items has an 
equal chance of being included in the sample. Auditors use simple random sampling to 
sample populations when there is no need to emphasize one or more types of population 
items. Say, for example, auditors want to sample a client’s cash disbursements for the 
year. They might select a simple random sample of 60 items from the cash disburse- 
ments journal, apply appropriate auditing procedures to the 60 items selected, and draw 
conclusions about all recorded cash disbursement transactions. 

When auditors obtain a simple random sample, they must use a method that 
ensures all items in the population have an equal chance of selection. Suppose an 
auditor decides to select a sample from a total of 12,000 cash disbursement trans- 
actions for the year. A simple random sample of one transaction will be such that each 
of the 12,000 transactions has an equal chance of being selected. The auditor will select 
one random number between 1 and 12,000. Assume that number is 3,895. The auditor 
will select and test only the 3,895th cash disbursement transaction. For a random 
samp], Oh PDRioknhance nual chance of being selected. 

Random numbers are a series of digits that have equal probabilities of occurring 
over long runs and which have no identifiable pattern. Auditors most often generate 
random numbers by using one of three computer sample selection techniques: elec- 
tronic spreadsheets, random number generators, and generalized audit software. 

Computer programs offer several advantages: time savings, reduced likelihood of 
auditor error in selecting the numbers, and automatic documentation. Because most 
auditors have access to a computer and to electronic spreadsheets or random number 
generator programs, they usually prefer to use computer generation of random numbers 
over other probabilistic selection methods. 

Figure 15-1 shows the random selection of sales invoices for the audit of Hillsburg 
Hardware Co. using an electronic spreadsheet program. In the example, the auditor 
wants 50 sample items from a population of sales invoices numbered from 3689 to 
9452. The program requires only input parameters to create a sample for the auditor to 
select. Programs possess great flexibility, and are able to generate random dates or 
ranges of sets of numbers (such as page and line numbers or check numbers for 
multiple bank accounts), and provide output in either sorted or selection order. 

Random numbers may be obtained with or without replacement. With replace- 
ment means an element in the population can be included in the sample more than 
once. In selection without replacement, an item can be included only once. Although 
both selection approaches are consistent with sound statistical theory, auditors rarely 
use replacement sampling. 


In systematic sample selection (also called systematic sampling), the auditor 
calculates an interval and then selects the items for the sample based on the size of the 
interval. The interval is determined by dividing the population size by the desired 
sample size. In a population of sales invoices ranging from 652 to 3,151, with a desired 
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lanurae Computer Generation of Random Numbers — Hillsburg Hardware Co. 





Random Number Generation 


Number of Variables: Ld 
Number of Random Numbers: 


Distribution: [Uniform | |__ Help| 


Parameters 


Between 3689 and |9452 














Random Numbers Selected Sorted in Ascending Order 

5890 4635 5440 5715 3773 5019 5841 8338 
4269 4955 9312 8159 3787 5101 5890 8395 
7127 3787 8338 4117 3876 5166 6037 8664 
8871 5332 9402 4833 3924 5332 6145 8787 
8787 5666 5166 4058 3951 5419 6375 8871 
9213 6880 9174 5754 3997 5440 6376 8935 
3773 5749 3997 6496 4058 5666 6496 9174 
6037 5832 7752 6635 4117 5715 6635 9213 
8664 5738 8395 5841 4269 5738 6880 9294 
4488 8935 9294 9371 4488 5749 7127 9312 
5101 6375 6376 3924 4635 5754 7752 9371 
3951 6145 5419 5019 4833 5832 8012 9402 
3876 8012 4955 8159 

b y 

Apago PDF Enhancer 

sample size of 125, the interval is 20 [(3,151 — 651)/125]. The auditor first selects a 

random number between 0 and 19 (the interval size) to determine the starting point 

for the sample. If the randomly selected number is 9, the first item in the sample will 

be invoice number 661 (652 + 9). The remaining 124 items will be 681 (661 + 20), 701 

(681 + 20), and so on through item 3,141. 

The advantage of systematic selection is its ease of use. In most populations, a syste- 
matic sample can be drawn quickly and the approach automatically puts the numbers 
in sequence, making it easy to develop the appropriate documentation. 
A concern with systematic selection is the possibility of bias. Because of the way 

systematic selection is done, once the first item in the sample is selected, all other items 

are chosen automatically. This causes no problem if the characteristic of interest, such 

as a possible control deviation, is distributed randomly throughout the population, 

which may not always be the case. For example, if a control deviation occurred at a 

certain time of the month or only with certain types of documents, a systematic sample 

can have a higher likelihood of failing to be representative than a simple random 

sample. Therefore, when auditors use systematic selection, they must consider possible 

patterns in the population data that can cause sample bias. 

In many auditing situations, it is advantageous to select samples that emphasize Probability 


population items with larger recorded amounts. There are two ways to obtain such 
samples: 


1. Take a sample in which the probability of selecting any individual population 
item is proportional to its recorded amount. This method is called sampling 
with probability proportional to size (PPS), and it is evaluated using non- 
statistical sampling or monetary unit statistical sampling. 


Proportional to Size 
and Stratified 
Sample Selection 


Chapter 15 / AUDIT SAMPLING FOR TESTS OF CONTROLS AND SUBSTANTIVE TESTS OF TRANSACTION 


483 


2. Divide the population into subpopulations, usually by dollar size, and take 
larger samples from the subpopulations with larger sizes. This is called strati- 
fied sampling, and it is evaluated using nonstatistical sampling or variables 
statistical sampling. 


These selection methods and their related evaluation methods are discussed in 
more detail in Chapter 17. 


SAMPLING FOR EXCEPTION RATES 


OBJECTIVE 15-4 


Define and describe audit 
sampling for exception rates. 





Auditors use sampling for tests of controls and substantive tests of transactions to 
estimate the percent of items in a population containing a characteristic or attribute of 
interest. This percent is called the occurrence rate or exception rate. For example, if an 
auditor determines that the exception rate for the internal verification of sales invoices is 
approximately 3 percent, then on average 3 of every 100 invoices are not properly verified. 

Auditors are interested in the following types of exceptions in populations of 
accounting data: 


1. Deviations from client’s established controls 
2. Monetary misstatements in populations of transaction data 
3. Monetary misstatements in populations of account balance details 


Knowing the exception rate is particularly helpful for the first two types of 
exceptions, which involve transactions. Therefore, auditors make extensive use of audit 
sampling that measures the exception rate in doing tests of controls and substantive 
tests of transactions. With the third type of exception, auditors usually need to estimate 
the total dollar amount of the exceptions because they must decide whether the 
misstatements are material. When auditors want to know the total amount of a 
misstaADAGOy uP DEho nhaneedars, not the exception rate. 

The exception rate in a sample is used to estimate the exception rate in the entire 
population, meaning it is the auditor’s “best estimate” of the population exception rate. 
The term exception should be understood to refer to both deviations from the client’s 
control procedures and amounts that are not monetarily correct, whether because of 
an unintentional accounting error or any other cause. The term deviation refers 
specifically to a departure from prescribed controls. 

Assume, for example, that the auditor wants to determine the percentage of 
duplicate sales invoices that do not have shipping documents attached. Because the 
auditor cannot check every invoice, the actual percentage of missing shipping 
documents remains unknown. The auditor obtains a sample of duplicate sales invoices 
and determines the percentage of the invoices that do not have shipping documents 
attached. The auditor then concludes that the sample exception rate is the best estimate 
of the population exception rate. 

Because the exception rate is based on a sample, there is a significant likelihood 
that the sample exception rate differs from the actual population exception rate. This 
difference is called the sampling error. The auditor is concerned with both the estimate 
of the sampling error and the reliability of that estimate, called sampling risk. Assume 
the auditor determines a 3 percent sample exception rate, and a sampling error of 
1 percent, with a sampling risk of 10 percent. The auditor can state that the interval 
estimate of the population exception rate is between 2 percent and 4 percent (3 percent 
+ 1) with a 10 percent risk of being wrong (and a 90 percent chance of being right). 

In using audit sampling for exception rates, the auditor wants to know the most the 
exception rate is likely to be, rather than the width of the confidence interval. So, the 
auditor focuses on the upper limit of the interval estimate, which is called the 
estimated or computed upper exception rate (CUER) in tests of controls and 
substantive tests of transactions. Using figures from the preceding example, an auditor 
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TAX STATS 


The Internal Revenue Service (IRS) produces a 
wealth of information about the financial 
composition of individuals, business taxpayers, 
and tax exempt organizations based on samples 
of tax returns filed with the IRS each year. These 
reports are issued by the IRS's Statistics of 
Income (SOI) program. 

When the IRS receives a submitted tax 
return, it compiles selected information into a 
computerized “master file” system, which is the 
backbone of the agency. As tax returns are 
processed into the master file system, they are 
assigned to sampling classes (strata) based on 


criteria, such as size of income or assets (or other 


measures of economic size), industrial activity, 


accounting period, or the presence of certain 
supplemental forms or schedules. 

The SOI program samples tax returns from 
the master file based on stratified samples of tax 
returns. Each taxpayer, whether an individual or 
business, has a unique number (e.g., social 
security number for individuals or employer 
identification number for businesses). These 
unique taxpayer identification numbers are used 
as the seed for a random number, which along 
with the sampling strata, determines whether a 
given return is selected for the SOI sample. 


Source: “Tax Stats,” Internal Revenue Service: The 
Digital Daily (www..irs.gov). 





might conclude that the CUER for missing shipping documents is 4 percent at a 5 
percent sampling risk, meaning the auditor concludes that the exception rate in the 
population is no greater than 4 percent with a 5 percent risk of the exception rate 
exceeding 4 percent. Once it is calculated, the auditor can consider CUER in the 
context of specific audit objectives. If testing for missing shipping documents, for 
example, the auditor must determine whether a 4 percent exception rate indicates an 
acceptable control risk for the occurrence objective. 







APPLICATION OF NONSTATISTICAL AUDIT SAMPLING 


We will now examine the application of nonstatistical audit sampling in testing 
transactions for control deviations and monetary misstatements. Statistical sampling is 
examined later in this chapter. Before doing so, key terminology are defined and 
summarized in Table 15-1. The same terminology is used for statistical sampling. 


OBJECTIVE 15-5 


Use nonstatistical sampling 
in tests of controls and 
substantive tests of 
transactions. 









es Terms Used in Audit Sampling 





TERM 


DEFINITION 





Terms Related to Planning 
Characteristic or attribute 
Acceptable risk of assessing control risk 


too low (ARACR) 
Tolerable exception rate (TER) 


Estimated population exception rate (EPER) 
Initial sample size 


The characteristic being tested in the application 


The risk that the auditor is willing to take of accepting a control as effective or a rate of 
monetary misstatements as tolerable, when the true population exception rate is greater 
than the tolerable exception rate 


Exception rate that the auditor will permit in the population and still be willing to conclude 
the control is operating effectively and/or the amount of monetary misstatements in the 
transactions established during planning is acceptable 


Exception rate that the auditor expects to find in the population before testing begins 
Sample size decided after considering the above factors in planning 





Terms Related to Evaluating Results 
Exception 

Sample exception rate (SER) 

Computed upper exception rate (CUER) 





Exception from the attribute in a sample item 
Number of exceptions in the sample divided by the sample size 
The highest estimated exception rate in the population at a given ARACR 
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Auditors use 14 well-defined steps to apply audit sampling to tests of controls 
and substantive tests of transactions. These steps are divided into the three phases 
described earlier. Auditors should follow these steps carefully to ensure proper 
application of both the auditing and sampling requirements. We use the example 
audit of Hillsburg Hardware Co. to illustrate the steps in the following discussion. 


Plan the Sample 

State the objectives of the audit test. 

Decide whether audit sampling applies. 

Define attributes and exception conditions. 

Define the population. 

Define the sampling unit. 

Specify the tolerable exception rate. 

Specify acceptable risk of assessing control risk too low. 
Estimate the population exception rate. 

Determine the initial sample size. 


SoS ON Se oe 


so 


Select the Sample and Perform the Audit Procedures 
10. Select the sample. 
11. Perform the audit procedures. 


Evaluate the Results 
12. Generalize from the sample to the population. 
13. Analyze exceptions. 
14. Decide the acceptability of the population. 


State the Objectives The objectives of the test must be stated in terms of the transaction cycle being tested. 
of the Audit Test Typically, auditors define the objectives of tests of controls and substantive tests of 
transactions: 


- Apage:..PDE-knhanaer 


* Determine whether the transactions contain monetary misstatements 


The objectives of these tests in the sales and collection cycle are usually to test the 
effectiveness of internal controls over sales and cash receipts and to determine whether 
sales and cash receipts transactions contain monetary misstatements. Auditors normally 
define these objectives as a part of designing the audit program, which was discussed 
for the sales and collection cycle in Chapter 14. You can find the audit program for the 
sales and collection cycle for Hillsburg Hardware in Figure 14-6 (p. 462). 


Decide Whether Audit sampling applies whenever the auditor plans to reach conclusions about a 
Audit Sampling Applies —_ population based on a sample. The auditor should examine the audit program and 
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select those audit procedures where audit sampling applies. To illustrate, assume the 
following partial audit program: 
1. Review sales transactions for large and unusual amounts (analytical procedure). 
2. Observe whether the duties of the accounts receivable clerk are separate from 
handling cash (test of control). 
3. Examine a sample of duplicate sales invoices for 
a. credit approval by the credit manager (test of control). 
b. existence of an attached shipping document (test of control). 
c. inclusion of a chart of accounts number (test of control). 
4. Select a sample of shipping documents and trace each to related duplicate sales 
invoices (test of control). 
5. Compare the quantity on each duplicate sales invoice with the quantity on 
related shipping documents (substantive test of transactions). 


Audit sampling does not apply for the first two procedures in this audit program. 
The first is an analytical procedure for which sampling is inappropriate. The second is 
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——— Audit Procedures — Hillsburg Hardware Co. 





PROCEDURE 


Shipment of Goods 


10. Account for a sequence of shipping documents. 


COMMENT 


It is possible to do this by selecting a random sample and accounting for 
all shipping documents selected. This requires a separate set of random 
numbers because the sampling unit is different from that used for the 
other tests. 





11. Trace selected shipping documents to the sales journal 


to be sure that each one has been included. 


No exceptions are expected, and a 6 percent TER is considered acceptable 
at an ARACR of 10 percent. A sample size of 40 is selected. The shipping 
documents are traced to the sales journal. This is done for all 40 items. 
There are no exceptions for either test. The results are considered accept- 
able. There is no further information about this portion of the tests in this 
illustration. 





Billing of Customers and Recording the Sales in the Records 


12. Account for a sequence of sales invoices in the 


sales journal. 





13. Trace selected sales invoice numbers from the sales 


journal to 


a. 


b. 


accounts receivable master file and test for 
amount, date, and invoice number. 

duplicate sales invoice and check for the total 
amount recorded in the journal, date, customer 
name, and account classification. Check the pric- 
ing, extensions, and footings. Examine underlying 
documents for indication of internal verification. 


. bill of lading and test for customer name, product 


description, quantity, and date. 


. duplicate sales order and test for customer 


name, product description, quantity, date, and 
indication of internal verification. 


. customer order and test for customer name, product 


description, quantity, date, and credit approval. 





The audit procedures for billing and recording sales (procedures 12 to 14) 
are the only ones included for illustration throughout this chapter. 


14. Trace recorded sales from the sales journal to the file 
of supporting documents, which includes a duplicate 
sales invoice, bill of lading, sales order, and customer 
order. 











Note: Random selection and statistical sampling are not applicable for the nine general audit procedures in Figure 14-6 (p. 462). Advanced statistical techniques, 
such as regression analysis, can be applicable for analysis of the results of analytical procedures. Except for audit procedure 18, random selection may be 


possible for cash receipt procedures 15 through 21. Random selection can also be used for procedure 2. 


an observation procedure for which no documentation exists to perform audit 
sampling. Audit sampling can be used for the remaining three procedures. Table 15-2 
indicates the audit procedures for the sales cycle for Hillsburg Hardware Co. where 
audit sampling is appropriate. 


When audit sampling is used, auditors must carefully define the characteristics (attri- 
butes) being tested and the exception conditions. Unless they carefully define each 


Define Attributes and 
Exception Conditions 


attribute in advance, the staff person who performs the audit procedures will have no 
guidelines to identify exceptions. 


Attributes of interest and exception conditions for audit sampling are taken 


directly from the auditor’s audit procedures. Table 15-3 (p. 488) shows nine attributes 
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Define the Population 


ile 





Attributes Defined — Tests of Hillsburg Hardware Co-s Billing 





Attribute 


Existence of the sales invoice number 
in the sales journal (procedure 12). 


Exception Condition 


No record of sales invoice number in 
the sales journal. 





Amount and other data in the master 
file agree with sales journal entry 
(procedure 13a). 


The amount recorded in the master file 
differs from the amount recorded 
in the sales journal. 





Amount and other data on the duplicate 
sales invoice agree with the sales journal 
entry (procedure 13b). 


Customer name and account number on 
the invoice differ from the information 
recorded in the sales journal. 





Evidence that pricing, extensions, and footings 
are checked (initials and correct amounts) 
(procedure 13b). 


Lack of initials indicating verification of 
pricing, extensions, and footings. 





Quantity and other data on the bill of lading 
agree with the duplicate sales invoice and 
sales journal (procedure 13c). 


Quantity of goods shipped differs from 
quantity on the duplicate sales invoice. 





Quantity and other data on the sales order agree 


with the duplicate sales invoice (procedure 13d). 


Quantity on the sales order differs from 
the quantity on the duplicate sales invoice. 





Quantity and other data on the customer order 
agree with the duplicate sales invoice 
(procedure 13e). 


Product number and description on the 
customer order differ from information 
on the duplicate sales invoice. 





Credit is approved (procedure 13e). 


Lack of initials indicating credit approval. 





For recorded sales in the sales journal, the file 


Bill of lading is not attached to the duplicate 


of supporting documents includes a duplicate sales invoice and the customer order. 
sales invoice, bill of lading, sales order, and 


customer order (procedure 14). 











of interest and exception conditions taken from audit procedures 12 through 14 in the 
audit of Hillsburg’s billing function. Samples of sales invoices will be used to verify 
these attributes. The absence of the attribute for any sample item will be an exception 
for that attribute. Both missing documents and immaterial misstatements result in 
exceptions unless the auditor specifically states otherwise in the exception conditions. 


The population is those items about which the auditor wishes to generalize. Auditors 
can define the population to include any items they want, but when they select the 
sample, it must be selected from the entire population as it has been defined. The 
auditor should test the population for completeness and detail tie-in before a sample is 
selected to ensure that all population items are subjected to sample selection. 

The auditor may generalize only about that population that has been sampled. For 
example, when performing tests of controls and substantive tests of sales transactions, 
the auditor generally defines the population as all recorded sales invoices for the year. If 
the auditor samples from only one month’s transactions, it is invalid to draw con- 
clusions about the invoices for the entire year. 

The auditor must carefully define the population in advance, consistent with the 
objectives of the audit tests. In some cases, it may be necessary to define separate 
populations for different audit procedures. For example, in the audit of the sales and 
collection cycle for Hillsburg Hardware Co., the direction of testing in audit procedures 
12 through 14 (in Table 15-2 on p. 487) proceeds from sales invoices in the sales journal 
to source documentation. In contrast, the direction of testing for audit procedures 10 
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and 11 proceeds from the shipping documents to the sales journal. Thus, the auditor 
defines two populations—a population of sales invoices in the sales journal and a 
population of shipping documents. 


The sampling unit is defined by the auditor based on the definition of the population 
and objective of the audit test. The sampling unit is the physical unit that corresponds 
to the random numbers the auditor generates. It is often helpful to think of the 
sampling unit as the starting point for doing the audit tests. For the sales and collection 
cycle, the sampling unit is typically a sales invoice or shipping document number. For 
example, if the auditor wants to test the occurrence of sales, the appropriate sampling 
unit is sales invoices recorded in the sales journal. If the objective is to determine 
whether the quantity of the goods described on the customer’s order is accurately 
shipped and billed, the auditor can define the sampling unit as the customer’s order, 
the shipping document, or the duplicate sales invoice, because the direction of the 
audit test doesn’t matter for this audit procedure. 

Audit procedure 14 in Table 15-2 is a test for the occurrence of recorded sales. 
What is the appropriate sampling unit? It is the duplicate sales invoice. Is the 
appropriate sampling unit for audit procedure 11 the shipping document? Yes, because 
this tests that existing sales are recorded (completeness). Either the duplicate sales 
invoice or the shipping document is appropriate for audit procedures 13a through 13e 
because these are all nondirectional tests. 

To perform audit procedures 12 through 14, the auditor will define the sampling 
unit as the duplicate sales invoice. Audit procedures 10 and 11 will have to be tested 
separately using a sample of shipping documents. 


Establishing the tolerable exception rate (TER) for each attribute requires an auditor’s 
professional judgment. TER represents the highest exception rate the auditor will 
permit in the control being tested and still be willing to conclude the control is 
operating effectively (and/or the rat Pagery DF Enhangexions is 
acceptable). For example, assume that the auditor decides that TER for attribute 8 in 
Table 15-3 is 9 percent. That means that the auditor has decided that even if 9 percent 
of the duplicate sales invoices are not approved for credit, the credit approval control is 
still effective in terms of the assessed control risk included in the audit plan. 

The suitable TER is a question of materiality and is therefore affected by both the 
definition and the importance of the attribute in the audit plan. If only one internal 
control is used to support a low control risk assessment for an objective, TER will be 
lower for the attribute than if multiple controls are used to support a low control risk 
assessment for the same objective. TER will normally be lower for tests of controls in 
the audit of an accelerated filer public company because the results of the tests of 
controls provide the basis for the auditor’s report on internal control over financial 
reporting. 

TER can have a significant impact on sample size. A larger sample size is needed for 
a low TER than for a high TER. For example, a larger sample size is needed for the test 
of credit approval (attribute 8) if the TER is decreased from 9 percent to 6 percent. 
Since a lower TER is used for significant account balances, the auditor requires a larger 
sample size to gather sufficient evidence about the effectiveness of the control or 
absence of monetary misstatements. 

Most auditors use some type of template to document each sampling application. 
Figure 15-2 (p. 490) shows one example of a commonly used form. Notice that the top 
part of the form includes a definition of the objective, the population, and the 
sampling unit. 

Auditors determine the TER for each attribute being tested in audit procedures 12 
through 14 in Table 15-3 by deciding what exception rate is material. As Figure 15-2, 
indicates: 


Define the 
Sampling Unit 


Specify the Tolerable 
Exception Rate 
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Sampling Data Sheet: Tests of Hillsburg Hardware Co-s Billing 


Function 








Client: Hillsburg Hardware 
Audit Area: Tests of Controls and Substantive Tests of Transactions— 
Billing Function 


numbers. 


Year-end: 12/31/11 
Pop. size: 5,764 


Define the population precisely (including stratification, if any): Sales invoices for the 
period 1/1/11 to 10/31/11. First invoice number = 3689. Last invoice number = 9452. 


Define the objective(s): Examine duplicate sales invoices and related documents to determine 
whether the system has functioned as intended and as described in the audit program. 


Define the sampling unit, organization of population items, and random selection procedures: 
Sales invoice number, recorded in the sales journal sequentially; computer generation of random 





Planned Audit 


Actual Results 





Description of Attributes rere yee || eee sone rug 


Number 
of 
exceptions 


Sample 


exception | Sampling 


rate 


Calculated 


Error 
(TER — SER) 





1. Existence of the sales invoice number 
in the sales journal (procedure 12). (0) 4 Low 75 





2. Amount and other data in the master 
file agree with sales journal entry 
(procedure 13a). ] 5 Low 100 





3. Amount and other data on the 
duplicate sales invoice agree with the 
sales journal entry (procedure 13b). 1 5 Low 100 





4. Evidence that pricing, extensions, and 
footings are checked (initials and 
correct amounts) (procedure 13b). 1 5 Low 100 





5. Quantity and other data on the bill of 
lading agree with the duplicate sales 
invoice and sales journal (procedure 13c).| 1 5 Low 100 


6. Quantity and other data on the sales 
order agree with the duplicate sales 
invoice (procedure 13d). ] 7 Low 65 








7. Quantity and other data on the 
customer order agree with the duplicate 
sales invoice (procedure 13e). 15: || 9 Low 50 





8. Credit is approved 
(procedure 13e). 1.5: || 9 Low 50 





9. For recorded sales in the sales 
journal, the file of supporting 
documents includes a duplicate sales 
invoice, bill of lading, sales order, and 
customer order (procedure 14). ] 7 Low 65 


























Intended use of sampling results: 
1. Effect on Audit Plan: 


2. Recommendations to Management: 














* For attribute 1, the failure to record a sales invoice would be highly significant, 


so the lowest TER (4 percent) is chosen. 








* For attributes 2-5, the incorrect billing to a customer and recording the trans- 


action is potentially significant, but no misstatement is likely to be for the full 
amount of the invoice. As a result, the auditor chose a 5 percent TER for each of 
these attributes. 


+ Attributes 6-9 have higher TERs because they are of less importance in the 


audit. 
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Whenever auditors take a sample, they risk making incorrect conclusions about the Specify Acceptable 


population. Unless 100 percent of the population is tested, this is true for both Risk of Assessing 
nonstatistical and statistical sampling. Control Risk 
For audit sampling in tests of controls and substantive tests of transactions, that risk Too Low 


is called the acceptable risk of assessing control risk too low (ARACR). ARACR 
measures the risk the auditor is willing to take of accepting a control as effective (or a 
rate of misstatements as tolerable) when the true population exception rate is greater 
than TER. ARACR represents the auditor’s measure of sampling risk. Assume that TER 
is 6 percent, ARACR is high, and the true population exception rate is 8 percent. The 
control in this case is not acceptable because the true exception rate of 8 percent exceeds 
TER. The auditor, of course, does not know the true population exception rate. The 
ARACR of high means that the auditor is willing to take a fairly substantial risk of 
concluding that the control is effective after all testing is completed, even when it is 
ineffective. If the control were found to be effective in this illustration, the auditor would 
have overrelied on the system of internal control (used a lower assessed control risk than 
was justified). 

In choosing the appropriate ARACR for each attribute, auditors must use their best 
judgment. Their main consideration is the extent to which they plan to reduce assessed 
control risk as a basis for the extent of tests of details of balances. Auditors normally 
assess ARACR at a lower level when auditing an accelerated filer public company 
because the auditor needs to be confident that the internal controls are effective to 
support the opinion on internal control over financial reporting. In audits of non- 
accelerated filers and private companies, the appropriate ARACR and extent of tests of 
controls depend on assessed control risk. For audits where there is extensive reliance on 
internal control, control risk will be assessed at low and therefore ARACR will also be as 
low. Conversely, if the auditor plans to rely on internal controls only to a limited extent, 
control risk will be assessed as high and so will ARACR. 

For nonstatistical sampling, it Apage epee Enhance anee 2 high, 
medium, or low instead of a percentage statistical sampling it is common for 
auditors to use a percent, such as 5% or 10%. A low ARACR implies that the tests of 
controls are important and will correspond to a low assessed control risk and reduced 
substantive tests of details of balances. As summarized in Figure 15-2, ARACR for the 
audit of the billing function at Hillsburg Hardware Co. is assessed as low for all attri- 
butes, because it is an accelerated filer public company and the auditor’s tests of controls 
must provide a basis for the opinion on internal control over financial reporting. 

Like for TER, there is an inverse relationship between ARACR and planned sample 
size. If the auditor reduces ARACR from high to low, planned sample size must be 











TABLE 15-4 Guidelines for ARACR and TER for Nonstatistical Sampling: Tests of Controls ) 
Factor Judgment Guideline 
Assessed control risk. Consider: + Lowest assessed control risk » ARACR of low 
Need to issue a separate report on internal control over financial reporting * Moderate assessed control risk ©» ARACR of medium 
for accelerated filer public companies * Higher assessed control risk * ARACR of high 
Nature, extent, and timing of substantive tests (extensive planned * 100% assessed control risk * ARACR is not 
substantive tests relate to higher assessed control risk and vice versa) applicable 


Quality of evidence available for tests of controls (a lower quality of 
evidence available results in a higher assessed control risk and vice versa) 











Significance of the transactions and related account balances that the * Highly significant balances » TER of 4% 
internal controls are intended to affect + Significant balances * TER of 5% 
* Less significant balances » TER of 6% 

XS y 





Note: The guidelines should recognize that there may be variations in ARACRs based on audit considerations. The guidelines above are the most conservative that 
should be followed. 
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Guidelines for ARACR and TER for Nonstatistical Sampling: Substantive Tests of Transactions 

Planned Reduction Results of Understanding 

in Substantive Tests Internal Control and ARACR for Substantive TER for Substantive 

of Details of Balances Tests of Controls Tests of Transactions Tests of Transactions 

Large Excellent! High Percent or amount based on materiality 
Good Medium considerations for related accounts 
Not good Low 

Moderate Excellent! High Percent or amount based on materiality 
Good Medium considerations for related accounts 
Not good Medium-low 

Small Excellent! High Percent or amount based on materiality 
Good Medium-high considerations for related accounts 
Not good Medium 

y 





Note: The guidelines should also recognize that there may be variations in ARACRs based on audit considerations. The guidelines above are the most conservative 
that should be followed. 

Mn this situation, both internal control and evidence about it are good. Substantive tests of transactions are least likely to be performed in this situation. 

In this situation, little emphasis is being placed on internal controls. Neither tests of controls nor substantive tests of transactions are likely in this situation. 


increased. ARACR represents the auditor’s risk of incorrectly accepting the control as 
effective, and a larger sample size is required to lower this risk. 

The auditor can establish different TER and ARACR levels for different attributes 
of an audit test, depending on the importance of the attribute and related control. For 
example, auditors commonly use higher TER and ARACR levels for tests of credit 
approval than for tests of the occurrence of duplicate sales invoices and bills of lading. 
This makes sense because the exceptions for the latter are likely to have a more direct 
impaApag@eRBEt tEnhancemts than the former. 

Tables 15-4 (p. 491) and 15-5 present illustrative guidelines for establishing TER 
and ARACR. The guidelines should not be interpreted as representing broad profes- 
sional standards. However, they are typical of the types of guidelines CPA firms issue to 
their staff. 


Estimate the Auditors should make an advance estimate of the population exception rate to plan the 
Population appropriate sample size. If the estimated population exception rate (EPER) is low, a 
Exception Rate relatively small sample size will satisfy the auditor’s tolerable exception rate, because a 


less precise estimate is required. 

Auditors often use the preceding year’s audit results to estimate EPER. If prior-year 
results are not available, or if they are considered unreliable, the auditor can take a small 
preliminary sample of the current year’s population for this purpose. It is not critical that 
the estimate be precise because the current year’s sample exception rate is ultimately used 
to estimate the population characteristics. If a preliminary sample is used, it can be 
included in the total sample, as long as appropriate sample selection procedures are 
followed. In the Hillsburg Hardware Co. audit, the estimated population exception rates 
for the attributes in Figure 15-2 (p. 490) are based on the previous year’s results, modified 
slightly to account for the change in personnel. 


Determine the Four factors determine the initial sample size for audit sampling: population size, 

Initial Sample Size TER, ARACR, and EPER. Population size is not a significant factor and typically can be 
ignored, especially for large populations. Auditors using nonstatistical sampling decide 
the sample size using professional judgment rather than using a statistical formula. 
Once the three major factors affecting sample size have been determined, the auditor 
can decide an initial sample size. It is called an initial sample size because the 
exceptions in the actual sample must be evaluated before auditors can decide whether 
the sample is sufficiently large to achieve the objectives of the tests. 
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Effect on Sample Size of Changing Factors ) 
Type of Change Effect on Initial Sample Size 
Increase acceptable risk of assessing control risk too low Decrease 
Increase tolerable exception rate Decrease 
Increase estimated population exception rate Increase 
Increase population size Increase (minor effect) 

M y 











Sensitivity of Sample Size to a Change in the Factors To understand the concepts 
underlying sampling in auditing, you need to understand the effect of increasing or 
decreasing any of the four factors that determine sample size, while the other factors are 
held constant. Table 15-6 shows the effect on sample size of independently increasing 
each factor. The opposite effect will occur for decreasing each factor. 

A combination of two factors has the greatest effect on sample size: TER minus 
EPER. The difference between the two factors is the precision of the initial sample 
estimate. A smaller precision, which is called a more precise estimate, requires a larger 
sample. At one extreme, assume TER is 4% and EPER is 3%. In this case, precision is 
1%, which will result in a large sample size. Now assume TER is 8% and EPER is zero for 
an 8% precision. In this case the sample size can be small and still give the auditor 
confidence that the actual exception rate is less than 8%, assuming no exceptions are 
found when auditing the sample. 

Figure 15-2 summarizes the different sample sizes selected for testing attributes 1 
through 9 for the Hillsburg audit. The largest sample (a size of 100) is selected for tests of 
attributes 2 through 5, because of th agorRDF: Hnhancembutes, 
the difference between TER and EPER is smallest, thus requiring a larger sample size 
than attributes 6 through 9. Although the difference between TER and EPER for attribute 
1 is the same as that for attributes 2 through 5, the estimated population exception rate of 
zero justifies a smaller sample of 75 items. Because a less precise estimate is needed (TER 
minus EPER is larger) for attributes 7 and 8, a sample size of only 50 items is needed. 


After auditors determine the initial sample size for the audit sampling application, they 
must choose the items in the population to include in the sample. Auditors can choose 
the sample using any of the probabilistic or nonprobabilistic methods we discussed 
earlier in this chapter. To minimize the possibility of the client altering the sample 
items, the auditor should not inform the client too far in advance of the sample items 
selected. The auditor should also control the sample after the client provides the 
documents. Several additional sample items may be selected as extras to replace any 
voided items in the original sample. 

The random selection for the Hillsburg audit procedures is straightforward except 
for the different sample sizes needed for different attributes. To overcome this problem, 
auditors can select a random sample of 50 for use on all nine attributes, followed by 
another sample of 15 for all attributes except attributes 7 and 8, an additional 10 for 
attributes 1 through 5, and 25 more for attributes 2 through 5. 

Figure 15-1 (p. 483) illustrates the selection of the first 50 sample items for 
Hillsburg Hardware using computer generation of random numbers. 


The auditor performs the audit procedures by examining each item in the sample to 
determine whether it is consistent with the definition of the attribute and by maintaining 
a record of all the exceptions found. When audit procedures have been completed for a 
sampling application, the auditor will have a sample size and number of exceptions for 
each attribute. 


Select the Sample 


Perform the 
Audit Procedures 
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five Inspection of Sample Items for Attributes ) 






























































































































































CLIENT: Hillsburg Hardware 
INSPECTION OF SAMPLE ITEMS = Prepared by MSW___ 
FOR ATTRIBUTES Date 11/15/11 
YEAR-END: DECEMBER 31, 2011 
Identity 
of Item Attributes : 
Selected X = Exception 
Invoice delle esses eSanl eerie veil om Onli 
no. 
3787 x 
3924 X X 
3990 X 
4058 Xx X 
4117 x 
4222 X 
4488 Xx 
4635 xan ex 
4955 X x 
4969 Xx 
5101 X 
5166 Xx 
5419 xX 
5832 X 
5890 X 
6157 Xx Xx 
6229 X 
6376 X 
6635 X 
7127 X 
8338 X 
8871 X 
9174 X 
9371 X 
No. 
Exceptions | 0 2 0 10 4 1 0 12 0 
Sample 
Size 75 | 100 | 100| 100 | 100 | 65 | 50 | 50 | 65 
S S 





To document the tests and provide information for review, auditors commonly 
include a schedule of the results. Some auditors prefer to include a schedule listing all 
items in the sample; others prefer to limit the documentation to identifying the 
exceptions. This latter approach is followed in Figure 15-3. 


Generalize The sample exception rate (SER) can be easily calculated from the actual sample 
from the Sample results. SER equals the actual number of exceptions divided by the actual sample size. 
to the Population Figure 15-3 summarizes the exceptions found for tests of attributes 1 through 9. In this 


example, the auditor found zero exceptions for attribute 1 and two exceptions for 
attribute 2, making the SER 0 percent (0 + 75) for attribute 1, and 2 percent for 
attribute 2 (2 +100). 
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It is improper for the auditor to conclude that the population exception rate is 
exactly the same as the sample exception rate, as there is only a slight chance they are 
identical. For nonstatistical methods, auditors use two ways to generalize from the 
sample to the population. 


1. Add an estimate of sampling error to SER to arrive at a computed upper excep- 
tion rate (CUER) for a given ARACR. It is extremely difficult for auditors to make 
sampling error estimates using nonstatistical sampling because of the judgment required 
to do so; therefore, they usually do not use this approach. 

2. Subtract the sample exception rate from the tolerable exception rate to find the 
calculated sampling error (TER — SER), and evaluate whether it is sufficiently large to 
conclude that the true population exception rate is acceptable. Under this approach, the 
auditor does not make an estimate of the computed upper exception rate. Most auditors 
using nonstatistical sampling follow this approach. For example, if an auditor takes a 
sample of 100 items for an attribute and finds no exceptions (SER = 0) and TER is 5 
percent, calculated sampling error is 5 percent (TER of 5 percent — SER of 0 = 5 percent). 
If the auditors had found four exceptions, calculated sampling error would have been 1 
percent (TER of 5 percent — SER of 4 percent). It is much more likely that the true 
population exception rate is less than or equal to the tolerable exception rate in the first 
case than in the second one. Therefore, most auditors would probably find the popu- 
lation acceptable based on the first sample result and not acceptable based on the second. 

When SER exceeds the EPER used in designing the sample, auditors usually 
conclude that the sample results do not support the preliminary assessed control risk. 
In that case, auditors are likely to conclude that there is an unacceptably high risk that 
the true deviation rate in the population exceeds TER. 

The auditor’s consideration of whether sampling error is sufficiently large also 
depends on the sample size used. If the sample size in the previous example had been 
only 20 items, the auditor would have been much less confident that finding no excep- 
tions was an indication that the npego xPbDm rH Mhangexcrer. 

The SER and the calculated sampling error (TER — SER) for Hillsburg Hardware 
are summarized in Figure 15-4 (p. 496). 


In addition to determining SER for each attribute and evaluating whether the true (but 
unknown) exception rate is likely to exceed the tolerable exception rate, auditors must 
analyze individual exceptions to determine the breakdown in the internal controls that 
allowed them to happen. Exceptions can be caused by many factors, such as careless- 
ness of employees, misunderstood instructions, or intentional failure to perform 
procedures. The nature of an exception and its causes have a significant effect on the 
qualitative evaluation of the system. For example, if all the exceptions in the tests of 
internal verification of sales invoices occurred while the person normally responsible 
for performing the tests was on vacation, this will affect the auditor’s evaluation of the 
internal controls and the subsequent investigation differently than if the exceptions 
arose from the incompetence of the regular employee. 
The exception analysis is illustrated for Hillsburg in Figure 15-5 on page 498. 


When generalizing from the sample to the population, most auditors using non- 
statistical sampling subtract SER from TER and evaluate whether the difference 
(calculated sampling error) is sufficiently large. If the auditor concludes the difference 
is sufficiently large, the control being tested can be used to reduce assessed control risk 
as planned, assuming a careful analysis of the exceptions does not indicate the 
possibility of other significant problems with internal controls. 

As Figure 15-4 illustrates, SER exceeds TER for attributes 4 and 8. Although SER is 
less than TER for attributes 2 and 5, the auditor concluded that the calculated 
allowance for sampling error is too small and the results of these tests are therefore also 
unacceptable. 


Analyze Exceptions 


Decide the 
Acceptability of 
the Population 
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Sampling Data Sheet: Tests of Hillsburg Hardware Co-s Billing 








Function 
Client: Hillsburg Hardware Year-end: 12/31/11 
Audit Area: Tests of Controls and Substantive Tests of Transactions— Pop. size: 5,764 


Billing Function 


Define the objective(s): Examine duplicate sales invoices and related documents to determine 
whether the system has functioned as intended and as described in the audit program. 


Define the population precisely (including stratification, if any): Sales invoices for the 
period 1/1/11 to 10/31/11. First invoice number = 3689. Last invoice number = 9452. 


Define the sampling unit, organization of population items, and random selection procedures: 
Sales invoice number, recorded in the sales journal sequentially; computer generation of random 



































numbers. 
Planned Audit Actual Results 
sags . EPER | TER ARACR Initial Sample | Number | Sample | Calculated 
Description of Attributes sample size of exception| Sampling 
size exceptions; rate Error 
(TER — SER) 
1. Existence of the sales invoice number 
in the sales journal (procedure 12). fe) 4 Low 75 75 (0) 0 4.0 
2. Amount and other data in the master 
file agree with sales journal entry 
(procedure 13a). 1 5 Low 100 100 2 2 3.0 
3. Amount and other data on the 
duplicate sales invoice agree with the 
sales journal entry (procedure 13b). 1 5 Low 100 100 (0) 0 5.0 
4, Evidence that pricing, extensions, and SER 
footings are checked (initials and exceeds 
correct amounts) (procedure 13b). 1 5 Low 100 100 10 10 TER 
5. Quantity and other data on the bill of 
lading agree with the duplicate sales 
invoice and sales journal (procedure 13c). 1 5 Low 100 100 4 4 1.0 
6. Quantity and other data on the sales 
order agree with the duplicate sales 
invoice (procedure 13d). 1 7 Low 65 65 1 1.5 55 
7. Quantity and other data on the 
customer order agree with the duplicate 
sales invoice (procedure 13e). 1.5 9 Low 50 50 (0) (¢) 9.0 
8. Credit is approved SER 
exceeds 
(procedure 13e). 15 | 9 | Low 50 50 12 24 TER 
9. For recorded sales in the sales 
journal, the file of supporting 
documents includes a duplicate sales 
invoice, bill of lading, sales order, and 
customer order (procedure 14). 1 7 Low 65 65 fe) (¢) 7.0 




















Intended use of sampling results: 


1. Effect on Audit Plan: Controls tested through attributes 1, 3, 6, 7, and 9 can be viewed as 
operating effectively given the size of the allowance for sampling error (e.g., TER — SER). Additional 
emphasis is needed in confirmation, allowance for uncollectible accounts, cutoff tests, and price tests 
for the financial statement audit due to results of tests for attributes 2, 4, 5, and 8. 


2. Effect on Report on Internal Control: The allowance for sampling error is too small or SER exceeds 
TER for attributes 2, 4, 5, and 8. These findings have been communicated to management to allow an 
opportunity for correction of the control deficiency to be made before year-end. If timely correction is 
made by management, the corrected controls will be tested before year-end for purposes of reporting 
on internal control over financial reporting. 


3. Recommendations to Management: Each of the exceptions should be discussed with 
management. Specific recommendations are needed to correct the internal verification of sales 
invoices and to improve the approach to credit approvals. 




















When the auditor concludes that TER — SER is too small to conclude that the 
population is acceptable, or when SER exceeds TER, the auditor must follow one of 
four courses of action: 


496 Part 3 / APPLICATION OF THE AUDIT PROCESS TO THE SALES AND COLLECTION CYCLE 


Revise TER or ARACR This alternative should be followed only when the auditor has 
concluded that the original specifications were too conservative. Relaxing either TER or 
ARACR may be difficult to defend if the auditor is ever subject to review by a court or a 
commission. Auditors should change these requirements only after careful consideration. 


Expand the Sample Size An increase in the sample size has the effect of decreasing 
the sampling error if the actual sample exception rate does not increase. Of course, SER 
may also increase or decrease if additional items are selected. Increasing the sample size 
is appropriate if the auditor believes the initial sample was not representative, or if it is 
important to obtain evidence that the control is operating effectively. This is likely if 
the auditor is reporting on internal control, or if the control relates to highly significant 
account balances such as receivables or inventory. 


Revise Assessed Control Risk If the results of the tests of controls and substantive 
tests of transactions do not support the preliminary assessed control risk, the auditor 
should revise assessed control risk upward. This will likely result in the auditor 
increasing substantive tests of transactions and tests of details of balances. For example, 
if tests of controls of internal verification procedures for verifying prices, extensions, 
and quantities on sales invoices indicate that those procedures are not being followed, 
the auditor should increase substantive tests of transactions for the accuracy of sales. If 
the substantive tests of transactions results are unacceptable, the auditor must increase 
tests of details of balances for accounts receivable. 

The auditor should decide whether to increase sample size or to revise assessed 
control risk on the basis of cost versus benefit. If the sample is not expanded, the 
auditor must revise assessed control risk upward and therefore perform additional 
substantive tests. The cost of additional tests of controls must be compared with that of 
additional substantive tests. If an expanded sample continues to produce unacceptable 
results, additional substantive tests will still be ne 

For accelerated filer public COMM O° PDE "RHA a 
deficiencies to determine their effect AB: ag itor’s report on int control. rt the 
deficiencies constitute a material weakness but are corrected before year-end, the auditor 
may be able to test management’s corrected controls. The auditor may also be able to 
identify additional compensating controls. If the auditor is unable to test corrected 
controls or identify compensating controls and the deficiencies are deemed to be 
material weaknesses, the audit report on internal control must be an adverse opinion. 


Communicate with the Audit Committee or Management Communication is 
desirable, in combination with one of the other three actions just described, regardless 
of the nature of the exceptions. When the auditor determines that the internal controls 
are not operating effectively, management should be informed in a timely manner. If 
the tests were performed prior to year-end, this may allow management to correct the 
deficiency before year-end. The auditor is required to communicate in writing to those 
charged with governance, such as the audit committee, regarding significant deficiencies 
and material weaknesses in internal control. 

In some instances, it may be acceptable to limit the action to writing a letter to 
management when TER — SER is too small. This occurs if the auditor has no intention 
of reducing the assessed control risk or has already carried out sufficient procedures to 
his or her own satisfaction as a part of substantive tests of transactions. 

As Figure 15-4 illustrates, in the Hillsburg audit, SER exceed TER for two attributes 
(4 and 8). Because the sales transactions tested at Hillsburg represented transactions 
recorded only through October 31, 2011, timely communication of these deficiencies 
may allow Hillsburg management to correct the noted deficiencies in time for the 
auditor to test the corrected controls before year-end for purposes of auditing internal 
control over financial reporting. 

In Figure 15-5 (p. 498), the last column summarizes the follow-up actions the 
auditor plans to do regardless of whether the control deficiencies were corrected. 
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Analysis of Exceptions 



































CLIENT: Hillsburg Hardware 
ANALYSIS OF EXCEPTIONS Prepared by: MSW 
YEAR-END: December 31, 2011 Date: 11/15/11 
F Number of Nature of Effect on the financial statement 
Attribute . = e 
exceptions exceptions audit and other comments* 

2 2 Both errors were posted to Because the allowance for 
the wrong account and were sampling error is small (e.g., 
still outstanding after several TER — SER), additional 
months. The amounts were substantive work is needed. 
for $2,500 and $7,900. Perform expanded confirmation 

procedures and review older 
uncollected balances thoroughly. 

4 10 —In six cases there were no As a result, have independent 

initials for internal verification. | client personnel recheck a 
—In two cases the wrong price | random sample of 500 duplicate 
was used but the errors were | sales invoices under our control. 
under $200 in each case. Also, expand the confirmation of 
—In one case there was a accounts receivable. 
pricing error of $5,000. 
—In one case freight was not 
charged. (Three of the last 
four exceptions had initials 
for internal verification.) 

5 4 In each case the date on the Do extensive tests of the sales 
duplicate sales invoice was cutoff by comparing recorded 
several days later than the sales with the shipping documents. 
shipping date. 

6 1 Just 106 items were shipped No expansion of tests of controls 
and billed though the sales or substantive tests. The system 
order was for 112 items. The appears to be working effectively. 
reason for the difference was 
an error in the perpetual 
inventory master file. The 
perpetuals indicated that 112 
items were on hand, when 
there were actually 106. The 
system does not backorder 
for undershipments smaller 
than 25%. 

8 12 Credit was not approved. Expand the year-end procedures 
Four of these were for new extensively in evaluating 
customers. Discussed with allowance for uncollectible 
Chulick, who stated his busy accounts. This includes scheduling 
schedule did not permit of cash receipts subsequent to 
approving all sales. year-end for all outstanding 

accounts receivable to determine 
collectibility at year-end. 
*This column documents conclusions about implications for the financial statement audit. The control 
deficiencies have been communicated to management to allow an opportunity for correction of the 
deficiency before year-end. If timely correction is made by management, the corrected controls will be 
tested before year-end for purposes of reporting on internal control over financial reporting. 





Because the difference between SER and TER was small for attributes 2 and 5, Figure 
15-5 includes follow-up actions in the financial statement audit for those attributes. No 
follow-up actions are required to address the exception noted for attribute 6, given the 
large difference between SER and TER. The conclusions reached about each attribute 


are also documented at the bottom of Figure 15-4 (p. 496). 
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The auditor needs to retain adequate records of the procedures performed, the methods Adequate 
used to select the sample and perform the tests, the results found in the tests, and the Documentation 


conclusions reached. Documentation is needed for both statistical and nonstatistical 
sampling to evaluate the combined results of all tests and to defend the audit if the need 
arises. Figures 15-2 through 15-6 illustrate the type of documentation commonly found 
in practice. 

Figure 15-6 illustrates the evidence-planning worksheet used in the audit of Hillsburg 
Hardware to decide the tests of balances for accounts receivable. After completing tests of 
controls and substantive tests of transactions, the auditor should complete rows 3 through 
7 of the worksheet. (You may recall that rows 1 and 2 were completed in Chapter 9.) Rows 





Evidence-Planning Worksheet to Decide Tests of Details of Balances for Hillsburg Hardware 
Co. — Accounts Receivable 





Detail tie-in 


Acceptable audit risk 


Control risk— te 
Sales Ww 


cB Completeness 

Blame 
Classification 
Realizable value 


applicable 


Not 


Control risk— Medi 
edium applicable applicable 


Cash receipts 


Control risk— 
Additional controls 


Good 
results 


Fair 
results 


Good Unacceptable Not Not 
results results applicable applicable 


Good Good Not Not 
results results applicable applicable 


Substantive tests Goud Ba 
of transactions— | 
Sales results results 
Substantive tests 

of transactions— ae na 
Cash receipts results results 


Analytical 
procedures 


Planned detection 
risk for tests of 
details of balances 


Good 


results results 


Planned audit 
evidence for tests of 
details of balances 


Eee 


Tolerable misstatement $265,000 
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3 through 5 document control risk for sales, cash receipts, and additional controls. The 
control risk assessments in Figure 15-6 are the same as the preliminary assessments in 
the control risk matrices for Hillsburg Hardware on pages 309 and 460, with the 
following modifications: 


* Control risk is high for the accuracy objective for sales because of the unsatis- 
factory results for attribute 4 (procedure 13b). 

* Control risk is high for the realizable value objective for accounts receivable 
based on the results for attribute 8 related to credit approval for sales transactions 
(procedure 13e). 

* The occurrence (completeness) objective for cash receipts relates to the 
completeness (existence) objective for accounts receivable. 


Finally, note in Figure 15-6 that all substantive tests of transactions results were 
satisfactory except for the accuracy and cutoff objectives for sales. Refer back to Figure 
15-5 (p. 498) and you can see that: 


* Substantive tests of transactions results for the accuracy objective were only fair 
because of exceptions found for attribute 2 (procedure 13a). 

* Results were unacceptable for the cutoff objective because of unsatisfactory 
results for attribute 5 (procedure 13c). 


=) Summary of Audit Sampling Steps 


PLAN THE SAMPLE 


. State the objectives 
. Decide whether audit sampling 
applies 

3. Define attributes and exception 
conditions 

4. Define population 

5. Define sampling unit 

6. Specify tolerable exception rate 

7. Specify acceptable risk of assessing 
control risk too low 

8. Estimate population exception rate 

9. Determine initial sample size 


—__———— 


SELECT THE SAMPLE 


10. Select sample 


5 


PERFORM THE TESTS 


11. Perform audit procedures 





ho — 





Compare! 








Number of exceptions 
in sample and 
actual sample size 








EVALUATE THE RESULTS 


12. Generalize from sample to population 
Computed epee Actual exceptions in sample 
exception rate Actual sample size 
Acceptable risk of assessing control 
risk too low 
13. Analyze exceptions 
14. Decide acceptability of population 























Ss =) 
'Many auditors using nonstatistical methods calculate tolerable exception rate minus sample exception rate and evaluate 
whether the difference is sufficiently large. 
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All of the steps involved in nonstatistical sampling are summarized in Figure 15-7. 
Although this figure deals with nonstatistical sampling, the 14 steps in the figure also 
apply to statistical sampling, which is covered next. 


STATISTICAL AUDIT SAMPLING 





The statistical sampling method most commonly used for tests of controls and sub- OBJECTIVE 15-6 
stantive tests of transactions is attributes sampling. (When the term attributes eRe anduisecabe 
sampling is used in this text, it refers to attributes statistical sampling. Nonstatistical attributes sampling and 
sampling also has attributes, which are the characteristics being tested for in the a sampling distribution. 


population, but attributes sampling is a statistical method.) 

The application of attributes sampling for tests of controls and substantive tests of 
transactions has far more similarities to nonstatistical sampling than differences. The 
same 14 steps are used for both approaches, and the terminology is essentially the 
same. The main differences are the calculation of initial sample sizes using tables 
developed from statistical probability distributions and the calculation of estimated 
upper exception rates using tables similar to those for calculating sample sizes. 


SAMPLING DISTRIBUTION 


Auditors base their statistical inferences on sampling distributions. A sampling 
distribution is a frequency distribution of the results of all possible samples of a 
specified size that could be obtained from a population containing some specific 
characteristics. Sampling distributions allow the auditor to make probability state- 
ments about the likely representatt gi ny pF ‘Enhat ei ution. 
Attributes sampling is based on ibe ig dine ution, in Whic g ee 
sample in the population has one of two possible values, such as yes/no, black/white, or 
control deviation/no control deviation. 

Assume that in a population of sales invoices, 5 percent have no shipping docu- 
ments attached as required by the client’s internal controls. If the auditor takes a sample 
of 50 sales invoices, how many will be found that have no shipping documents? Simple 
multiplication would estimate 2.5 exceptions (5% of 50), but that number is impossible 
because there is no such thing as half an exception. In reality, the sample could contain 
no exceptions or even more than ten. A binomial-based sampling distribution tells us 
the probability of each possible number of exceptions occurring. Table 15-7 (p. 502) 
illustrates the sampling distribution for the example population with a sample of 50 
items from a very large population and an exception rate of 5 percent. To calculate the 
probability of obtaining a sample with at least one exception, subtract the probability of 
no exceptions occurring from 1 (100 percent). By doing so, we find the likelihood of 
finding a sample with at least one exception is 1 — .0769, or 92.31 percent. 

Each population exception rate and sample size has a unique sampling distri- 
bution. The distribution for a sample size of 100 from a population with a 5 percent 
exception rate differs from the previous example, as will the distribution for a sample 
of 50 from a population with a 3 percent exception rate. 

Of course, auditors do not take repeated samples from known populations. They 
take one sample from an unknown population and get a specific number of excep- 
tions in that sample. But knowledge about sampling distributions enables auditors to 
make statistically valid statements about the population. If the auditor selects a 
sample of 50 sales invoices to test for attached shipping documents and finds one 
exception, the auditor could examine the probability table in Table 15-7 and know 
there is a 20.25 percent probability that the sample came from a population with a 5 
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been Probability of Each Exception Rate —5 Percent Population ) 
Exception Rate and Sample Size of 50 
Number of Exceptions Percentage of Exception Probability Cumulative Probability 
0 0 .0769 .0769 
1 2 .2025 .2794 
2 4 .2611 5405 
3 6 .2199 .1604 
4 8 .1360 .8964 
5 10 .0656 .9620 
6 12 .0260 .9880 
i 14 .0120 1.0000 
L ) 











percent exception rate, and a 79.75 percent (1 —.2025) probability that the sample was 
taken from a population having some other exception rate. Based on the cumulative 
probabilities column in Table 15-7, an auditor could estimate a 27.94 percent proba- 
bility that the sample came from a population with more than a 5 percent exception rate 
and a 72.06 percent (1 — .2794) probability that the sample was taken from a popula- 
tion having an exception rate of 5 percent or less. Because it is also possible to calculate the 
probability distributions for other population exception rates, auditors use these to draw 
statistical conclusions about the unknown population being sampled. These sampling 


distiA BS ar prye Ups Hryawee qpiditors for attributes sampling. 


APPLICATION OF ATTRIBUTES SAMPLING 





OBJECTIVE 15-7 While the 14 steps discussed for nonstatistical sampling are equally applicable to 
attributes sampling, in this section, we'll focus on the differences between the two. 


Use attributes sampling 





in tests of controls and Plan the Sample 
Spe ae of 1. State the objectives of the audit test. Same for attributes and nonstatistical 
sampling. 
2. Decide whether audit sampling applies. Same for attributes and nonstatistical 
sampling. 


3. Define attributes and exception conditions. Same for attributes and nonstatis- 
tical sampling. 

4. Define the population. Same for attributes and nonstatistical sampling. 

5. Define the sampling unit. Same for attributes and nonstatistical sampling. 

6. Specify the tolerable exception rate. Same for attributes and nonstatistical 
sampling. 

7. Specify acceptable risk of assessing control risk too low. The concepts of specifying 
this risk are the same for both statistical and nonstatistical sampling, but the 
method of quantification is usually different. For nonstatistical sampling, most 
auditors use low, medium, or high acceptable risk, whereas auditors using attri- 
butes sampling assign a specific amount, such as 10 percent or 5 percent risk. 
The methods differ because auditors need to evaluate results statistically. 

8. Estimate the population exception rate. Same for attributes and nonstatistical 
sampling. 
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9. Determine the initial sample size. Four factors determine the initial sample size 
for both statistical and nonstatistical sampling: population size, TER, ARACR, 
and EPER. In attributes sampling, auditors determine sample size by using 
computer programs or tables developed from statistical formulas. 


The two tables in Table 15-8 (p. 504) come from the AICPA Audit Sampling Guide. 
The top one shows sample sizes for a 5 percent ARACR, while the bottom one is for a 
10 percent ARACR. 


Use of the Tables When auditors use the tables to determine initial sample size, they 
follow these four steps: 


i. Select the table corresponding to the ARACR. 

ii. Locate the TER at the top of the table. 

ii. Locate the EPER in the far left column. 

iv. Read down the appropriate TER column until it intersects with the appropriate 
EPER row. The number at the intersection is the initial sample size. 


e. 


Using the Hillsburg Hardware Co. example, assume that an auditor is willing to 
reduce assessed control risk for the agreement between sales orders and invoices if the 
number of exceptions in the population (attribute 6 in Table 15-3 on page 488) does 
not exceed 7 percent (TER), at a 5 percent ARACR. On the basis of past experience, the 
auditor sets EPER at 1 percent. On the 5 percent ARACR table, locate the 7 percent TER 
column, and read down the column until it intersects with the 1 percent EPER row. 
The initial sample size is 66. 

Is 66 a large enough sample size for this audit? It is not possible to decide until after 
the tests have been performed. If the actual exception rate in the sample turns out to be 
greater than 1 percent, the auditor will be unsure of the effectiveness of the control. 
The reasons will become apparent in the following sections. 


Effect of Population Size In heApago's PDE aup} hia cdenysize of 


the population in determining the initial sample size. Statistical theory shows that in 
populations where attributes sampling applies, population size is a minor considera- 
tion in determining sample size. Because most auditors use attributes sampling for 
reasonably large populations, the reduction of sample size for smaller populations is 
ignored here. 


Select the Sample and Perform the Audit Procedures 
10. Select the sample. The only difference in sample selection for statistical and 
nonstatistical sampling is the requirement that probabilistic methods must be 
used for statistical sampling. Either simple random or systematic sampling is 
used for attributes sampling. 
11. Perform the audit procedures. Same for attributes and nonstatistical sampling. 


Evaluate the Results 
12. Generalize from the sample to the population. For attributes sampling, the 
auditor calculates an upper precision limit (CUER) at a specified ARACR, 
again using special computer programs or tables developed from statistical 
formulas. The calculations are illustrated in tables like Table 15-9 (p. 505). 
These are “one-sided tables,” meaning they represent the upper exception rate 
for a given ARACR. 


Use of the Tables Use of tables to compute CUER involves four steps: 
i. Select the table corresponding to the auditor’s ARACR. This ARACR should be 
the same as the ARACR used for determining the initial sample size. 
ii. Locate the actual number of exceptions found in the audit tests at the top of 
the table. 
iil. Locate the actual sample size in the far left column. 
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TABLE 15-8 Determining Sample Size for Attributes Sampling 








5 PERCENT ARACR 

















Estimated 

Population 

Exception Tolerable Exception Rate (in Percent) 

Rate (in 

Percent) 2 3 4 5 6 7 8 9 10 15 20 
0.00 149 99 74 59 49 42 36 32 29 19 14 
0.25 236 157 117 93 78 66 58 Sil 46 30 22) 
0.50 - 157 117 93 78 66 58 51 46 30 22 
0.75 be 208 117 93 78 66 58 il 46 30 22 
1.00 Si * 156 93 78 66 58 51 46 30 2H) 
1225 be - 156 124 78 66 58 51 46 30 22 
1.50 ba Y 192 124 103 66 58 Si 46 30 22 
ilezé3) cs * 227. 153 103 88 77 51 46 30 22) 
2.00 be - bs 181 127 88 Ti, 68 46 30 22 
225 be = bs 208 127 88 If 68 61 30 22) 
2.50 a x - 150 109 77 68 61 30 22) 
PAS) " = be = 173 109 95 68 61 30 22 
3.00 ba = = ~ 195 129 95 84 61 30 22 
3.25 f x Ms * ¥ 148 112 84 61 30 22 
3.50 ie cs be = - 167 i 84 76 40 22 
S315 ba = = = 2 185 129 100 76 40 2) 
4.00 se x Ms 2 “ ce 146 100 89 40 22 
5.00 se be of bs x - 158 116 40 30 
6.00 ba = = = = * a = 179 50 30 
7.00 * * * * * * * * * 68 37 

10 PERCENT ARACR 
0.00 114 76 57 45 38 52) 28 25 22 15 11 
O25 194 129 96 Tif 64 D5 48 42 38 25) 18 
0.50 194 129 96 77 64 55 48 42 38 25 18 
0.75 265 129 96 Wf 64 55 48 42 38 25 18 
1.00 ie 176 96 Uff 64 55 48 42 38 25 18 
1.25 eo 221 132 if 64 55 48 42 38 25 18 
1.50 a 2 132 105 64 55 48 42 38 25 18 
le7/s) = = 166 105 88 55 48 42 38 25 18 
2.00 ce o 198 152 88 75 48 42 38 25 18 
225 ae a 132 88 75 65 42 38 25 18 
2.50 = e = 158 110 75 65 58 38 25 18 
Dal a a 209 152 94 65 58 52 25 18 
3.00 a id be 3 152 94 65 58 oy) 25 18 
6225) = . = = 153 tS) 82 58 DZ 25 18 
3.50 s a ey 194 NS) 82 TS 52 25 18 
SH/5) a cd be 3 2 131 98 73 by, 25 18 
4.00 = . = = = 149 98 73 65 25 18 
4.50 s a a a 218 130 87 65 34 18 
5.00 a cd be 3 a nf 160 TiS 78 34 18 
5.50 = . = = = = * 142 103 34 18 
6.00 ie e a “i af a = 182 116 45 25 
7.00 so A be 2 a 2 bs 199 byl 25 
7.50 * * * * * * * * * 52 25 
8.00 * * * * * * * * * 60 25 
l 8.50 * * * * * * * * * 68 32 
<4 





*Sample is too large to be cost effective for most audit applications. 


Notes: 1. This table assumes a large population. 2. Sample sizes are the same in certain columns even when estimated population exception rates differ because of the 
method of constructing the tables. Sample sizes are calculated for attributes sampling by using the expected number of exceptions in the population, but 
auditors can deal more conveniently with estimated population exception rates. For example, in the 15 percent column for tolerable exception rate, at an ARACR 
of 5 percent, the initial sample size for most EPERs is 30. One exception, divided by a sample size of 30, is 3.3 percent. Therefore, for all EPERs greater than zero 
but less than 3.3 percent, the initial sample size is the same. 
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iv. Read down the appropriate actual number of exceptions column until it inter- 
sects with the appropriate sample size row. The number at the intersection is 
the CUER. 


To use the evaluation table for Hillsburg Hardware, assume an actual sample size of 
70 and one exception in attribute 6. Using an ARACR of 5 percent, CUER equals 6.6 
percent. In other words, the CUER for attribute 6 is 6.6 percent at a 5 percent ARACR. 
Does this mean that if 100 percent of the population were tested, the true exception 



































a) 
TABLE 15-9 Evaluating Sample Results Using Attributes Sampling 
5 PERCENT ARACR 
Actual Number of Exceptions Found 
Sample Size 0 1 2 3 4 5 6 7 8 9 10 
25 11.3 17.6 2 - = : . + is - 
30 9.5 14.9 19.6 = * * “8 - * 5s # 
35 8.3 12.9 17.0 - * ‘ - " ‘i 
40 73 11.4 15.0 18.3 bs 2 be ¢ : - 
45 6.5 10.2 13.4 16.4 19.2 : = i is bs = 
50 He) 92) 1221 14.8 17.4 19%9 if : * bs - 
By) 5.4 8.4 Wal (EHS) 5:9 18.2 = = ce ‘i : 
60 49 Zhi 10.2 125 14.7 16.8 18.8 : : : - 
65 4.6 71 9.4 bas) 13.6 1525 17.4 953 - . i 
70 4.2 6.6 8.8 10.8 12.6 14.5 16.3 18.0 SE, Y i 
7B) 4.0 6.2 8.2 10.1 11.8 13.6 15:2 16.9 18.5 20.0 
80 e// 5.8 TT 915) 11.1 127 14.3 15:9 17.4 18.9 - 
90 3 Sy 6.9 8.4 9:9 11.4 12.8 14.2 (eis) 16.8 18.2 
100 3.0 47 6.2 7.6 9.0 10.3 Ties 12.8 14.0 15:2 16.4 
125 2.4 3.8 5.0 6.1 7:2. 8.3 9.3 10.3 11.3 1253) ei,72 
150 2.0 3.2 4.2 5.1 6.0 6.9 78 8.6 9.5 10.3 11.1 
200 ile) 2.4 oz SYS) 4.6 Bye 5:9 6.5 2. 78 8.4 
10 PERCENT ARACR 
Actual Number of Exceptions Found 
Sample Size 0 1 2 3 4 5 6 7 8 9 10 
20 10.9 18.1 . + Ms “2 = : z : = 
25 8.8 14.7 19.9 i = * = : = * - 
30 74 12.4 16.8 * ce = = - * 
35 6.4 10.7 14.5 18.1 = - + ‘i i i cs 
40 5.6 9.4 12.8 16.0 19.0 Hf = : = : = 
45 5.0) 8.4 11.4 14.3 17.0 1957 : ¥ ce * 
50 4.6 7.6 10.3 12.9 15.4 17.8 - . = * = 
BS} 4.1 6.9 9.4 11.8 14.1 16.3 18.4 2 x ce 
60 3.8 6.4 8.7 10.8 12.9 15.0 16.9 18.9 * : . 
70 3 Bye) TES) 93 11.1 12.9 14.6 16.3 W.9 19.6 bs 
80 2.9 48 6.6 8.2 9.8 eS 12.8 14.3 15.8 17.2 18.6 
90 2.6 43 5.9 The 8.7 10.1 ihe) 12.8 14.1 15.4 16.6 
100 2.3 3.9 5:5 6.6 79 9.1 10.3 IES) 1257, 13.9 15.0 
120 2.0 3:35 44 BRS 6.6 7.6 8.7 Ohi 10.7 11.6 12:6 
160 (les) 25 3:9 4.2 5.0 5.8 6.5 73 8.0 8.8 9.5 
200 ihe 2.0 2.7 3.4 4.0 4.6 Be) BS) 6.5 Th 76 
L y 
*More than 20 percent. 
Note: This table presents computed upper exception rates as percentages. Table assumes a large population. 
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Attributes Sampling Data Sheet: Tests of Hillsburg Hardware Co-s ) 
Billing Function 








Client: Hillsburg Hardware Year-end: 12/31/11 
Audit Area: Tests of Controls and Substantive Tests of Transactions— Pop. size: 5,764 
Billing Function 


Define the objective(s): Examine duplicate sales invoices and related documents to determine 
whether the system has functioned as intended and as described in the audit program. 


Define the population precisely (including stratification, if any): Sales invoices for the 
period 1/1/11 to 10/31/11. First invoice number = 3689. Last invoice number = 9452. 


Define the sampling unit, organization of population items, and random selection procedures: 
Sales invoice number, recorded in the sales journal sequentially; computer generation of random 



































numbers. 
Planned Audit Actual Results 
Parr . EPER | TER ARACR Initial Si I Numbe: Ss I CUER 
Description of Attributes catnple Ge | ek exception 
size exceptions} rate 

1. Existence of the sales invoice number 

in the sales journal (procedure 12). 0 4 5 74 75 0 (0) 4.0 
2. Amount and other data in the master 

file agree with sales journal entry 

(procedure 13a). 1 5 5 93 100 2 2 6.2 
3. Amount and other data on the 

duplicate sales invoice agree with the 

sales journal entry (procedure 13b). 1 5 5 93 100 0 0 3.0 
4. Evidence that pricing, extensions, and 

footings are checked (initials and 

correct amounts) (procedure 13b). 1 5 5 93 100 10 10 16.4 
5. Quantity and other data on the bill of 

lading agree with the duplicate sales 

invoice and sales journal (procedure 13c). 1 5 5 93 100 4 4 9.0 
6. Quantity and other data on the sales 

order agree with the duplicate sales 

invoice (procedure 13d). 1 7 5 66 70 1 1.5 6.6 
7. Quantity and other data on the 

customer order agree with the duplicate 

sales invoice (procedure 13e). 1.5 9 5 51 50 (¢) (0) 5.9 
8. Credit is approved 

(procedure 13e). 15 | 9 5 51 50 12 24 >20 
9. For recorded sales in the sales 

journal, the file of supporting 

documents includes a duplicate sales 

invoice, bill of lading, sales order, and 

customer order (procedure 14). 1 7 5 66 65 (¢) (0) 4.6 


























Intended use of sampling results: 


1. Effect on Audit Plan: Controls tested through attributes 1, 3, 6, 7, and 9 can be viewed as 
operating effectively given that TER equals or exceeds CUER. Additional emphasis is needed in 
confirmation, allowance for uncollectible accounts, cutoff tests, and price tests for the financial 
statement audit due to results of tests for attributes 2, 4,5, and 8. 


2. Effect on Report on Internal Control: CUER exceeds TER for attributes 2, 4, 5, and 8. These 
findings have been communicated to management to allow an opportunity for correction of the 
control deficiency to be made before year-end. If timely correction is made by management, the 
corrected controls will be tested before year-end for purposes of reporting on internal control over 
financial reporting. 


3. Recommendations to Management: Each of the exceptions should be discussed with 
management. Specific recommendations are needed to correct the internal verification of sales 
invoices and to improve the approach to credit approvals. 




















rate will be 6.6 percent? No, the true exception rate remains unknown. What this result 
means is this: if the auditor concludes that the true exception rate does not exceed 6.6 
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percent, there is a 95 percent probability that the conclusion is right and a 5 percent 
chance that it is wrong. 

It is possible to have a sample size that is not equal to those provided for in the 
attributes sampling evaluation tables. When this occurs, it is common for auditors to 
interpolate to estimate the data points that fall between those listed in the table. 

These tables assume a very large (infinite) population size, which results in a more 
conservative CUER than for smaller populations. As with sample size, the effect of 
population size on CUER is typically very small, so it is ignored. 


13. Analyze exceptions. Same for attributes and nonstatistical sampling. 

14. Decide the acceptability of the population. The methodology for deciding the 
acceptability of the population is essentially the same for attributes and nonsta- 
tistical sampling. For attributes sampling, the auditor compares CUER with TER 
for each attribute. Before the population can be considered acceptable, the CUER 
determined on the basis of the actual sample results must be less than or equal to 
TER when both are based on the same ARACR. In our example, when the auditor 
specified a TER of 7 percent at a 5 percent ARACR and the CUER was 6.6 
percent, the requirements of the sample have been met. In this case, the control 
being tested can be used to reduce assessed control risk as planned, provided a 
careful analysis of the cause of exceptions does not indicate the possibility of a 
significant problem in an aspect of the control not previously considered. 

When the CUER is greater than the TER, it is necessary to take specific 
action. The four courses of action discussed for nonstatistical sampling are 
equally applicable to attributes sampling. 


Figure 15-8 illustrates the sampling documentation completed for the tests of 
attributes 1 through 9 in Table 15-3 (p. 488) for Hillsburg Hardware Co. using attri- 
butes sampling. Notice that much of the information in a 15-8 is consistent with 
information presented in the nonstafistical gO DE illustrated in Figure 15- 
4 (p. 496). The key differences pARAG: GOP DE’, He ditor’s 
judgment about ARACR and the initial sample size ied when planning the 
audit, and the calculation of CUER using the actual test results. Notice that the ARACR 
judgment is numerical (5 percent) in the attributes sampling application (Figure 15-8). 
The numerical judgment about ARACR is considered along with the assessments of 
EPER and TER to determine the initial sample sizes for each attribute using Table 15-8 
(p. 504). The CUER in Figure 15-8 is determined using Table 15-9 (p. 505) based on the 
sample exceptions identified and the actual sample size tested. 


A criticism occasionally leveled against statistical sampling is that it reduces the auditor’s 
use of professional judgment. A comparison of the 14 steps discussed in this chapter for 
nonstatistical and attributes sampling shows that this criticism is unwarranted. For 
proper application, attributes sampling requires auditors to use professional judgment in 
most of the steps. To select the initial sample size, auditors depend primarily on TER and 
ARACR, which require a high level of professional judgment, as well as EPER, which 
requires a careful estimate. Similarly, the final evaluation of the adequacy of the entire 
application of attributes sampling, including the adequacy of the sample size, must also 
be based on high-level professional judgment. 


SUMMARY 


In this chapter we described representative samples and discussed the differences between 
statistical and nonstatistical sampling and probabilistic and nonprobabilistic sample 
selection. We also described the 14 steps in sampling for exception rates used in tests of 
controls and substantive tests of transactions. Nonstatistical and statistical attributes 
sampling for exception rates were illustrated for the Hillsburg Hardware Co. 


Need for 
Professional 
Judgment 
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Acceptable risk of assessing control risk 
too low (ARACR)—the risk that the 
auditor is willing to take of accepting a 
control as effective or a rate of monetary 
misstatements as tolerable when the true 
population exception rate is greater than 
the tolerable exception rate 


Attribute—the characteristic being tested 
for in the population 


Attributes sampling—a statistical, proba- 
bilistic method of sample evaluation that 
results in an estimate of the proportion of 
items in a population containing a charac- 
teristic or attribute of interest 


Audit sampling—testing less than 100 per- 
cent of a population for the purpose of 
making inferences about that population 


Block sample selection—a nonprobabilis- 
tic method of sample selection in which 
items are selected in measured sequences 


Computed upper exception rate (CUER)— 
the upper limit of the probable popula- 


tion “ApaAgGe IPDEs Erhran 
rate in thé popUlation at a given ARACR 


Directed sample selection—a nonproba- 
bilistic method of sample selection in 
which each item in the sample is selected 
based on some judgmental criteria estab- 
lished by the auditor 


Estimated population exception rate 
(EPER)—exception rate the auditor expects 
to find in the population before testing 
begins 


Exception rate—the percent of items in 
a population that include exceptions 
in prescribed controls or monetary cor- 
rectness 


Haphazard sample selection—a non- 
probabilistic method of sample selection 
in which items are chosen without regard 
to their size, source, or other distinguishing 
characteristics 


Initial sample size—sample size deter- 
mined by professional judgment (non- 
statistical sampling) or by statistical tables 
(attributes sampling) 


ESSENTIAL TERMS 


Nonprobabilistic sample selection—a 
method of sample selection in which the 
auditor uses professional judgment to 
select items from the population 


Nonsampling risk—the risk that the 
auditor fails to identify existing excep- 
tions in the sample; nonsampling risk 
(nonsampling error) is caused by failure 
to recognize exceptions and by inappro- 
priate or ineffective audit procedures 


Nonstatistical sampling—the auditor’s 
use of professional judgment to select 
sample items, estimate the population 
values, and estimate sampling risk 


Occurrence rate—see exception rate 


Probabilistic sample selection—a method 
of selecting a sample such that each popu- 
lation item has a known probability of 
being included in the sample and the 
sample is selected by a random process 


Random sample—a sample in which 
every possible combination of elements 
in the population has an equal chance of 
constituting the sample 


COA rcsentutive sample—a sample with 


characteristics the same as those of the 
population 


Sample exception rate (SER)—number 
of exceptions in the sample divided by 
the sample size 


Sampling distribution—a frequency distri- 
bution of the results of all possible samples 
of a specified size that could be obtained 
from a population containing some specific 
parameters 


Sampling risk—risk of reaching an 
incorrect conclusion inherent in tests of 
less than the entire population because 
the sample is not representative of the 
population; sampling risk may be reduced 
by using an increased sample size and an 
appropriate method of selecting sample 
items from the population 


Statistical sampling—the use of mathema- 
tical measurement techniques to calculate 
formal statistical results and quantify 
sampling risk 


Systematic sample selection—a proba- 
bilistic method of sampling in which the 
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auditor calculates an interval (the popu- 
lation size divided by the number of 
sample items desired) and selects the 
items for the sample based on the size of 
the interval and a randomly selected 
starting point between zero and the 
length of the interval 


Tolerable exception rate (TER)—the 
exception rate that the auditor will permit 
in the population and still be willing to 
conclude the control is operating effec- 
tively and/or the amount of monetary 
misstatements in the transactions estab- 
lished during planning is acceptable 


REVIEW QUESTIONS 


15-1 (Objective 15-1) State what is meant by a representative sample and explain its 
importance in sampling audit populations. 


15-2 (Objective 15-2) Explain the major difference between statistical and nonstatistical 
sampling. What are the three main parts of statistical and nonstatistical methods? 


15-3 (Objective 15-3) Explain the difference between replacement sampling and non- 
replacement sampling. Which method do auditors usually follow? Why? 


15-4 (Objective 15-3) What are the two types of simple random sample selection methods? 
Which of the two methods is used most often by auditors and why? 


15-5 (Objective 15-3) Describe systematic sample selection and explain how an auditor 
will select 40 numbers from a population of 2,800 items using this approach. What are the 
advantages and disadvantages of systematic sample selection? 


15-6 (Objective 15-4) What is the purpose of using nonstatistical sampling for tests of 
controls and substantive tests of transactions? 


15-7 (Objective 15-2) Explain what is meant by block sample iene and describe how 
an auditor can obtain five blocks of 20 sales invoices PD a ees 


15-8 (Objective 15-5) Define each of AP; 499. cf pe 


Acceptable risk of assessing control risk too low (ARACR) 
Computed upper exception rate (CUER) 

Estimated population exception rate (EPER) 

Sample exception rate (SER) 

Tolerable exception rate (TER) 


n nancer 


ooo © 


15-9 (Objective 15-5) Describe what is meant by a sampling unit. Explain why the 
sampling unit for verifying the occurrence of recorded sales differs from the sampling unit 
for testing for the possibility of omitted sales. 


15-10 (Objective 15-5) Distinguish between the TER and the CUER. How is each deter- 
mined? 


15-11 (Objective 15-1) Distinguish between a sampling error and a nonsampling error. 
How can each be reduced? 


15-12 (Objective 15-4) What is meant by an attribute in sampling for tests of controls and 
substantive tests of transactions? What is the source of the attributes that the auditor 
selects? 


15-13 (Objective 15-4) Explain the difference between an attribute and an exception 
condition. State the exception condition for the audit procedure: The duplicate sales 
invoice has been initialed indicating the performance of internal verification. 


15-14 (Objective 15-5) Identify the factors an auditor uses to decide the appropriate TER. 
Compare the sample size for a TER of 7% with that of 4%, all other factors being equal. 


15-15 (Objective 15-5) Identify the factors an auditor uses to decide the appropriate 
ARACR. Compare the sample size for an ARACR of 10% with that of 5%, all other factors 
being equal. 
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15-16 (Objective 15-5) State the relationship between the following: 


a. ARACR and sample size 

b. Population size and sample size 
c. TER and sample size 

d. EPER and sample size 


15-17 (Objective 15-7) Assume that the auditor has selected 100 sales invoices from a 
population of 100,000 to test for an indication of internal verification of pricing and 
extensions. Determine the CUER at a 10% ARACR if four exceptions are found in the 
sample using attributes sampling. Explain the meaning of the statistical results in auditing 
terms. 


15-18 (Objective 15-5) Explain what is meant by analysis of exceptions and discuss its 
importance. 


15-19 (Objective 15-5) When the CUER exceeds the TER, what courses of action are 
available to the auditor? Under what circumstances should each of these be followed? 


15-20 (Objective 15-3) Distinguish between probabilistic selection and statistical measure- 
ment. State the circumstances under which one can be used without the other. 


15-21 (Objective 15-7) List the major decisions that the auditor must make in using attri- 
butes sampling. State the most important considerations involved in making each decision. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


15-22 (Objectives 15-5, 15-7) The following items apply to determining sample sizes using 
random sampling from large populations for attributes sampling. Select the most 
appropriate response for each question. 


a. If all other factors specified in a sampling plan remain constant, changing the ARACR 
iPpago” PDEs:Enhan eet size to 
(1) ‘Increase. 
(2) remain the same. 
(3) decrease. 
(4) become indeterminate. 


b. If all other factors specified in a sampling plan remain constant, changing the TER 
from 9% to 6% will cause the required sample size to 
(1) increase. 
(2) remain the same. 
(3) decrease. 
(4) become indeterminate. 


c. Of the four factors that determine the initial sample size in attributes sampling 
(population size, tolerable exception rate, acceptable risk of assessing control risk too 
low, and expected population exception rate), which factor has the least effect on 
sample size? 

(1) Population size 

(2) Expected population exception rate 

(3) Tolerable exception rate 

(4) Acceptable risk of assessing control risk too low 


d. The sample size of a test of controls varies inversely with: 





Expected population Tolerable 
deviation rate exception rate 
(1) No Yes 
(2) Yes No 
(3) No No 
(4) Yes Yes 





510 Part 3 / APPLICATION OF THE AUDIT PROCESS TO THE SALES AND COLLECTION CYCLE 


15-23 (Objectives 15-5, 15-7) The following items concern determining exception rates 
using random sampling from large populations using attributes sampling. Select the best 
response. 


a. From a random sample of items listed from a client’s inventory count, an auditor esti- 
mates with a 90% confidence level that the CUER is between 4% and 6%. The 
auditor’s major concern is that there is one chance in ten that the true exception rate 
in the population is 
(1) more than 6%. 

(2) less than 6%. 
(3) more than 4%. 
(4) less than 4%. 


b. The upper precision limit (CUER) in statistical sampling is 
(1) the percentage of items in a sample that possess a particular attribute. 
(2) the percentage of items in a population that possess a particular attribute. 
(3) a statistical measure, at a specified confidence level, of the maximum rate of 
occurrence of an attribute. 
(4) the maximum rate of exception that the auditor would be willing to accept in the 
population without altering the planned reliance on the attribute. 


c. Asa result of tests of controls, an auditor assessed control risk too low and decreased 
substantive testing. This assessment occurred because the true deviation rate in the 
population was 
(1) less than the risk of assessing control risk too low, based on the auditor’s sample. 
(2) less than the deviation rate in the auditor’s sample. 

(3) more than the risk of assessing control risk too low, based on the auditor’s sample. 
(4) more than the deviation rate in the auditor’s sample. 


d. An auditor who uses statistical sampling for attributes in testing internal controls 

should reduce the planned reliance on a prescribed control when the 

(1) sample exception rate plus e fe lings risk equals erable 
pat Apage ‘PDF Enhance? 

(2) sample exception rate is less than the expected rate of exception used in planning 
the sample. 

(3) tolerable rate less the allowance for sampling risk exceeds the sample exception rate. 

(4) sample exception rate plus the allowance for sampling risk exceeds the tolerable rate. 


wa 


15-24 (Objectives 15-1, 15-2) The following questions concern sampling for attributes. 
Choose the best response. 


a. An advantage of statistical sampling over nonstatistical sampling is that statistical 
sampling helps an auditor 
(1) minimize the failure to detect errors and fraud. 
(2) eliminate the risk of nonsampling errors. 
(3) design more effective audit procedures. 
(4) measure the sufficiency of the audit evidence by quantifying sampling risk. 


b. Which of the following best illustrates the concept of sampling risk? 
(1) The documents related to the chosen sample may not be available to the auditor 
for inspection. 
(2) An auditor may fail to recognize errors in the documents from the sample. 
(3) A randomly chosen sample may not be representative of the population as a 
whole for the characteristic of interest. 
(4) An auditor may select audit procedures that are not appropriate to achieve the 
specific objective. 
c. For which of the following tests would an auditor most likely use attribute sampling? 
(1) Selecting accounts receivable for confirmation of account balances. 
(2) Inspecting employee time cards for proper approval by supervisors. 
(3) Making an independent estimate of the amount of a LIFO inventory. 
(4) Examining invoices in support of the valuation of fixed asset additions. 
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DISCUSSION QUESTIONS AND PROBLEMS 


Required 


Required 


15-25 (Objective 15-3) 


a. In each of the following independent problems, design an unbiased random sampling 
plan, using an electronic spreadsheet or a random number generator program. The 
plan should include defining the sampling unit and establishing a numbering system 
for the population. After the plan has been designed, select the sample using the 
computer. Assume that the sample size is 75 for each of (1) through (4). 

(1) Prenumbered sales invoices in a sales journal where the lowest invoice number is 
1 and the highest is 8274. 

(2) Prenumbered bills of lading where the lowest document number is 18221 and the 
highest is 29427. 

(3) Accounts receivable on 20 pages with 50 lines per page except the last page, which 
has only 29 full lines. Each line has a customer name and an amount receivable. 

(4) Prenumbered invoices in a sales journal where each month starts over with 
number 1. (Invoices for each month are designated by the month and document 
number.) There is a maximum of 25 pages per month with a total of 215 pages for 
the year. All pages have 100 invoices except for the last page for each month. 


b. Using systematic sampling, select the first five sample items for populations (1) 
through (3) from part a, using the random starting points shown. Recall that the 
sample size is 75 in each case. 

(1) Invoice #39 
(2) Bill of lading #18259 
(3) Page 1, line #11 


15-26 (Objectives 15-3, 15-5, 15-7) Lenter Supply Company is a medium-sized distributor 
of wholesale hardware supplies in the central Ohio area. It has been a client of yours for 


ever Aa ow ‘PDE ‘Hnihaneere for sales at your recommendation. 
In providiry control over shipments, the client has prenumbered “warehouse removal 


slips” that are used for every sale. It is company policy never to remove goods from the 
warehouse without an authorized warehouse removal slip. After shipment, two copies of the 
warehouse removal slip are sent to billing for the computerized preparation of a sales invoice. 
One copy is stapled to the duplicate copy of a prenumbered sales invoice, and the other copy 
is filed numerically. In some cases, more than one warehouse removal slip is used for billing 
one sales invoice. The smallest warehouse removal slip number for the year is 11741 and the 
largest is 34687. The smallest sales invoice number is 45302 and the largest is 65747. 

In the audit of sales, one of the major concerns is the effectiveness of the controls in 
ensuring that all shipments are billed. You have decided to use audit sampling in testing 
internal controls. 


a. State an effective audit procedure for testing whether shipments have been billed. 
What is the sampling unit for the audit procedure? 


b. Assuming that you expect no exceptions in the sample but are willing to accept a TER 
of 4%. Ata 5% ARACR, what is the appropriate sample size for the audit test? You may 
complete this requirement using attributes sampling. 


c. Design a random selection plan for selecting the sample from the population, using 
either systematic sampling or computer generation of random numbers. Use the 
sample size determined in part b. If you use systematic sampling, use a random 
starting point of 11878. 


d. Your supervisor suggests the possibility of performing other sales tests with the same 
sample as a means of efficiently using your audit time. List two other audit procedures 
that can conveniently be performed using the same sample and state the purpose of 
each of the procedures. 


e. Is it desirable to test the occurrence of sales with the random sample you have designed 
in part c? Why? 
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15-27 (Objective 15-7) The following is a partial audit program for the audit of sales 
transactions. 

1. Foot the sales journal for one month and trace the postings to the general ledger. 

2. Vouch entries in sales journal to sales invoice and shipping document. 

3. Review the sales journal for any large or unusual transactions. 

4, Examine evidence on sales invoice that the prices were agreed to the approved price 

list. 
5. Examine sales order for evidence of credit approval prior to shipment. 
6. Recompute extensions of price and quantities on the sales invoice. 


. Identify which audit procedures can be tested by using attributes sampling. Required 
. What is the appropriate sampling unit for the tests in part a? 
. List the attributes for testing in part a. 


. Assume an ARACR of 5% and a TER of 7% for tests of controls and 5% for substantive 
tests of transactions. The EPER for tests of controls is 1.5%, and for substantive tests of 
transactions it is 5%. What is the initial sample size for each attribute? 


aao»#°.s 


15-28 (Objectives 15-5, 15-7) The following questions concern the determination of the 
proper sample size in audit sampling using the following table: 





1 2 3 4 5 6 7 
ARACR (in percent) 10 5 5 5 10 10 5 
TER 6 6 5 6 20 20 2 
EPER (in percent) 2 2 2 2 8 2 0 
Population size 1,000 100,000 6,000 1,000 500 500 1,000,000 





a. Assume that the initial sample size for column 1 using nonstatistical sampling is 90 Required 
items. For each of columns 2 through 7, use your judgment to decide the appropriate 
nonstatistical sample size. In deciding each sample size, consider the effects of changes 
in each of the four factors (ARACR, TER, EPER, and population size) compared with 


column 1. Apago PDF Enhancer 


b. For each of the columns numbered 1 through 7, determine the initial sample size 
needed to satisfy the auditor’s requirements using attributes sampling from the 
appropriate part of Table 15-8 (p. 504). 


c. Using your understanding of the relationship between the following factors and 
sample size, state the effect on the initial sample size (increase or decrease) of 
changing each of the following factors while the other three are held constant: 

(1) An increase in ARACR 

(2) An increase in the TER 

(3) An increase in the EPER 

(4) An increase in the population size 


d. Explain why there is such a large difference in the sample sizes for columns 3 and 6. 


e. Compare your answers in part c with the results you determined in part a (nonstatistical 
sampling) or part b (attributes sampling). Which of the four factors appears to have the 
greatest effect on the initial sample size? Which one appears to have the least effect? 


f. Why is the sample size called the initial sample size? 


15-29 (Objectives 15-5, 15-7) The questions below relate to determining the CUER in 
audit sampling for tests of controls, using the following table: 





1 2 3 4 5 6 7 8 
ARACR (in percent) 5 5 10 5 5 5 5 5 
Population size 50,000 500 5,000 5,000 5,000 900 5,000 500 
Sample size 200 100 200 200 50 100 100 25 
Number of exceptions 4 2 4 4 1 10 0 0 





a. Using nonstatistical sampling, calculate TER — SER for each of columns 1 through 8 — Required 
and evaluate whether or not sampling error is large enough to accept the population. 
Assume that TER is 5% for each column. 
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Required 


Required 


e. 


. For each of the columns 1 through 8, determine CUER using attributes sampling from 


the appropriate table. 


. Using your understanding of the relationship between the four preceding factors and 


the CUER, state the effect on the CUER (increase or decrease) of changing each of the 
following factors while the other three are held constant: 

(1) A decrease in the ARACR 

(2) A decrease in the population size 

(3) A decrease in the sample size 

(4) A decrease in the number of exceptions in the sample 


. Compare your answers in part c with the results you determined in part a (non- 


statistical sampling) or part b (attributes sampling). Which of the factors appears to 
have the greatest effect on the CUER? Which one appears to have the least effect? 


Why is it necessary to compare the CUER with the TER? 


15-30 (Objective 15-7) The following are auditor judgments and attributes sampling 
results for six populations. Assume large population sizes. 


a. 





1 2 3 4 5 6 
EPER (in percent) 2 1 1 0 3 8 
TER (in percent) 6 5 20 5 8 15 
ARACR (in percent) 5 5 10 5 10 10 
Actual sample size 100 100 20 100 60 60 
Actual number of exceptions in the sample 2 4 1 0 1 8 





For each population, did the auditor select a smaller sample size than is indicated by 
using the attributes sampling tables in Table 15-8 (p. 504) for determining sample size? 
Evaluate selecting either a larger or smaller size than those determined in the tables. 


. Calculate the SER and CUER for each population. 


.F i PDE Pp i eee the sample results be considered 
‘Apags a OF PREAH o the auditor? 


d. 


Why is analysis of the exceptions necessary even when the populations are considered 
acceptable? 


. For the following terms, identify which is an audit decision, a nonstatistical estimate 


made by the auditor, a sample result, and a statistical conclusion about the popu- 
lation: 

(1) EPER 

(2) TER 

(3) ARACR 

(4) Actual sample size 

(5) Actual number of exceptions in the sample 

(6) SER 

(7) CUER 


15-31 (Objectives 15-5, 15-7) The questions below relate to determining the CUER in 
audit sampling for tests of controls, using the following table: 


a. 





1 2 3 4 
ARACR (in percent) 10 10 5 5 
Population size 5,000 50,000 5,000 50,000 
Sample size 50 100 50 100 
Number of exceptions 2 4 2 3 
CUER 10.3 719 12.1 7.6 





Calculate SER for each of columns 1 through 4 and use this to calculate the actual 
allowance for sampling risk. 


. Explain why the CUER is higher for the attribute in column 1 than the attribute in 


column 2. 
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c. Explain why the CUER higher for the attribute in column 3 than the attribute in 
column 1. 

d. Assume that the TER for attribute 4 is 6 percent. Your audit senior indicates that he 
would like to be able to rely on this control and has asked you to increase the sample 
by an additional 50 items. Use the appropriate statistical sampling table to evaluate 
whether the increase in the sample is likely to result in favorable results for the entire 
sample of 150 items. 


15-32 (Objective 15-5) For the audit of the financial statements of Mercury Fifo Company, 
Stella Mason, CPA, has decided to apply nonstatistical audit sampling in the tests of 
controls and substantive tests of transactions for sales transactions. Based on her 
knowledge of Mercury’s operations in the area of sales, she decides that the EPER is likely 
to be 3% and that she is willing to accept a 5% risk that the true population exception rate 
is not greater than 6%. Given this information, Mason selects a random sample of 150 sales 
invoices from the 5,000 generated during the year and examines them for exceptions. She 
notes the following exceptions in her audit schedules. There is no other documentation. 








Invoice 

No. Comment 

5028 Sales invoice was originally footed incorrectly but was corrected by client before the bill 
was sent out. 

6791 Voided sales invoice examined by auditor. 

6810 Shipping document for a sale of merchandise could not be located. 

7364 Sales invoice for $2,875 has not been collected and is 6 months past due. 

7625 Client unable to locate the duplicate sales invoice. 

8431 Invoice was dated 3 days later than the date entered in the sales journal. 

8528 Customer order is not attached to the duplicate sales invoice. 

8566 Billing is for $100 less than it should be due to an unintentional pricing error. No indication 
of internal verification is included on the invoice. 

8780 Client unable to locate the duplicate sales invoice. 

9169 Credit not authorized, but tha sale was for onl 

9974 Lack of indication of ‘tema O ied IE BARARCET vice 

a. Which of the preceding should be defined as an exception? Required 


b. Explain why it is inappropriate to set a single acceptable TER and EPER for the 
combined exceptions. 

c. Calculate SER for each attribute tested in the population. (You must decide which 
attributes should be combined, which should be kept separate, and which exceptions 
are actual exceptions before you can calculate SER.) 

d. Calculate TER — SER for each attribute and evaluate whether sampling error is 
sufficiently large given the 5% ARACR. Assume TER is 6% for each attribute. 

e. State the appropriate analysis of exceptions for each of the exceptions in the sample, 
including additional procedures to be performed. 


15-33 (Objectives 15-6, 15-7) The sampling data sheet below is missing selected infor- 
mation for six attributes involving tests of transactions for the sales and collection cycle. 








Planned Audit Actual Results 
Initial 
Sample Sample Number of 

Attributes EPER TER ARACR Size Size Exceptions CUER 
Attribute 1 0% 6% 5% 49 50 1 

Attribute 2 0.50% 5% 10% a 80 0 2.9% 
Attribute 3 1% a 10% 55 59 1 6.9% 
Attribute 4 1% 6% 5% 78 80 = 5.8% 
Attribute 5 0% 4% — 74 80 0 3.7% 
Attribute 6 0.50% 6% 10% 64 2 7.5% 





a. Use Table 15-8 (p. 504) and Table 15-9 (p. 505) to complete the missing information Required 
for each attribute. 
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b. For which attributes are the sample results unacceptable? 


c. Compare attributes 1 and 3. Why does attribute 1 have the smaller sample size? 
d. Compare attributes 2 and 5. Why is CUER higher for attribute 5? 


CASE 


15-34 (Objectives 15-4, 15-5, 15-7) For the audit of Carbald Supply Company, Carole 
Wever, CPA, is conducting a test of sales for 9 months of the year ended December 31, 2011. 
Included among her audit procedures are the following: 


1. Foot and cross-foot the sales journal and trace the balance to the general ledger. 

2. Review all sales transactions for reasonableness. 

3. Select a sample of recorded sales from the sales journal and trace the customer name 
and amounts to duplicate sales invoices and the related shipping document. 

4. Select a sample of shipping document numbers and perform the following tests: 


a. 
b. 


Trace the shipping document to the related duplicate sales invoice. 
Examine the duplicate sales invoice to determine whether copies of the shipping 
document, shipping order, and customer order are attached. 


. Examine the shipping order for an authorized credit approval. 
. Examine the duplicate sales invoice for an indication of internal verification of 


quantity, price, extensions, footings, and trace the balance to the accounts 
receivable master file. 


. Compare the price on the duplicate sales invoice with the approved price list and 


the quantity with the shipping document. 


. Trace the balance in the duplicate sales invoice to the sales journal and accounts 


receivable master file for customer name, amount, and date. 


Required a. For which of these procedures can audit sampling for exceptions be conveniently used? 


b. 


OhePDEprHnhane @Lloped, what is the most appropriate 


sampling unit for conducting most of the audit sampling tests? 


c. Set up a sampling data sheet using attributes or nonstatistical sampling. For all tests of 
controls, assume a TER rate of 5% and an EPER of 1%. For all substantive tests of 
transactions, use a 4% TER and a 0% EPER. Use a 10% ARACR for all tests. 


INTEGRATED CASE APPLICATION — 


PINNACLE MANUFACTURING: PART VI 





15-35 (Objectives 15-3, 15-5, 15-7) In Part V of the Pinnacle Manufacturing case, you 
prepared a performance format audit program. In Part VI, sample sizes will be determined 
by using nonstatistical or attributes sampling, and the results of the tests will be evaluated. 
You should use nonstatistical sampling unless your professor tells you to use statistical 
sampling. 

After reviewing the audit program you created in Part V, the audit manager decided to 
make some modifications. You agreed with her changes. The modified program is included 
in Figure 15-9. 

The audit manager has decided that the tests should be performed for the first 10 
months including the month ended 10/31/11. You determine that document numbers are 





as follows: 
Document First number Last number 
Voucher 6734 33722 
Receiving report 9315 23108 
Check 12376 37318 
Purchase order 3162 17200 
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(ile Audit Program for Acquisitions and Cash Disbursements ) 


General 
1. Discuss the following items with client personnel and observe activities: 
a. Segregation of duties 
b. Use of an adequate chart of accounts 
c. Monthly reconciliation of accounts payable master file with the general ledger 


2. Foot acquisitions and cash disbursements journals for a test month and trace postings to the 
general ledger. 


3. Examine file of completed bank reconciliations. 
4. Account for a sequence of cancelled checks. 


5. Reconcile recorded cash disbursements with cash disbursements on the bank statement for a 
test month. 





Acquisitions 
6. Trace entries in the acquisitions journal to related vendors’ invoices, receiving reports, and 
purchase orders. 


a. Examine indication of internal verification of dates, unit costs, prices, extensions and 
footings, account classifications, recording in the journal, and posting and summarization. 


b. Examine supporting documents for propriety. 
c. Compare prices on vendors’ invoices with approved price limits established by management. 
d. Recompute information on vendors’ invoices. 
e. Examine vendors’ invoices for proper account classification. 
f. Compare dates of recorded acquisitions with dates on receiving reports. 
g. Examine voucher document package for indication of internal verification. 
7. Account for a sequence of purchase orders and voucher document packages. 
8. Trace a sample of receiving reports to the acquisitions journal. 


Cash Disbursements 

9. Select a sample of cancelled checks. 
a. Trace cancelled check to the related cash disbursements journal entry and date. 
b. Examine check for signature, proper endorsement, and cancellation by the bank. 
c. Compare date on cancelled check with bank cancellation date. 








d. Recompute cash discounts. 





a. Using the audit program in Figure 15-9, prepare a nonstatistical sampling data sheet Required 
for acquisitions following the format in Figure 15-2 (p. 490). Prepare all parts of the 
sampling data sheet except those that are blank in Figure 15-2. A formatted sampling 
data sheet can be downloaded using the Pinnacle link on the textbook Web site. Use 
the following guidelines. 

(1) Use only one sampling data sheet. 

(2) Select the sampling unit that will permit you to perform the most acquisition 
audit procedures on the audit program. 

(3) Include all audit procedures on the audit program that are consistent with the 
sampling unit you selected. 

(4) Decide EPER, TER, and ARACR for each attribute. Consider prior-year results for 
EPER. [See Figure 10-12 (p. 333) in Part II.] Use your judgment for the other two 
factors. 

(5) Decide the sample size for each attribute. 


b. Do the same thing for cash disbursements that you did in requirement a for acquisi- 
tions. You will not complete the actual results portion of the cash disbursements 
sampling data sheet. 

c. For acquisitions only, use an Excel spreadsheet to select random numbers for the 
largest sample size in the acquisitions sampling data sheet. Include the numbers in 
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both random order and sorted numbers, from low to high. Document how you 
selected the numbers. 

d. Assume that you performed all audit procedures included in Figure 15-9 using the 
sample sizes in requirement a (5). The only exceptions found when you performed the 
tests include the following: two missing indications of internal verification on a 
vendor’s invoice, one acquisition of inventory transaction recorded for $2,000 more 
than the amount stated on the vendor’s invoice (the vendor was also overpaid by 
$2,000), and two vendors’ invoices recorded as acquisitions several days after the receipt 
of the goods. Complete the sampling data sheet prepared in requirement a. Use Figure 
15-4 (p. 496) as a frame of reference for completing the sampling data sheet. 


INTERNET PROBLEM 15-1: APPLYING STATISTICAL SAMPLING 


Auditors have used samples to conduct audit tests for decades. Despite the frequent use of 
sampling, auditors often use nonstatistical sampling rather than statistical sampling. Visit 
the website for The CPA Journal (www.cpajournal.com) and use the search function to 
locate the article “Statistical Sampling Revisited” by Neal B. Hitzig, May 2004. 
Required _ Based on your reading of the article, answer the following questions. 
a. What is the primary difference between nonstatistical sampling and statistical sampling? 


b. What reasons are often given to support the decision to use nonstatistical sampling 
versus statistical sampling? 


c. What is the main advantage of statistical sampling? 
d. Describe what is meant by “probability sampling.” 
e. What is the “upper confidence limit” as referred to in the article? 
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model. 
When More Isn't Better 16-2 Design and perform analytical 
ra . . procedures for accounts in the 
On Susan Jackson’s first audit assignment, she was asked to handle the sales and collection cycle. 
confirmation of accounts receivable of a retailer with a large number of 16-3 Design and perform tests of 
customer accounts. She was excited because accounts receivable was one of Heriot balances tanaccounts 
the areas in her auditing class that she was confident that she understood. In receivable. 
previous years, Susan’s firm confirmed these accounts using negative con- ieee fohainandleralvateaeconnts 
firmations, requesting customers to respond only if the balance information receivable confirmations. 
was incorrect. Last year, 200 negative confirmations were sent 1 month 16-5 Design audit procedures for the 
before year-end. Those that were returned showed only timing differences; audit of accounts receivable, 
none represented a misstatement in the client's books. using an evidence planning 
worksheet as a guide. 
The tentative audit plan for the curreng year did not Boe Bla L ) 
Before the current year's planned cof AGQate S meer 


an understanding of internal controls over sales and cash receipts trans- 

actions, she discovered that a new real-time system for processing sales transactions had been implemented. The client 
was having considerable problems getting the system to work properly, and a significant number of misstatements 
occurred in recording sales during the past few months. Susan’s tests of controls and substantive tests of sales 
transactions also identified similar misstatements. 


When Susan took her findings to her supervisor and asked him what to do, he responded, “No problem, Susan. Just send 
300 confirmation requests instead of the usual 200. And be sure you get a good random sample so we can get a good 
projection of the results.” Susan was seriously bothered by this instruction. She recalled from her auditing class that 
negative confirmation requests aren't considered satisfactory evidence when controls are weak. Because customers are 
asked to respond only when differences occur, the auditor cannot be confident of the correct value for each misstate- 
ment in the sample. If this is so, then the results of using negative confirmations will be misleading even if a request is 
sent to every account. Susan concluded that expanding the sample size was the wrong solution. When Susan talked with 
her supervisor about her point of view, this time he responded, “You are absolutely right. | spoke too quickly. We need 
to sit down and think about a better strategy to find out if accounts receivable is materially misstated.” 


n the preceding two chapters, we examined tests of controls and substantive tests of transactions for the sales and 
I collection cycle. Both types of tests are part of phase II of the audit process. We now move to phase III and turn our 
attention to substantive analytical procedures and tests of details of balances for the sales and collection cycle. 

This chapter shows that it is essential for auditors to select the appropriate evidence to verify the account balances 
in the sales and collection cycle, after considering tolerable misstatement, performing risk assessment procedures to 
assess inherent and control risks, and performing tests of controls and substantive tests of transactions. This chapter 
examines designing substantive analytical procedures and tests of details of balances for the two key balance sheet 
accounts in the cycle: accounts receivable and the allowance for uncollectible accounts. 


METHODOLOGY FOR DESIGNING TESTS OF DETAILS OF BALANCES 


OBJECTIVE 16-1 Figure 16-1 shows the methodology auditors follow in designing the appropriate tests 
of details of balances for accounts receivable. This methodology was introduced in 
Chapter 13 and is now applied to the audit of accounts receivable. 





Describe the methodology 
for designing tests of details ee ee . . ; 
of balances using the audit The methodology shown in Figure 16-1 relates directly to the evidence planning 


risk model. worksheet first introduced in Chapter 9. The worksheet was partially completed on page 





272 for materiality and risk considerations (part of phase I) and was further completed 
as a part of the study of tests of controls and substantive tests of transactions on page 
499 in Chapter 15 (phase II). We will continue to complete the worksheet as we proceed 
through phase II] in this chapter. For now, you might want to look at the example of a 
completed worksheet in Figure 16-7 on page 539 to see what the completed worksheet 
looks like, to provide you an overview of the focus of this chapter. 

The appropriate evidence to be obtained from tests of details of balances must be 
decided on an objective-by-objective basis. Because several interactions affect the need 
for evidence from test of details of balances, this audit decision can be complex. For 
example, the auditor must evaluate the potential for fraud and also consider inherent 
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risk, which may vary by objective, as well as the results of tests of controls and the 
related control risk assessment, which also may vary by objective. The auditor must 
also consider the results of substantive tests of sales and cash receipts. 

In designing tests of details of balances for accounts receivable, auditors must 
satisfy each of the eight balance-related audit objectives first discussed on pages 
158-160 in Chapter 6. These eight general objectives are the same for all accounts. 
Specifically applied to accounts receivable, they are called accounts receivable 
balance-related audit objectives and are as follows:! 


1. Accounts receivable in the aged trial balance agree with related master file 
amounts, and the total is correctly added and agrees with the general ledger. 
(Detail tie-in) 

Recorded accounts receivable exist. (Existence) 

Existing accounts receivable are included. (Completeness) 

Accounts receivable are accurate. (Accuracy) 

Accounts receivable are correctly classified. (Classification) 

Cutoff for accounts receivable is correct. (Cutoff) 

Accounts receivable is stated at realizable value. (Realizable value) 

The client has rights to accounts receivable. (Rights) 


PSO Ge wis 


The columns in the evidence planning worksheet in Figure 16-7 include the balance- 
related audit objectives. The auditor uses the factors in the rows to aid in assessing 
planned detection risk for accounts receivable, by objective. 

Students of auditing need to understand the entire methodology for designing tests 
of details of balances for accounts receivable and all other accounts. The following 
overview explains the methodology. Portions of the discussion are a review of infor- 
mation studied in earlier chapters, but they are intended to aid in understanding the 
relationship of each part of Figure 16-1 to designing tests of details of balances. 


Tests of accounts receivable are base agoitPDE asNhaneettes that 
provide an understanding of the client’s business and industry, discussed in Chapter 8. 
As part of this understanding, the auditor studies the client’s industry and external 
environment and evaluates management objectives and business processes to identify 
significant client business risks that could affect the financial statements, including 
accounts receivable. As part of gaining this understanding, the auditor also performs 
preliminary analytical procedures that may indicate increased risk of misstatements in 
accounts receivable. 

Client business risks affecting accounts receivable are considered in the auditor’s 
evaluation of inherent risk and planned evidence for accounts receivable. For example, 
as a result of adverse changes in the industry’s economic environment, the auditor may 
increase inherent risk for net realizable value of accounts receivable. 


As studied in Chapter 9, the auditor first decides the preliminary judgment about 
materiality for the entire financial statements, and then allocates the preliminary 
judgment amount to each significant balance sheet account, including accounts 
receivable. This allocation is called setting tolerable misstatement. Accounts receivable is 
typically one of the most material accounts in the financial statements for companies 
that sell on credit. For even small accounts receivable balances, the transactions in the 
sales and collection cycle that affect the balance in accounts receivable are almost 
certain to be highly significant. 

Auditors assess inherent risk for each objective for an account such as accounts 
receivable, considering client business risk and the nature of the client and industry. SAS 
99 indicates that auditors must normally identify a specific fraud risk for revenue 
recognition. This likely affects the auditor’s assessment of inherent risk for the following 


1Detail tie-in is included as the first objective here, compared with being objective 6 in Chapter 6, because tests 
for detail tie-in are normally done first. 


Identify 

Client Business Risks 
Affecting Accounts 
Receivable (Phase 1) 


Set Tolerable 
Misstatement 
and Assess Inherent 
Risk (Phase 1) 
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Assess Control Risk 
for the Sales and 
Collection Cycle 
(Phase 1) 


Design and Perform 
Tests of Controls and 
Substantive Tests of 
Transactions (Phase II) 


objectives: existence, sales cutoff, and sales returns and allowances cutoff. It is common 
for clients to misstate cutoff either by error or through fraud. It is also common for clients to 
unintentionally or fraudulently misstate the allowance for uncollectible accounts (realizable 
value) because of the difficulty of the judgments to determine the correct balance. 


Internal controls over sales and cash receipts and the related accounts receivable are at 
least reasonably effective for most companies because management is concerned with 
keeping accurate records to maintain good relations with customers. Auditors are 
especially concerned with three aspects of internal controls: 

1. Controls that prevent or detect embezzlements 

2. Controls over cutoff 

3. Controls related to the allowance for uncollectible accounts 


Earlier, we studied transaction-related audit objectives in the sales and collection 
cycle (see Chapter 14). The auditor must relate control risk for transaction-related 
audit objectives to balance-related audit objectives in deciding planned detection risk 
and planned evidence for tests of details of balances. For the most part, this relation- 
ship is straightforward. Figure 16-2 shows the relationship for the two primary classes 
of transactions in the sales and collection cycle. For example, assume the auditor 
concluded that control risk for both sales and cash receipts transactions is low for the 
accuracy transaction-related audit objective. The auditor can therefore conclude that 
controls for the accuracy balance-related audit objective for accounts receivable are 
effective because the only transactions that affect accounts receivable are sales and cash 
receipts. Of course, if sales returns and allowances and write-off of uncollectible 
accounts receivable are significant, assessed control risk must also be considered for 
these two classes of transactions. 

Two aspects of the relationships in Figure 16-2 deserve special mention: 


1. For sales, the occurrence transaction-related audit objective affects the existence 
Apage@:laPDEdit Bnhancen receipts, however, the occurrence 
transaction-related audit objective affects the completeness balance-related 
audit objective. A similar relationship exists for the completeness transaction- 
related audit objective. The reason for this somewhat surprising conclusion is that 
an increase in sales increases accounts receivable, but an increase in cash receipts 
decreases accounts receivable. For example, recording a sale that did not occur 
violates the occurrence transaction-related audit objective and existence balance- 
related audit objective (both overstatements). Recording a cash receipt that did 
not occur violates the occurrence transaction-related audit objective, but it also 
violates the completeness balance-related audit objective for accounts receivable 
because a receivable that is still outstanding is no longer included in the records. 
2. The realizable value and rights accounts receivable balance-related audit 
objectives, as well as the presentation and disclosure-related objectives, are not 
affected by assessed control risk for classes of transactions. To assess control 
risk below the maximum for these objectives, the auditor must identify and 
test separate controls that support those objectives. 


Figure 16-7 (p. 539) includes three rows for assessed control risk: one for sales, one 
for cash receipts, and one for additional controls related to the accounts receivable 
balance. The source of each control risk for sales and cash receipts is the control risk 
matrix assuming that the tests of controls results supported the original assessment. The 
auditor makes a separate assessment of control risk for objectives that are related only to 
the accounts receivable balance or to presentation and disclosure audit objectives. 


Chapters 14 and 15 covered designing audit procedures for tests of controls and sub- 
stantive tests of transactions, deciding sample size, and evaluating the results of those 
tests. The results of the tests of controls determine whether assessed control risk for 
sales and cash receipts needs to be revised. Auditors use the results of the substantive 
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tests of transactions to determine the extent to which planned detection risk is satisfied 
for each accounts receivable balance-related audit objective. The evidence planning 
worksheet in Figure 16-7 shows three rows for control risk and two for substantive tests 
of transactions, one for sales, and the other for cash receipts. 


As discussed in Chapter 8, analytical procedures are often done during three phases of Design and Perform 
the audit: during planning, when performing detailed tests, and as a part of completing Analytical Procedures 
the audit. This chapter covers planning analytical procedures and substantive analytical (Phase III) 
procedures done when performing detailed tests for accounts in the sales and 
collection cycle. OBJECTIVE 16-2 

Most analytical procedures performed during the detailed testing phase are done Design and perform 
after the balance sheet date but before tests of details of balances. It makes little sense to analytical procedures for 
perform extensive analytical procedures before the client has recorded all transactions accounts in the sales and 





for the year and finalized the financial statements. collection cycle. 

Auditors perform analytical procedures for the entire sales and collection cycle, not 
just accounts receivable. This is necessary because of the close relationship between 
income statement and balance sheet accounts. If the auditor identifies a possible 
misstatement in sales or sales returns and allowances using analytical procedures, 
accounts receivable will likely be the offsetting misstatement. 

Table 16-1 (p. 524) presents examples of ratios and comparisons for the sales and 
collection cycle and potential misstatements that analytical procedures may uncover. 
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Although Table 16-1 focuses on the comparison of current year results with previous years, 
auditors also consider current year results compared to budgets and industry trends. 
Observe in the “possible misstatement” column how both balance sheet and income 
statement accounts are affected. For example, when the auditor performs analytical pro- 
cedures for sales, evidence is being obtained about both sales and accounts receivable. 

In addition to the analytical procedures in Table 16-1, auditors should also review 
accounts receivable for large and unusual amounts, such as large balances, accounts 
that have been outstanding for a long time, receivables from affiliated companies, 
officers, directors, and other related parties, and credit balances. To identify these 
amounts the auditor should review the listing of accounts (aged trial balance) at the 
balance sheet date to determine which accounts should be investigated further. 

To illustrate the use of analytical procedures during the detailed testing phase, 
Table 16-2 presents comparative trial balance information for the sales and collection 
cycle information for Hillsburg Hardware Co. Building on that information, Table 16-3 
demonstrates several substantive analytical procedures. The only potential misstate- 
ment indicated in these two tables is in the allowance for uncollectible accounts. This is 
indicated by the ratio of the allowance to accounts receivable, as explained at the 
bottom of Table 16-3. 

The auditor’s conclusions about substantive analytical procedures for the sales and 
collection cycle are incorporated in the evidence planning worksheet in Figure 16-7 
(p. 539) in the third row from the bottom. Because analytical procedures are substan- 
tive tests, they reduce the extent to which the auditor needs to perform detailed tests 
of balances, if the analytical procedure results are favorable. 


feel 16-1 Analytical Procedures for the Sales and Collection Cycle 


Analytical Procedure Possible Misstatement 





Compare gross margin percentage with previous Overstatement or understatement of sales 


years (by product line). 


and accounts receivable. 





Compare sales by month (by product line) 
over time. 


Compare sales returns and allowances as a 
percentage of gross sales with previous years 
(by product line). 


Overstatement or understatement of sales 
and accounts receivable. 


Overstatement or understatement of sales 
returns and allowances and accounts 
receivable. 





Compare individual customer balances over a 
stated amount with previous years. 


Misstatements in accounts receivable and 
related income statement accounts. 





Compare bad debt expense as a percentage of 
gross sales with previous years. 


Uncollectible accounts receivable that have 
not been provided for. 





Compare number of days that accounts 
receivable are outstanding with previous years 
and related turnover of accounts receivable. 


Overstatement or understatement of 
allowance for uncollectible accounts and 
bad debt expense; also may indicate 
fictitious accounts receivable. 





Compare aging categories as a percentage of 
accounts receivable with previous years. 


Overstatement or understatement of 
allowance for uncollectible accounts and 
bad debt expense. 





Compare allowance for uncollectible accounts 
as a percentage of accounts receivable with 
previous years. 


Overstatement or understatement of 
allowance for uncollectible accounts and 
bad debt expense. 





Compare write-off of uncollectible accounts as 
a percentage of total accounts receivable with 
previous years. 





Overstatement or understatement of 
allowance for uncollectible accounts and 
bad debt expense. 
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TABLE 16-2 Comparative Information for Hillsburg Hardware Co. — Sales and Collection Cycle 
Amount 
12-31-11 Percent Change 12-31-10 Percent Change 12-31-09 
(in Thousands) 2010-2011 (in Thousands) 2009-2010 (in Thousands) 
Sales $144,328 9.0% $132,421 7.0% $123,737 
Sales returns and allowances 1,242 3.9 1,195 13.6 1,052 
Gross margin 39,845 9.6 36,350 7.0 33,961 
Accounts receivable 20,197 15.3 17,521 3.5 16,961 
Allowance for uncollectible accounts 1,240 (5.4) TES 21.5 1,079 
Bad debt expense 3,323 (2.1) 3,394 73 3,162 
Total current assets S027 PAS 49,895 ES) 49,157 
Total assets 61,367 9 60,791 1.8 59,696 
Net earnings before taxes 5,681 21.9 4,659 39.0 3,551 
Number of accounts receivable 258 16.7 Dail 5.7 209 
Number of accounts receivable 37 15.6 32 6.7 30 
with balances over $100,000 
= y 
When analytical procedures in the sales and collection cycle uncover unusual Design and Perform 
fluctuations, however, the auditor should make additional inquiries of management. Tests of Details of 
Management’s responses should be critically evaluated to determine whether they Accounts Receivable 


adequately explain the unusual "PAGS PHF ERHANeeE by Balance (Phase III) 


corroborating evidence. 


The appropriate tests of details of balances depend on the factors listed in the evidence 
planning worksheet in Figure 16-7. Planned detection risk for each accounts receivable 
balance-related audit objective is shown in the second row from the bottom. It is a 
subjective decision made by auditors after they have combined the conclusions reached 
about each of the factors listed above that row. 


























TABLE 16-3 Analytical Procedures for Hillsburg Hardware Co. — Sales and 
Collection Cycle 
12-31-11 12-31-10 12-31-09 

Gross margin/net sales 27.85% 27.10% 27.68% 
Sales returns and allowances/gross sales 9% 9% 9% 
Bad debt expense/net sales 2.3% 2.6% 2.6% 
Allowance for uncollectible accounts/ 

accounts receivable 6.1% 75% 6.4% 
Number of days receivables outstanding* 48.09 47.96 49.32 
Net accounts receivable/total 

current assets 37.2% 32.5% 32.3% 

S SJ 











*Based on year-end accounts receivable only. 


Comment: Allowance as a percentage of accounts receivable has declined from 6.4% to 6.1%. Number of days 
receivables outstanding and economic conditions do not justify this change. Potential misstatement is approximately 
$60,000 ($20,197,000 x [.064 - .061]). 
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The task of combining the factors that determine planned detection risk is 
complex because the measurement for each factor is imprecise and the appropriate 
weight given to each factor is highly subjective. Conversely, the relationship between 
each factor and planned detection risk is well established. For example, auditors know 
that a high inherent risk or control risk decreases planned detection risk and increases 
planned substantive tests, whereas good results of substantive tests of transactions 
increase planned detection risk and decrease other planned substantive tests. 

The bottom row in Figure 16-7 (p. 539) shows the planned audit evidence for tests 
of details of balances for accounts receivable by objective. As we’ve discussed, planned 
audit evidence is the inverse of planned detection risk. After deciding whether planned 
audit evidence for a given objective is high, medium, or low, the auditor must then 
decide on the appropriate audit procedures, sample size, items to select, and timing. 

For the remainder of this chapter, we will discuss how auditors decide on the specific 
audit procedures and their timing for auditing accounts receivable. In Chapter 17, we'll 
address sample size and selecting items from the population for testing. 


DESIGNING TESTS OF DETAILS OF BALANCES 


OBJECTIVE 16-3 


Design and perform tests 


of details of balances for 
accounts receivable. 





Accounts Receivable 
Are Correctly Added 
and Agree with the 
Master File and the 
General Ledger 


Even though auditors emphasize balance sheet accounts in tests of details of balances, 
they are not ignoring income statement accounts because the income statement 
accounts are tested as a by-product of the balance sheet tests. For example, if the 
auditor confirms accounts receivable balances and finds overstatements caused by 
mistakes in billing customers, then both accounts receivable and sales are overstated. 
Confirmation of accounts receivable is the most important test of details of 
accounts receivable. We will discuss confirmation briefly as we study the appropriate 
tests for each of the balance-related audit objectives. We'll examine it in more detail 
later DARaga:, PDF Enhancer 
For our discussion of tests of details of balances for accounts receivable, we will 
focus on balance-related audit objectives. We will also assume two things: 
1. Auditors have completed an evidence planning worksheet similar to the one in 
Figure 16-7. 
2. They have decided planned detection risk for tests of details for each balance- 
related audit objective. 


The audit procedures selected and their sample size will depend heavily on whether 
planned evidence for a given objective is low, medium, or high. 


Most tests of accounts receivable and the allowance for uncollectible accounts are 
based on the aged trial balance. An aged trial balance lists the balances in the accounts 
receivable master file at the balance sheet date, including individual customer balances 
outstanding and a breakdown of each balance by the time passed between the date of 
sale and the balance sheet date. Figure 16-3 illustrates a typical aged trial balance, based 
on the Hillsburg Hardware example. Notice that the total is the same as accounts 
receivable on the general ledger trial balance on page 150. 

Ordinarily, auditors test the information on the aged trial balance for detail tie-in 
before any other tests to verify that the population being tested agrees with the general 
ledger and accounts receivable master file. The total column and the columns depicting 
the aging must be test footed and the total on the trial balance compared with the 
general ledger. In addition, auditors should trace a sample of individual balances to 
supporting documents such as duplicate sales invoices to verify the customer’s name, 
balance, and proper aging. The extent of the testing for detail tie-in depends on the 
number of accounts involved, the degree to which the master file has been tested as a 
part of tests of controls and substantive tests of transactions, and the extent to which 
the schedule has been verified by an internal auditor or other independent person 
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laces Aged Trial Balance for Hillsburg Hardware Co. 








Date 
1/5/12 





91-120 over 120 
days days 


60,000 
US 7A) 








Hillsburg Hardware Co. Schedule 
pbe Accounts Receivable Prepared by Client 
Aged Trial Balance Approved by 
12/31/11 
Aging, Based on Invoice Date 

Account Balance 0-30 31-60 61-90 
Number Customer 12/31/11 days days days 

01011 Adams Supply 146,589 90,220 56,369 

01044 Argonaut, Inc. 30,842 30,842 

01100 Atwater Brothers 210,389 210,389 

01191 Beekman Bearings 83,526 73,526 10,000 

01270 Brown and Phillips 60,000 

01301 Christopher Plumbing 15,789 

09733 Travelers Equipment 59,576 59,576 

09742 Underhill Parts and Maintenance 179,263 179,263 

09810 UJW Co. 102,211 34,911 34,700 32,600 

09907 Zephyr Plastics 286,300 186,000 100,300 

$20,196,800 $14,217,156 $2,869,366 $1,408,642 


$1,038,926 $662,710 

















before it is given to the auditor. Auditors often use audit software to foot and cross-foot 
the aged trial balance and to recalculate the aging. 


Confirmation of customers’ balance? AIS. PDF En h anes Platees 


for determining the existence of recorded accounts receivable. When customers do not 
respond to confirmations, auditors also examine supporting documents to verify the 
shipment of goods and evidence of subsequent cash receipts to determine whether the 
accounts were collected. Normally, auditors do not examine shipping documents or 
evidence of subsequent cash receipts for any account in the sample that is confirmed, 
but they may use these documents extensively as alternative evidence for nonresponses. 


It is difficult for auditors to test for account balances omitted from the aged trial 
balance except by relying on the self-balancing nature of the accounts receivable master 
file. For example, if the client accidentally excluded an account receivable from the trial 
balance, the only likely way it will be discovered is for the auditor to foot the accounts 
receivable trial balance and reconcile the balance with the control account in the 
general ledger. 

If all sales to a customer are omitted from the sales journal, the understatement of 
accounts receivable is almost impossible to uncover by tests of details of balances. For 
example, auditors rarely send accounts receivable confirmations to customers with zero 
balances, in part because research shows that customers are unlikely to respond to 
requests that indicate their balances are understated. In addition, unrecorded sales to a new 
customer are difficult to identify for confirmation because that customer is not included in 
the accounts receivable master file. The understatement of sales and accounts receivable is 
best uncovered by substantive tests of transactions for shipments made but not recorded 
(completeness objective for tests of sales transactions) and by analytical procedures. 


Confirmation of accounts selected from the trial balance is the most common test of 
details of balances for the accuracy of accounts receivable. When customers do not 
respond to confirmation requests, auditors examine supporting documents in the 


Recorded Accounts 
Receivable Exist 


Existing 
Accounts Receivable 
Are Included 


Accounts Receivable 
Are Accurate 
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Accounts Receivable 
Are Properly Classified 


Cutoff for Accounts 
Receivable Is Correct 


same way as described for the existence objective. Auditors perform tests of the debits 
and credits to individual customers’ balances by examining supporting documentation 
for shipments and cash receipts. 


Normally, auditors can evaluate the classification of accounts receivable relatively easily, 
by reviewing the aged trial balance for material receivables from affiliates, officers, 
directors, or other related parties. Auditors should verify that notes receivable or 
accounts that should be classified as noncurrent assets are separated from regular 
accounts, and significant credit balances in accounts receivable are reclassified as 
accounts payable. 

There is a close relationship between the classification balance-related objective 
and the related classification and understandability presentation and disclosure 
objective. To satisfy the classification balance-related audit objective, the auditor must 
determine whether the client has correctly separated different classifications of 
accounts receivable. For example, the auditor will determine whether receivables from 
related parties have been separated on the aged trial balance. To satisfy the objective for 
presentation and disclosure, the auditor must make sure that the classifications are 
properly presented by determining whether related party transactions are correctly 
shown in the financial statements during the completion phase of the audit. 


Cutoff misstatements exist when current period transactions are recorded in the 
subsequent period or vice versa. The objective of cutoff tests, regardless of the type of 
transaction, 1s to verify whether transactions near the end of the accounting period are 
recorded in the proper period. The cutoff objective is one of the most important in the 
cycle because misstatements in cutoff can significantly affect current period income. 
For example, the intentional or unintentional inclusion of several large, subsequent 
period sales in the current period—or the exclusion of several current period sales 
returns and allowances—can materially overstate net earnings. 

cApager:RDE Bahancenes returns and allowances, and cash 
receipts. For each one, auditors require a threefold approach to determine the 
reasonableness of cutoff: 


1. Decide on the appropriate criteria for cutoff. 

2. Evaluate whether the client has established adequate procedures to ensure a 
reasonable cutoff. 

3. Test whether the cutoff was correct. 


Sales Cutoff Most merchandising and manufacturing clients record a sale based on 
shipment of goods criterion. However, some companies record invoices at the time title 
passes, which can occur before shipment (as in the case of custom-manufactured 
goods), at the time of shipment, or subsequent to shipment. For the correct measure- 
ment of current period income, the method must be in accordance with accounting 
standards and consistently applied. 

The most important part of evaluating the client’s method of obtaining a reliable 
cutoff is to determine the procedures in use. When a client issues prenumbered shipping 
documents sequentially, it is usually a simple matter to evaluate and test cutoff. 
Moreover, the segregation of duties between the shipping and the billing function also 
enhances the likelihood of recording transactions in the proper period. However, if 
shipments are made by company truck, if the shipping records are unnumbered, and if 
shipping and billing department personnel are not independent of each other, it may be 
difficult, if not impossible, to be assured of an accurate cutoff. 

When the client’s internal controls are adequate, auditors can usually verify the 
cutoff by obtaining the shipping document number for the last shipment made at the 
end of the period and comparing this number with current and subsequent period 
recorded sales. As an illustration, assume the shipping document number for the last 
shipment in the current period is 1489. All recorded sales before the end of the period 
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EARLY REVENUE _ Faced with declining sales for its traditional equipment was recorded at the beginning of the 
product lines, Xerox prematurely recognized lease, but revenues from servicing and financing 
RECOGNITION revenues to meet market expectations, according were recognized over the life of the lease 
BOOSTS PROFITS _ to charges filed by the SEC. The SEC stated that contract. According to the SEC complaint, Xerox 


Xerox accelerated the recognition of equipment 
revenue to increase revenues by over $3 billion 
and pre-tax earnings by approximately $1.5 billion 
over the period 1997 through 2000. The early 
revenue recognition and other actions to increase 
earnings were significant, representing 37 percent 
of reported pre-tax earnings for the fourth 
quarters of 1997 and 1998. Without these actions 
to increase earnings, the SEC charged that Xerox 
would have fallen short of market earnings 
expectations for almost every reporting period 


took a number of actions to shift servicing and 
financing revenue to the value of the equipment, 
so that more of the revenue could be recognized 
immediately. 

The SEC alleged that these actions were set 
by the “tone at the top” and ordered six senior 
executives to pay over $22 million in penalties 
and disgorgement of profits from their actions. 
Without admitting or denying the allegations 
made in the SEC complaint, Xerox agreed to pay 
a $10 million fine, at that time the largest ever for 


from 1997 through 1999. 

A primary issue was how Xerox accounted for 
lease revenue. The revenue in Xerox's leasing 
arrangements represented three components: the 
value of the equipment, servicing over the life of 
the lease, and financing. The revenue from the 


a public company. 


Sources: 1. Securities and Exchange Commission 
Accounting and Auditing Enforcement Release No. 
1542 (April 11, 2002); 2. Securities and Exchange 
Commission Press Release 2003-70 (June 5, 2003) 
(www.sec.gov). 








should bear a shipping document number preceding number 1490, and no sales 
recorded and shipped in the subsequent period should have a bill of lading numbered 
1489 or lower. An auditor can easily test this by comparing recorded sales with the 
related shipping documents for the last few days of the current period and the first few 
days of the subsequent period. 


Sales Returns and Allowances Apage Phe Eihante t sales 
returns and allowances be matched’ w#h releted sales 1f The amounts are material. For 
example, if current period shipments are returned in the subsequent period, the sales 
return should appear in the current period. (The returned goods should be treated as 
current period inventory.) For most companies, however, sales returns and allowances 
are recorded in the accounting period in which they occur, under the assumption of 
approximately equal, offsetting amounts at the beginning and end of each accounting 
period. This approach is acceptable as long as the amounts are not material. Some 
companies establish a reserve, similar to the allowance for uncollectible accounts, for 
the expected amount of returns in the subsequent period. 

When the auditor is confident that the client records all sales returns and allow- 
ances promptly, the cutoff tests are simple and straightforward. The auditor can 
examine supporting documentation for a sample of sales returns and allowances 
recorded during several weeks subsequent to the closing date to determine the date of 
the original sale. If auditors discover that the amounts recorded in the subsequent 
period are significantly different from unrecorded returns and allowances at the 
beginning of the period under audit, they must consider an adjustment. For example, a 
company may experience an increase in sales returns when it launches a new product. 
In addition, if the internal controls for recording sales returns and allowances are 
evaluated as ineffective, a larger sample is needed to verify cutoff. 


Cash Receipts Cutoff For most audits, a proper cash receipts cutoff is less important 
than either the sales or the sales returns and allowances cutoff because the improper 
cutoff of cash affects only the cash and the accounts receivable balances, not earnings. 
Nevertheless, if the misstatement is material, it can affect the fair presentation of these 
accounts, especially when cash is a small or negative balance. 

It is easy to test for a cash receipts cutoff misstatement (often called holding the cash 
receipts book open) by tracing recorded cash receipts to subsequent period bank 
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Accounts Receivable 
Is Stated at 
Realizable Value 


deposits on the bank statement. If a delay of several days exists, that could indicate a 
cutoff misstatement. 


To some degree, auditors may also rely on the confirmation of accounts receivable 
to uncover cutoff misstatements for sales, sales returns and allowances, and cash 
receipts. However, it is often difficult to distinguish a cutoff misstatement from a 
normal timing difference due to shipments and payments in transit at year end. For 
example, if a customer mails and records a check to a client for payment of an unpaid 
account on December 30 and the client receives and records the amount on January 2, 
the records of the two organizations will be different on December 31. This is not a 
cutoff misstatement, but a timing difference due to the delivery time. It may be difficult 
for the auditor to evaluate whether a cutoff misstatement or a timing difference 
occurred when a confirmation reply is the source of information. This type of situation 
requires additional investigation, such as inspection of supporting documents. 


Accounting standards require that companies state accounts receivable at the amount 
that will ultimately be collected. The realizable value of accounts receivable equals 
gross accounts receivable less the allowance for uncollectible accounts. To calculate the 
allowance, the client estimates the total amount of accounts receivable that it expects to 
be uncollectible. Obviously, clients cannot predict the future precisely, but it is 
necessary for the auditor to evaluate whether the client’s allowance is reasonable, 
considering all available facts. To assist with this evaluation, the auditor often prepares 
an audit schedule that analyzes the allowance for uncollectible accounts, as illustrated 
in Figure 16-4. In this example, the analysis indicates that the allowance is understated. 
This can be the result of the client failing to adjust the allowance or economic factors. 
Note that the potential understatement of the reserve was signaled by the analytical 
procedures in Table 16-3 (p. 525) for Hillsburg Hardware. 

To begin the evaluation of the allowance for uncollectible accounts, the auditor 
reviewAPAGOs oPDEs::nhan Ge Le concerned with the client’s credit 
policy. If the client’s credit policy has remained unchanged and the results of the tests 
of credit policy and credit approval are consistent with those of the preceding year, the 
change in the balance in the allowance for uncollectible accounts should reflect only 
changes in economic conditions and sales volume. However, if the client’s credit policy 
or the degree to which it correctly functions has significantly changed, auditors must 
take great care to consider the effects of these changes as well. 

Auditors often evaluate the adequacy of the allowance by carefully examining the 
noncurrent accounts on the aged trial balance to determine which ones have not been 
paid subsequent to the balance sheet date. The size and age of unpaid balances can then be 
compared with similar information from previous years to evaluate whether the amount 
of noncurrent receivables is increasing or decreasing over time. Auditors also gain insights 
into the collectibility of the accounts by examining credit files, discussions with the credit 
manager, and review of the client’s correspondence file. These procedures are especially 
important if a few large balances are noncurrent and are not being paid on a regular basis. 

Auditors face two shortcomings in evaluating the allowance by reviewing individual 
noncurrent balances on the aged trial balance. First, the current accounts are ignored in 
establishing the adequacy of the allowance, even though some of these amounts will 
undoubtedly become uncollectible. Second, it is difficult to compare the results of the 
current year with those of previous years on such an unstructured basis. If the accounts 
are becoming progressively uncollectible over several years, this fact can be overlooked. 
To avoid these two shortcomings, clients can establish a history of bad debt write-offs 
over a period of time as a frame of reference for evaluating the current year’s allowance. 
For example, a client might calculate that 2 percent of current accounts, 10 percent of 30- 
to 90-day accounts, and 35 percent of all balances over 90 days ultimately become 
uncollectible. Auditors can apply these percentages to the current year’s aged trial balance 
totals and compare the result with the balance in the allowance account. Of course, the 
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Analysis of Allowance for Uncollectible Accounts for Hillsburg 
Hardware Co. 











Hillsburg Hardware Co. Schedule B-4 Date 
Analysis of Allowance for Uncollectible Accounts Prepared by TW 1/8/12 
12/31/11 Approved by SB 1/10/12 
Estimated Estimated 
A/R A/R Balance Allowance Required 

Category 12/31/11 Percentage Allowance 

0-30 days $ 14,217,156 ¥ 3% xX $ 426,515 

31-60 days 2,869,366 V 6% xX 172,162 

61-90 days 1,408,642 V 15% xX 211,296 

91-120 days 1,038,926 ¥ 25% xX 259152 

Over 120 662,710 ¥ 40% xX 265,084 

Total $20,196,800 $1,334,789 

Recorded Allowance $1,240,000 TB 

Difference $ 94,789 

¥ —Traced to aged accounts receivable trial balance. 

x — Allowance percentages are consistent with prior year, and appear reasonable 

based on historical loss percentages documented in permanent file. 

TB — Agreed to trial balance. 

Conclusion: Recorded allowance appears understated based on aging analysis. Approximate 

amount of $95,000 not considered material. Include on Summary of Possible Misstatements 

schedule on A-3. (See Figure 24-6 on page 773.) 





auditor has to verify the appropriatePA RaQ RrcAt hE" us ANANGEEnodity 


the calculations for changed conditions. 


Bad Debt Expense After the auditor is satisfied with the allowance for uncollectible 
accounts, it is easy to verify bad debt expense. Assume that: 
* The beginning balance in the allowance account was verified as a part of the 
previous audit. 
* The uncollectible accounts written off were verified as a part of the substantive 
tests of transactions. 


PUT IT 
ON THE CARD 





Sears, Roebuck & Co. was enjoying a remarkable 
turnaround in earnings in 1996. However, most of 
the increase in profits was attributable to interest 
on Sears credit card balances. In the early 1990s, 
Sears added more than 17 million new credit card 
customers. However, many of these new customers 
were not good credit risks, and they tended to carry 
high balances. As a result, in 1997, Sears had to 
increase its allowance for credit card delinquencies 
to $393 million, a 44 percent increase. 
Unfortunately, the delinquencies were only 
part of the problem. Many of these delinquent 
customers also filed for bankruptcy. In fact, by 
1997 Sears was a creditor in more than one-third 
of all bankruptcies filed in the United States. Sears 
aggressively sought reaffirmation agreements 
with these customers, in which they pledged to 


continue making payments on their accounts. 
However, many of these agreements were not 
filed in the bankruptcy cases, which meant the 
company was collecting on unenforceable agree- 
ments for debt that no longer legally existed. As a 
result of a federal investigation, Sears was forced 
to pay a $60 million fine and set aside $475 million 
in reserves to cover complaints over its debt 
collection practices. After continuing struggles 
with write-offs, Sears sold its credit card business 
to Citigroup in 2003. 


Sources: Adapted from 1. Robert Berner, “The 
Struggle in Store for Sears,” BusinessWeek (July 24, 
2003); 2. John McCormick, “The Sorry Side of 
Sears,” Newsweek (February 22, 1999), pp. 36-39. 
3. De’Ann Weimer, “Put the Comeback on My Card,” 
BusinessWeek (November 10, 1997), pp. 118-119. 
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The Client Has Rights 
to Accounts Receivable 


Accounts Receivable 
Presentation 
and Disclosure 


* The ending balance in the allowance account has been verified by various 
means. 


Bad debt expense is then simply a residual balance that can be verified by recal- 
culation. 


The client’s rights to accounts receivable ordinarily cause no audit problems because the 
receivables usually belong to the client. In some cases, however, a portion of the 
receivables may have been pledged as collateral, assigned to someone else, factored, or 
sold at discount. Normally, the client’s customers are not aware of the existence of such 
matters, so the confirmation of receivables will not bring them to light. To uncover 
instances in which the client has limited rights to receivables, the auditor may review the 
minutes, discuss with the client, confirm with banks, examine debt contracts for 
evidence of accounts receivable pledged as collateral, and examine correspondence files. 


Tests of the four presentation and disclosure-related audit objectives are generally done 
as part of the completion phase of the audit. However, some tests of presentation and 
disclosure are often done with tests to meet the balance-related audit objectives. For 
example, when testing sales and accounts receivable, the auditor must understand and 
evaluate the appropriateness of the client’s revenue recognition policy to determine 
whether it is properly disclosed in the financial statements. The auditor must also decide 
whether the client has properly combined amounts and disclosed related party 
information in the statements. To evaluate the adequacy of the presentation and 
disclosure, the auditor must have a thorough understanding of accounting standards and 
presentation and disclosure requirements. 

An important part of the evaluation involves deciding whether the client has 
separated material amounts requiring separate disclosure in the statements. For example, 
receivables from officers and affiliated companies must be segregated from accounts 
receivable from customers if the amounts are material. Similarly, under SEC require- 
ment APAgGas RDFisHNBARCELts for different business segments 
separately. The proper aggregation of general ledger balances in the financial statements 
also requires combining account balances that are not relevant for external users of the 
statements. If all accounts included in the general ledger were disclosed separately on 
the statements, most statement users would be more confused than enlightened. 


CONFIRMATION OF ACCOUNTS RECEIVABLE 


OBJECTIVE 16-4 





Obtain and evaluate accounts 
receivable confirmations. 





Auditing Standards 
Requirements 


Confirmation of accounts receivable was a recurring concept in our discussion about 
designing tests of details of balances for accounts receivable. The primary purpose of 
accounts receivable confirmation is to satisfy the existence, accuracy, and cutoff 
objectives. 

Confirmations are one of the eight types of audit evidence introduced in Chapter 7. 
A confirmation is a direct written response from a third party in paper or electronic 
form, and they are considered to be highly reliable evidence because they are received 
directly from third parties. Although an oral response provides audit evidence, it is not 
considered a confirmation. 


USS. auditing standards indicate that auditors should use external confirmations for 
material accounts receivable. Confirmation may not be appropriate in the following 
circumstances: 

1. The auditor considers confirmations ineffective evidence because response rates 
will likely be inadequate or unreliable. In certain industries, such as hospitals, 
response rates to confirmations are very low. 

2. The combined level of inherent risk and control risk is low and other substantive 
evidence can be accumulated to provide sufficient evidence. If a client has 
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effective internal controls and low inherent risk for the sales and collection 
cycle, the auditor should often be able to satisfy the evidence requirements by 
tests of controls, substantive tests of transactions, and analytical procedures. 


If the auditor decides not to confirm accounts receivable, the justification for doing 
so must be documented in the audit files. While U.S. auditing standards require the use 
of confirmations for accounts receivable in most circumstances, international auditing 
standards suggest, but do not require their use. This is one of the few notable difference 
between requirements of U.S. and international audit standards. 


In performing confirmation procedures, the auditor must first decide the type of 
confirmation to use. 


Positive Confirmation A positive confirmation is a communication addressed to 
the debtor requesting the recipient to confirm directly whether the balance as stated on 
the confirmation request is correct or incorrect. Figure 16-5 (p. 534) illustrates a 
positive confirmation in the audit of Hillsburg Hardware Co. Notice that this con- 
firmation is for one of the largest accounts on the aged trial balance in Figure 16-3 
(p. 527). 

A blank confirmation form is a type of positive confirmation that does not state 
the amount on the confirmation but requests the recipient to fill in the balance or 
furnish other information. Because blank forms require the recipient to determine the 
information requested, they are considered more reliable than confirmations that 
include balance information. Blank forms are rarely used in practice because they often 
result in lower response rates. 

An invoice confirmation is another type of positive confirmation in which an 
individual invoice is confirmed, rather than the customer’s entire accounts receivable 
balance. Many customers use voucher systems that allow them to confirm individual 
invoices but not balance informations iy of t f ipygice c ek a s may 
improve confirmation response ratés. ag nfitniations Rana i & Prining 
differences and other reconciling items than balance confirmations. However, invoice 
confirmations have the disadvantage of not directly confirming ending balances. 

Sales to major customers often involve special terms or side-agreements for the 
return of goods that may affect the amount and timing of revenue to be recognized 
from the sale. When this has been identified as a significant risk, positive confirmations 
often request the customer to confirm the existence of any special terms or side- 
agreements between the client and customer. 


Negative Confirmation A negative confirmation is also addressed to the debtor but 
requests a response only when the debtor disagrees with the stated amount. Figure 16-6 
(p. 535) illustrates a negative confirmation in the audit of Hillsburg Hardware Co. that 
has been attached to a customer’s monthly statement. 

A positive confirmation is more reliable evidence because the auditor can perform 
follow-up procedures if a response is not received from the debtor. With a negative 
confirmation, failure to reply must be regarded as a correct response, even though the 
debtor may have ignored the confirmation request. 

Offsetting the reliability disadvantage, negative confirmations are less expensive to 
send than positive confirmations, and thus more can be distributed for the same total 
cost. Negative confirmations cost less because there are no second requests and no 
follow-up of nonresponses. 

The determination of which type of confirmation to use is an auditor’s decision, 
and it should be based on the facts in the audit. Auditing standards state that it is 
acceptable to use negative confirmations only when all of the following circumstances 
are present: 


1. The auditor has assessed the risk of material misstatement as low and has 
obtained sufficient appropriate evidence regarding the design and operating 


Types of Confirmation 
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bpetadl Positive Confirmation ) 














Atwater Brothers 
19 South Main Street 
Middleton, Ohio 36947 


To Whom It May Concern: 


auditors 


the correctness of the balance of your account with us as of December 31, 2011, as shown 
below. 


Your prompt attention to this request will be appreciated. An envelope is enclosed for your 
reply. 


BERGER & ANTHONY, CPAs 
Gary, Indiana 


as noted below: 


HILLSBURG HARDWARE CO. 
Gary, Indiana 


January 5, 2012 


In connection with an audit of our financial statements, please confirm directly to our 


BERGER & ANTHONY, CPAs 
Gary, Indiana 


This is not a request for payment; please do not send your remittance to our auditors. 


Damn ean sor 


Erma Swanson, Controller 


The balance receivable from us of $210,389 as of December 31, 2011, is correct except 














IDEM By 














as 


effectiveness of controls relevant to the assertion being tested by the con- 
firmation procedure. 

The population of items subject to negative confirmation procedures is made 
up of a large number of small, homogenous account balances, transactions, or 
other items. 

The auditor expects a low exception rate. 

The auditor reasonably believes that recipients of negative confirmation 
requests will give the requests adequate consideration. For example, if the 
response rate to positive confirmations in prior years was extremely high or if 
there are high response rates on audits of similar clients, it is likely that 
recipients will give negative confirmations reasonable consideration as well. 


Typically, when negative confirmations are used, the auditor puts considerable 
emphasis on the effectiveness of internal controls, substantive tests of transactions, and 
analytical procedures as evidence of the fairness of accounts receivable, and assumes 


that the large majority of the recipients will provide a conscientious reading and 
response to the confirmation request. 


Negative confirmations are often used for audits of hospitals, retail stores, banks, 
and other industries in which the receivables are due from the general public. Auditors 


may use a combination of negative and positive confirmations by sending the latter to 


accounts with large balances and the former to those with small balances. 
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fecenae Negative Confirmation ) 


AUDITOR’S ACCOUNT CONFIRMATION 





Please examine this statement carefully. If it does NOT agree with your records, please report any 
exceptions directly to our auditors 
BERGER & ANTHONY, CPAs 
Gary, Indiana 
who are conducting an audit of our financial statements as of December 31, 2011. An addressed 
envelope is enclosed for your convenience in replying. 


Do not send your remittance to our auditors. 











The auditor’s choice of confirmation falls along a continuum, starting with the use 
of no confirmations in some circumstances, to using only negatives, to using both 
negatives and positives, to using only positives. The primary factors affecting the 
auditor’s decision are the materiality of total accounts receivable, the number and size 
of individual accounts, control risk, inherent risk, the effectiveness of confirmations as 
audit evidence, and the availability of other audit evidence. 


The most reliable evidence from confirmations is obtained when they are sent as close 
to the balance sheet date as possible. This permits the auditor to directly test the 
accounts receivable balance on the financial statements without making any inferences 
about the transactions taking place between the confirmation date and the balance 
sheet date. However, as a means of completing the audit on a timely basis, it is often 
necessary to confirm the accounts at an interim date. This is permissible if internal 
controls are adequate and can provide reasonable assurance that sales, cash receipts, 
and other credits are properly recor; UIPDF of Enhancer the 
end of the accounting period. The auditor is likely to consider other factors in making 
the decision, including the materiality of accounts receivable and the auditor’s 
exposure to lawsuits because of the possibility of client bankruptcy and similar risks. 
If the decision is made to confirm accounts receivable before year-end, the auditor 
typically prepares a roll-forward schedule that reconciles the accounts receivable balance 
at the confirmation date to accounts receivable at the balance sheet date. In addition to 
performing analytical procedures on the activity during the intervening period, it may 
be necessary to test the transactions occurring between the confirmation date and the 
balance sheet date. The auditor can accomplish this by examining internal documents 
such as duplicate sales invoices, shipping documents, and evidence of cash receipts. 


Sample Size The major factors affecting sample size for confirming accounts receivable 
fall into several categories and include the following: 


* Tolerable misstatement 

* Inherent risk (relative size of total accounts receivable, number of accounts, 
prior-year results, and expected misstatements) 

* Control risk 

* Achieved detection risk from other substantive tests (extent and results of sub- 
stantive tests of transactions, analytical procedures, and other tests of details) 

* Type of confirmation (negatives normally require a larger sample size) 


Selection of the Items for Testing Some type of stratification is desirable with most 
confirmations. In a typical approach to stratification for selecting the balances for 
confirmation, an auditor considers both the dollar size of individual accounts and the 
length of time an account has been outstanding. In most audits, the emphasis should 
be on confirming larger and older balances because these are most likely to include a 
significant misstatement. But it is also important to sample some items from every 


Timing 


Sampling Decisions 
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material segment of the population. In many cases, the auditor selects all accounts 
above a certain dollar amount and selects a random sample from the remainder. 

Management may refuse to allow the auditor to send confirmation requests to 
certain customers. The auditor must inquire about the reason for the client’s request, 
which is often due to litigation or negotiations between the client and customer. The 
auditor should obtain evidence to evaluate the reasonableness of the client’s request, 
and evaluate whether the request indicates a potential fraud risk or increased risk of 
material misstatement. 


The auditor should perform procedures to verify the addresses or email addresses used 
for confirmation. For example, auditors should consider performing additional 
procedures when the address is a post office box, or an email address is inconsistent 
with the customer’s Web site address. 

For confirmations sent by mail, the auditor must maintain control of the con- 
firmations until they are returned from the customer. The client may assist with 
preparing the confirmations, but the auditor must be responsible for mailing the 
confirmation outside the client’s office. A return address must be included on all 
envelopes to make sure that undelivered mail is received by the CPA firm. Similarly, 
self-addressed return envelopes accompanying the confirmations must be addressed 
for delivery to the CPA firm’s office. These procedures are designed to ensure that 
responses will be received directly by the auditor. 


It is inappropriate to regard confirmations mailed but not returned by customers as 
significant audit evidence. For example, nonresponses to positive confirmations do not 
provide audit evidence. Similarly, for negative confirmations, the auditor should not 
conclude that the recipient received the confirmation request and verified the informa- 
tion requested. Negative confirmations do, however, provide some evidence of the 
existence assertion. 

foc PH Fhatlyhaneceryiiting standards require follow-up 
procedures forconfirmations not returned by the customer. It is common to send second 
and sometimes even third requests for confirmations. Even with these efforts, some 
customers do not return the confirmation, so it is necessary to follow up with alternative 
procedures. The objective of alternative procedures is to determine by a means other 
than confirmation whether the nonconfirmed account existed and was properly stated at 
the confirmation date. For any positive confirmation not returned, auditors can examine 
the following documentation to verify the existence and accuracy of individual sales 
transactions making up the ending balance in accounts receivable: 


Subsequent Cash Receipts Evidence of the receipt of cash subsequent to the con- 
firmation date includes examining remittance advices, entries in the cash receipts records, 
or perhaps even subsequent credits in the accounts receivable master file. On the one 
hand, the examination of evidence of subsequent cash receipts is a highly useful alterna- 
tive procedure because it is reasonable to assume that a customer would not have made a 
payment unless it was an existing receivable. On the other hand, payment does not 
establish whether an obligation existed on the date of the confirmation. In addition, 
auditors should take care to match each unpaid sales transaction with evidence of its 
subsequent payment as a test for disputes or disagreements over individual outstanding 
invoices. 


Duplicate Sales Invoices These are useful in verifying the actual issuance of a sales 
invoice and the actual date of the billing. 


Shipping Documents These are important in establishing whether the shipment was 
actually made and as a test of cutoff. 


Correspondence with the Client Usually, the auditor does not need to review 
correspondence as a part of alternative procedures, but correspondence can be used to 
disclose disputed and questionable receivables not uncovered by other means. 
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vendors and pressured them to return false con- 
firmation letters to the auditors. In two separate 
complaints, the SEC charged 16 individuals who 
were employees of or agents for vendors that 


FALSE AUDIT Confirmations are normally considered highly 
reliable evidence because they come from 
CONFIRMATIONS independent third parties. However, in some 
HIDE FRAUD AT cases customers have colluded with audit clients 
and returned false audit confirmations. Such was 
U.S. SUBSIDIARY the case at U.S. Foodservice, Inc., a U.S. subsidiary 


of Royal Ahold, a company headquartered in The 
Netherlands. The SEC complaints charged that 
U.S. Foodservice inflated promotional allowances 
from vendors by at least $700 million for fiscal 
years 2001 and 2002 in order to meet earnings 
targets. U.S Foodservice personnel contacted 





supplied U.S. Foodservice. 


Sources: 1. Securities and Exchange 
Commission Accounting and Auditing Enforce- 
ment Release No. 2341, November 2, 2005 
(www.sec.gov/litigation); 2. Securities and 
Exchange Commission Accounting and Auditing 
Enforcement Release No. 2167, January 13, 
2005 (www.sec.gov/litigation). 





The extent and nature of the alternative procedures depend primarily on the 
materiality of the nonresponses, the types of misstatements discovered in the con- 
firmed responses, the subsequent cash receipts from the nonresponses, and the 
auditor’s conclusions about internal control. 

It is normally desirable to account for all unconfirmed balances with alternative 
procedures even if the amounts are small, as a means of properly generalizing from the 
sample to the population. Another acceptable approach is to assume that nonresponses 
are 100 percent overstatement amounts. 


When the confirmation requests are returned by the customer, the auditor must 
determine the reason for any reported differences. In many cases, they are caused by 
timing differences between the client’s and the customer’s records. It is important to 
distinguish between timing differences and exceptions, which represent misstatements 
of the accounts receivable balance. The most commonly reported types of differences 


in confirmations include: Apago PDF Enhancer 
Payment Has Already Been Made Reported differences typically arise when the 
customer has made a payment before the confirmation date, but the client has not 
received the payment in time for recording before the confirmation date. Such 
instances should be carefully investigated to determine the possibility of a cash receipts 
cutoff misstatement, lapping, or a theft of cash. 


Goods Have Not Been Received These differences typically result because the client 
records the sale at the date of shipment and the customer records the acquisition when 
the goods are received. The time that the goods are in transit is often the cause of 
differences reported on confirmations. These should be investigated to determine the 
possibility of the customer not receiving the goods at all or the existence of a cutoff 
misstatement on the client’s records. 


The Goods Have Been Returned The client’s failure to record a credit memo could 
have resulted from timing differences or the improper recording of sales returns and 
allowances. Like other differences, these must be investigated. 


Clerical Errors and Disputed Amounts The most likely types of reported 
differences in a client’s records are when the customer states that there is an error in the 
price charged for the goods, the goods are damaged, the proper quantity of goods was 
not received, and so forth. These differences must be investigated to determine whether 
the client is in error and the amount of the error. 


In most instances, the auditor will ask the client to reconcile the difference and, if 
necessary, will communicate with the customer to resolve any disagreements. Naturally, 
the auditor must carefully verify the client’s conclusions on each significant difference. 


When all differences have been resolved, including those discovered in performing 
alternative procedures, the auditor must reevaluate internal control. Each client 
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misstatement must be analyzed to determine whether it was consistent or inconsistent 
with the original assessed level of control risk. If a significant number of misstatements 
occurred that are inconsistent with the assessment of control risk, it is necessary to 
revise the assessment and consider the effect of the revision on the audit. Auditors of 
public companies must also consider implications for the audit of internal control over 
financial reporting. 

It is also necessary to generalize from the sample to the entire population of accounts 
receivable. Even though the sum of the misstatements in the sample may not significantly 
affect the financial statements, the auditor must consider whether the population is likely 
to be materially misstated. Generalizing from the sample to the population can be done 
using nonstatistical or statistical sampling techniques and is discussed in Chapter 17. 

The auditor should always evaluate the qualitative nature of the misstatements 
found in the sample, regardless of the dollar amount of the estimated population 
misstatement. Even if the estimated misstatement is less than tolerable misstatement 
for accounts receivable, the misstatements found in a sample can be symptomatic of a 
more serious problem. 

The final decision about accounts receivable and sales is whether sufficient 
appropriate evidence has been obtained through tests of controls and substantive tests 
of transactions, analytical procedures, cutoff procedures, confirmation, and other 
substantive tests to justify drawing conclusions about the correctness of the stated 
balance. 


DEVELOPING TESTS OF DETAILS AUDIT PROGRAM 


OBJECTIVE 16-5 We use Hillsburg Hardware Co. to illustrate the development of audit program pro- 
See ey cin oteeacnes cedures for tests of details in the sales and collection cycle, which serves as the 
PeraRGiaucktonaecaunta summA PaOoOna RD He deannhan@eétrse procedures is based on the tests of 
receivable, using an evidence controls and substantive tests of transactions, as illustrated in Chapters 14 and 15, and 
planning worksheet as a the analytical procedures described earlier in this chapter. 

guide. Fran Moore, the audit senior, prepared the evidence-planning worksheet in Figure 
16-7 as an aid to help her decide the extent of planned tests of details of balances. The 
source of each of the rows is as follows: 





* Tolerable misstatement. The preliminary judgment of materiality was set at 
$442,000 (approximately 6 percent of earnings from operations of $7,370,000). 
She allocated $265,000 to the audit of accounts receivable (see page 255). 

* Acceptable audit risk. Fran assessed acceptable audit risk as medium because the 
company is publicly traded, but is in good financial condition, and has high 
management integrity. Although Hillsburg is a publicly traded company, its 
stock is not widely held or extensively followed by financial analysts. 

* Inherent risk. Fran assessed inherent risk as medium for existence and cutoff 
because of concerns over revenue recognition identified in auditing standards. 
Fran also assessed inherent risk as medium for realizable value. In past years, 
the client made audit adjustments to the allowance for uncollectible accounts 
because it was found to be understated. Inherent risk was assessed as low for all 
other objectives. 

* Control risk. Control risk assessments for each audit objective are the same as 
those in Figure 15-6 on page 499. (Recall that results of tests of controls and 
substantive tests of transactions in Chapter 15 were consistent with the auditor’s 
initial control risk assessments, except for the accuracy and realizable value 
objectives for sales.) 

* Substantive tests of transactions results. These results were also taken from Figure 
15-6. (Recall from Chapter 15 that all results were acceptable except for the 
accuracy and cutoff objectives for sales.) 
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Evidence-Planning Worksheet to Decide Tests of Details of Balances for Hillsburg Hardware 


Co. — Accounts Receivable 





Detail tie-in 


Acceptable audit risk Medium 


cB Completeness 
Bm 
Classification 


Control risk— 
Sales 


Control risk— 


Cash receipts Medium 


Control risk— 
Additional controls 


Substantive tests 
of transactions— 
Sales 


Fair 
results 


Good 
results 


Unacceptable 
results results 


Good 

results 

Good 

results results 
_ co 


Substantive tests 
of transactions— 
Cash receipts 


Good 
results 


Good 
results 


Analytical 
procedures 


Planned detection 
risk for tests of 
details of balances 


High 


(a) a 
fo} [o} 
[o} fo} 
a a 
(a) a a 
fo} fo} fo} 
fo} fo} fo} 
a a a 


Planned audit 
evidence for tests of 
details of balances 


Tolerable misstatement $265,000 





applicable 


Not 
applicable 


Not 
applicable 


Unacceptable 
results 


applicable 


Not 
applicable 


Not 
applicable 


Not 
applicable 


Not 
applicable 











* Analytical procedures. See Tables 16-2 and 16-3 (both on page 525). 
* Planned detection risk and planned audit evidence. These two rows are decided 
for each objective based on the conclusions in the other rows. 


Table 16-4 (p. 540) shows the tests of details audit program for accounts receivable, 
by objective, and for the allowance for uncollectible accounts. The audit program 
reflects the conclusions for planned audit evidence on the evidence-planning work- 
sheet in Figure 16-7. 

Table 16-5 (p. 541) shows the audit program in a performance format. The audit 
procedures are identical to those in Table 16-4 except for procedure 2, which is an 
analytical procedure. The numbers in parentheses are a cross reference between the 
two tables. 
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TABLE 16-4 


Balance-Related Audit Objectives and Audit Program for Hillsburg Hardware Co.—Sales and 
Collection Cycle (Design Format) 





Balance-Related Audit Objective 


Audit Procedure 





Accounts receivable in the aged trial balance agree 
with related master file amounts, and the total is 
correctly added and agrees with the general ledger 
(detail tie-in). 


Trace 10 accounts from the trial balance to accounts on master file (6). 
Foot two pages of the trial balance, and total all pages (7). 


Trace the balance to the general ledger (8). 





The accounts receivable on the aged trial balance exist 
(existence). 


Confirm accounts receivable, using positive confirmations. Confirm all amounts 
over $100,000 and a nonstatistical sample of the remainder (10). 


Perform alternative procedures for all confirmations not returned on the first or 
second request (11). 


Review accounts receivable trial balance for large and unusual receivables (1). 





Existing accounts receivable are included in the aged 
trial balance (completeness). 


Trace five accounts from the accounts receivable master file to the aged trial 
balance (9). 





Accounts receivable in the trial balance are 
accurate (accuracy). 


Confirm accounts receivable, using positive confirmations. Confirm all amounts 
over $100,000 and a nonstatistical sample of the remainder (10). 


Perform alternative procedures for all confirmations not returned on the first or 
second request (11). 


Review accounts receivable trial balance for large and unusual receivables (1). 





Accounts receivable on the aged trial balance are 
correctly classified (classification). 


Review the receivables listed on the aged trial balance for notes and related 
party receivables (3). 


Inquire of management whether there are any related party notes or long-term 
receivables included in the trial balance (4). 





Transactions in the sales and collection cycle are 
recorded in the proper period (cutoff). 


Select the last 20 sales transactions from the current year’s sales journal and 
the first 20 from the subsequent year’s and trace each to the related 
shipping documents, checking for the date of actual shipment and the 
correct recording (14). 


Review large sales returns and allowances before and after the balance sheet 
date to determine whether they are recorded in the correct period (15). 





Accounts receivable is stated at realizable value 
(realizable value). 


Trace 10 accounts from the aging schedule to the accounts receivable master 
file to test for the correct aging on the trial balance (6). 


Foot the aging columns on the trial balance and total the pages (7). 
Cross-foot the aging columns (7). 


Discuss with the credit manager the likelihood of collecting older accounts. 
Examine subsequent cash receipts and the credit file on all accounts over 
90 days and evaluate whether the receivables are collectible (12). 


Evaluate whether the allowance is adequate after performing other audit 
procedures for collectibility of receivables (13). 





The client has rights to accounts receivable on the trial 
balance (rights). 


Review the minutes of the board of directors meetings for any indication of 
pledged or factored accounts receivable (5). 


Inquire of management whether any receivables are pledged or factored (5). 





4 





Note: The procedures are summarized into a performance format in Table 16-5 on page 541. The numbers in parentheses after the procedures refer to Table 16-5. 
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TABLE 16-5 Test of Details of Balances Audit Program for Hillsburg Hardware 


. Review accounts receivable trial balance for large and unusual receivables. 


. Calculate analytical procedures indicated in carry-forward audit schedules (not included) and 


. Review the receivables listed on the aged trial balance for notes and related party receivables. 


. Inquire of management whether there are any related party, notes, or long-term receivables 


. Review the minutes of the board of directors meetings and inquire of management to determine 


. Trace 10 accounts from the trial balance to the accounts receivable master file for aging and the 


. Foot two pages of the trial balance for aging columns and balance and total all pages and cross- 


. Trace the balance to the general ledger. 
. Trace five accounts from the accounts receivable master file to the aged trial balance. 


. Confirm accounts receivable, using positive confirmations. Confirm all amounts over $100,000 and 


. Perform alternative procedures for all confirmations not returned on the first or second request. 


. Discuss with the credit manager the likelihood of collecting older accounts. Examine subsequent 


. Evaluate whether the allowance is adequate after performing other audit procedures for 


. Select the last 20 sales transactions from the current year’s sales journal and the first 20 from the 


. Review large sales returns and allowances before and after the balance sheet date to determine 





>) 


Co. — Sales and Collection Cycle (Performance Format) 





follow up on any significant changes from prior years. 


included in the trial balance. 


whether any receivables are pledged or factored. 


balance. 


foot the aging. 


a nonstatistical sample of the remainder. 

cash receipts and the credit file on all larger accounts over 90 days and evaluate whether the 
receivables are collectible. 

collectibility of receivables. 


subsequent year's and trace each to the related shipping documents, checking for the date of 
actual shipment and the correct recording. 





whether they are recorded in the correct period. 





ESSENTIAL TERMS 


Accounts receivable balance-related audit 
objectives—the eight specific audit objec- 
tives used by the auditor to decide the 
appropriate audit evidence for accounts 
receivable 


Aged trial balance—a listing of the 
balances in the accounts receivable master 
file at the balance sheet date broken down 
according to the amount of time passed 
between the date of sale and the balance 
sheet date 


Alternative procedures—the follow-up of 
a positive confirmation not returned by 
the debtor with the use of documenta- 
tion evidence to determine whether the 
recorded receivable exists 
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Blank confirmation form—a_ letter, 
addressed to the debtor, requesting the 
recipient to fill in the amount of the 
accounts receivable balance; it is con- 
sidered a positive confirmation 


Cutoff misstatements—misstatements 
that take place as a result of current period 
transactions being recorded in a subsequent 
period, or subsequent period transactions 
being recorded in the current period 


Invoice confirmation—a type of positive 
confirmation in which an individual 
invoice is confirmed, rather than the cus- 
tomer’s entire accounts receivable balance 


Negative confirmation—a letter, addressed 
to the debtor, requesting a response only 
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if the recipient disagrees with the amount in accounts receivable that will ultimately 


of the stated account balance be collected 

Positive confirmation—a letter, addressed 

to the debtor, requesting that the recipi- Timing difference—a reported dif- 
ent indicate directly on the letter whether ference in a confirmation from a debtor 
the stated account balance is correct or that is determined to be a timing 
incorrect and, if incorrect, by what amount difference between the client’s and 
Realizable value of accounts receivable— debtor’s records and therefore not a 
the amount of the outstanding balances misstatement 


REVIEW QUESTIONS 


16-1 (Objective 16-1) Distinguish among tests of details of balances, tests of controls, and 
substantive tests of transactions for the sales and collection cycle. Explain how the tests of 
controls and substantive tests of transactions affect the tests of details of balances. 


16-2 (Objective 16-1) Cynthia Roberts, CPA, expresses the following viewpoint: “I do not 
believe in performing tests of controls and substantive tests of transactions for the sales and 
collection cycle. As an alternative, I send a lot of negative confirmations on every audit at 
an interim date. If I find a lot of misstatements, I analyze them to determine their cause. If 
internal controls are inadequate, I send positive confirmations at year-end to evaluate the 
amount of misstatements. If the negative confirmations result in minimal misstatements, 
which is often the case, I have found that the internal controls are effective without bother- 
ing to perform tests of controls and substantive tests of transactions, and the confirmation 
requirement has been satisfied at the same time. In my opinion, the best test of internal 
controls is to go directly to third parties.” Evaluate her point of view. 


16-3 ‘Apac ) 1a lytical procedures for the sales and collection cycle. For 
cach (ARAGO, »PDE ANAC ER ied 

16-4 (Objective 16-3) Identify the eight accounts receivable balance-related audit objec- 
tives. For each objective, list one audit procedure. 


16-5 (Objective 16-3) Which of the eight accounts receivable balance-related audit objec- 
tives can be partially satisfied by confirmations with customers? 


16-6 (Objective 16-3) State the purpose of footing the total column in the client’s accounts 
receivable trial balance, tracing individual customer names and amounts to the accounts 
receivable master file, and tracing the total to the general ledger. Is it necessary to trace each 
amount to the master file? Why? 


16-7 (Objective 16-3) Distinguish between accuracy tests of gross accounts receivable and 
tests of the realizable value of receivables. 


16-8 (Objective 16-3) Explain why you agree or disagree with the following statement: “In 
most audits, it is more important to test carefully the cutoff for sales than for cash receipts.” 
Describe how you perform each type of test, assuming documents are prenumbered. 


16-9 (Objective 16-4) Evaluate the following statement: “In many audits in which accounts 
receivable is material, the requirement of confirming customer balances is a waste of time 
and would not be performed by competent auditors if it were not required by auditing 
standards. When internal controls are excellent and there are a large number of small 
receivables from customers who do not recognize the function of confirmation, it is a 
meaningless procedure. Examples include well-run utilities and retail stores. In these 
situations, tests of controls and substantive tests of transactions are far more effective than 
confirmations.” 


16-10 (Objective 16-4) Distinguish between a positive and a negative confirmation and 
state the circumstances in which each should be used. Why do CPA firms sometimes use a 
combination of positive and negative confirmations on the same audit? 
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16-11 (Objective 16-4) Under what circumstances is it acceptable to confirm accounts 
receivable before the balance sheet date? 


16-12 (Objective 16-4) State the most important factors affecting the sample size in 
confirmations of accounts receivable. 


16-13 (Objective 16-4) Discuss whether email responses and oral responses are confir- 
mations. How can an auditor verify the addresses for confirmations sent by mail, and 
confirmations sent electronically? 


16-14 (Objective 16-4) In Chapter 15, one of the points brought out was the need to obtain 
a representative sample of the population. How can this concept be reconciled with the 
statement in this chapter that the emphasis should be on confirming larger and older 
balances because these are most likely to contain misstatements? 


16-15 (Objective 16-4) Define what is meant by alternative procedures in the confirmation 
of accounts receivable and explain their purpose. Which alternative procedures are the 
most reliable? Why? 


16-16 (Objective 16-4) Explain why the analysis of differences is important in the 
confirmation of accounts receivable, even if the misstatements in the sample are not 
material. 


16-17 (Objective 16-4) State three types of differences that might be observed in the 
confirmation of accounts receivable that do not constitute misstatements. For each, state 
an audit procedure that will verify the difference. 


16-18 (Objective 16-1) What is the relationship of each of the following to the sales and 
collection cycle: flowcharts, assessing control risk, tests of controls, and tests of details of 
balances? 


16-19 (Objective 16-3) Describe accounting requirements for proper recording of sales 
returns and allowances. 





16-20 (Objective 16-2) The following questions concern analytical procedures in the sales 
and collection cycle. Choose the best response. 


a. As a result of analytical procedures, the auditor determines that the gross profit 
percentage has declined from 30% in the preceding year to 20% in the current year. 
The auditor should 
(1) express a qualified opinion due to inability of the client company to continue as a 

going concern. 
(2) evaluate management’s performance in causing this decline. 
(3) require footnote disclosure. 
(4) consider the possibility of a misstatement in the financial statements. 


b. After a CPA has determined that accounts receivable have increased as a result of slow 
collections in a “tight money” environment, the CPA will be likely to 
(1) increase the balance in the allowance for bad debt account. 
(2) review the going concern ramifications. 
(3) review the credit and collection policy. 
(4) expand tests of collectibility. 


c. In connection with his review of key ratios, the CPA notes that Pyzi had accounts 
receivable equal to 30 days’ sales at December 31, 2010, and to 45 days’ sales at 
December 31, 2011. Assuming that there have been no changes in economic 
conditions, clientele, or sales mix, this change most likely will indicate 
(1) a steady increase in sales in 2011. 

(2) an easing of credit policies in 2011. 
(3) a decrease in accounts receivable relative to sales in 2011. 
(4) a steady decrease in sales in 2011. 


we a 
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16-21 (Objective 16-4) The following questions deal with confirmation of accounts 
receivable. Choose the best response. 


a. The negative form of accounts receivable confirmation request is useful except when 
(1) internal control surrounding accounts receivable is considered to be effective. 
(2) alarge number of small balances are involved. 
(3) the auditor has reason to believe the persons receiving the requests are likely to 
give them consideration. 
(4) individual account balances are relatively large. 


b. The return of a positive confirmation of accounts receivable without an exception 
attests to the 
(1) collectibility of the receivable balance. 
(2) accuracy of the receivable balance. 
(3) accuracy of the aging of accounts receivable. 
(4) accuracy of the allowance for uncollectible accounts. 


c. In confirming a client’s accounts receivable in prior years, an auditor found that there 
were many differences between the recorded account balances and the confirmation 
responses. These differences, which were not misstatements, required substantial time 
to resolve. In defining the sampling unit for the current year’s audit, the auditor will 
most likely choose 
(1) individual overdue balances. (3) small account balances. 

(2) individual invoices. (4) large account balances. 


16-22 (Objective 16-3) The following questions concern audit objectives and management 
assertions for accounts receivable. Choose the best response. 


a. When evaluating the adequacy of the allowance for uncollectible accounts, an auditor 
reviews the entity’s aging of receivables to support management’s balance-related 
assertion of 
(1) existence. (3) valuation and allocation. 


( Page.sPDF Enhancer rights and obligations. 


b. Which of the following audit procedures will best uncover an understatement of sales 

and accounts receivable? 

(1) Test a sample of sales transactions, selecting the sample from prenumbered 
shipping documents. 

(2) Test a sample of sales transactions, selecting the sample from sales invoices 
recorded in the sales journal. 

(3) Confirm accounts receivable. 

(4) Review the aged accounts receivable trial balance. 


c. The confirmation of customers’ accounts receivable rarely provides reliable evidence 

about the completeness assertion because 

(1) many customers merely sign and return the confirmation without verifying 
details. 

(2) recipients usually respond only if they disagree with the information on the 
request. 

(3) customers may not be inclined to report understatement errors in their accounts. 

(4) there is likely to be reliable third party evidence available. 


DISCUSSION QUESTIONS AND PROBLEMS 


16-23 (Objective 16-3) The following are common tests of details of balances for the audit 
of accounts receivable: 


1. Obtain a list of aged accounts receivable, foot the list, and trace the total to the 
general ledger. 

2. Trace 35 accounts to the accounts receivable master file for name, amount, and age 
categories. 
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. Examine and document cash receipts on accounts receivable for 20 days after the 
engagement date. 


4. Request 25 positive and 65 negative confirmations of accounts receivable. 


. Perform alternative procedures on accounts not responding to second requests by 
examining subsequent cash receipts documentation and shipping reports or sales 
invoices. 


6. Test the sales cutoff by tracing entries in the sales journal for 15 days before and after 


the balance sheet date to shipping documents, if available, and/or sales invoices. 


7. Determine whether any accounts receivable have been pledged, discounted, sold, 


8. 


assigned, or guaranteed by others. 
Evaluate the materiality of credit balances in the aged trial balance. 


For each audit procedure, identify the balance-related audit objective or objectives it 


parti 


ally or fully satisfies. 


16-24 (Objective 16-3) The following misstatements are sometimes found in the sales and 
collection cycle’s account balances: 


1. 


The accounts receivable trial balance total does not equal the amount in the general 

ledger. 

. Several accounts receivable in the accounts receivable master file are not included in 
the aged trial balance. 

. One account receivable in the accounts receivable master file is included on the aged 
trial balance twice. 

. A shipment made in the subsequent period is recorded as a current period sale. 

. The allowance for uncollectible accounts is inadequate because of the client’s failure 
to reflect depressed economic conditions in the allowance. 

. Several accounts receivable are in dispute as a result of claims of defective mer- 
chandise. 

. The pledging of accounts receivable to the bank for a loan is not disclosed in the 
financial statements. Apago PDF Enhancer 

. Goods shipped and included in the current period sales were returned in the 
subsequent period. 

. Long-term interest-bearing notes receivable from affiliated companies are included 

in accounts receivable. 


. For each misstatement, identify the balance-related audit objective to which it 


pertains. 


. For each misstatement, list an internal control that should prevent it. 


. For each misstatement, list one test of details of balances audit procedure that the 


auditor can use to detect it. 


16-25 (Objective 16-3) The following are audit procedures in the sales and collection cycle: 


1 


iss) 


. Add the columns on the aged trial balance and compare the total with the general 
ledger. 

. Examine a sample of shipping documents to determine whether each has a sales 
invoice number included on it. 

. Examine a sample of customer orders and see if each has a credit authorization. 

. Compare the date on a sample of shipping documents a few days before and after the 
balance sheet date with related sales journal transactions. 

. Discuss with the sales manager whether any sales allowances have been granted after 
the balance sheet date that may apply to the current period. 

. Observe whether the controller makes an independent comparison of the total in the 
general ledger with the trial balance of accounts receivable. 

. Compare the date on a sample of shipping documents throughout the year with 
related duplicate sales invoices and the accounts receivable master file. 

. Compute the ratio of allowance for uncollectible accounts divided by accounts 
receivable and compare with previous years. 
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Required 
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Required a. 


For each procedure, identify the applicable type of audit evidence. 


b. For each procedure, identify which of the following it is: 


(1) Test of control (3) Analytical procedure 
(2) Substantive test of transactions (4) Test of details of balances 


. For those procedures you identified as a test of control or substantive test of trans- 


actions, what transaction-related audit objective or objectives are being satisfied? 


. For those procedures you identified as a test of details of balances, what balance- 


related audit objective or objectives are being satisfied? 


16-26 (Objective 16-3) The following are the eight balance-related audit objectives, six tests 


of de 


tails of balances for accounts receivable, and seven tests of controls or substantive tests 


of transactions for the sales and collection cycle: 


Balance-Related Audit Objective 


Detail tie-in Classification 
Existence Cutoff 
Completeness Realizable value 
Accuracy Rights 


Test of Details of Balances, Test of Control, or Substantive Test of Transactions Audit Procedure 


1. 
2s 


3 
4 
5. 
6 
7. 
8. 
0: 
10. 
11. 


12. 


13. 


Required a. 


Confirm accounts receivable. 

Review sales returns after the balance sheet date to determine whether any are 
applicable to the current year. 

. Compare dates on shipping documents and the sales journal throughout the year. 

. Perform alternative procedures for nonresponses to confirmation. 

Examine sales transactions for related party or employee sales recorded as regular sales. 
. Examine duplicate sales invoices for consignment sales and other shipments for 
which title has not passed. 


Apa qe" p DF FRA aRnCeE receivable master file to the aged trial 


Trace recorded sales transactions to shipping documents to determine whether a 
document exists. 

Examine duplicate sales invoices for initials that indicate internal verification of 
extensions and footings. 

Trace a sample of shipping documents to related sales invoice entries in the sales 
journal. 

Compare amounts and dates on the aged trial balance and accounts receivable 
master file. 

Trace from the sales journal to the accounts receivable master file to make sure the 
information is the same. 

Inquire of management whether there are notes from related parties included with 
trade receivables. 


Identify which procedures are tests of details of balances, which are tests of controls, 
and which are substantive tests of transactions. 


. For each balance-related audit objective, identify which test of details of balances and 


test of controls or substantive test of transactions partially satisfy the balance-related 
objective. 


16-27 (Objective 16-3) Niosoki Auto Parts sells new parts for foreign automobiles to auto 
dealers. Company policy requires that a prenumbered shipping document be issued for 


each 


sale. At the time of pickup or shipment, the shipping clerk writes the date on the 


shipping document. The last shipment made in the fiscal year ended August 31, 2011, was 
recorded on document 2167. Shipments are billed in the order that the billing clerk receives 
the shipping documents. 

For late August and early September, shipping documents are billed on sales invoices as 
follows: 
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Shipping Document No. Sales Invoice No. 





2163 5437 
2164 5431 
2165 5432 
2166 5435 
2167 5436 
2168 5433 
2169 5434 
2170 5438 
2171 5440 
2172 5439 





The August and September sales journals have the following information included: 
SALES JOURNAL — AUGUST 2011 














Day of Month Sales Invoice No. Amount of Sale 
30 5431 $ 726.11 
30 5434 4,214.30 
31 5432 419.83 
31 5433 1,620.22 
31 5435 47.74 

SALES JOURNAL — SEPTEMBER 2011 

Day of Month Sales Invoice No. Amount of Sale 
1 5437 $2,541.31 
1 5436 106.39 
1 5438 852.06 
2 5440 1,250.50 
2 5439 646.58 

a. What are the accounting requirements for a correct sales cutoff? Required 


b. Which sales invoices, if any, are Apagac POP chink arxeerypare an 


adjusting entry to correct the financial statement for the year ended August 31, 2011. 
Assume that the company uses a periodic inventory system (inventory and cost of 
sales do not need to be adjusted). 

c. Assume that the shipping clerk accidentally wrote August 31 on shipping documents 
2168 through 2172. Explain how that will affect the correctness of the financial 
statements. How will you, as an auditor, discover that error? 

d. Describe, in general terms, the audit procedures you would follow in making sure that 
cutoff for sales is accurate at the balance sheet date. 

e. Identify internal controls that will reduce the likelihood of cutoff misstatements. How 
would you test each control? 


16-28 (Objective 16-4) Dodge, CPA, is auditing the financial statements of a manufacturing 
company with a significant amount of trade accounts receivable. Dodge is satisfied that the 
accounts are correctly summarized and classified and that allocations, reclassifications, and 
valuations are made in accordance with GAAP. Dodge is planning to use accounts receivable 
confirmation requests to obtain sufficient appropriate evidence as to trade accounts receivable. 


a. Identify and describe the two forms of accounts receivable confirmation requests and Required 
indicate what factors Dodge will consider in determining when to use each. 


b. Assume that Dodge has received a satisfactory response to the confirmation requests. 
Describe how Dodge can evaluate collectibility of the trade accounts receivable. 


c. What are the implications to a CPA if during an audit of accounts receivable some of 
a client’s trade customers do not respond to a request for positive confirmation of 
their accounts? 


d. What auditing steps should a CPA perform if there is no response to a second request 
for a positive confirmation?* 


*AICPA adapted. 
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Required 


Required 


16-29 (Objectives 16-2, 16-3) The Albring Company sells electronics equipment, and has 
grown rapidly in the last year by adding new customers. The audit partner has asked you to 
evaluate the allowance for doubtful accounts at December 31, 2011. Comparative 
information on sales and accounts receivable is included below: 





Year Ended Year Ended 
12/31/11 12/31/10 
Sales $ 12,169,876 $ 10,452,513 
Accounts Receivable 1,440,381 1,030,933 
Allowance for doubtful accounts 90,000 75,000 
Bad debt charge-offs 114,849 103,471 
Accounts Receivable: 
0-30 days $ 897,035 $ 695,041 
30-60 days 254,269 160,989 
60-90 days 171,846 105,997 
Over 90 days 117,231 68,906 
TOTAL $ 1,440,381 $ 1,030,933 





a. Identify what tests of controls and substantive tests of transactions you recommend be 
performed before conducting your analysis of the allowance for doubtful accounts. 


b. Perform analytical procedures to evaluate whether the allowance is fairly stated at 
December 31, 2011. Assume tolerable misstatement for the allowance account is 
$15,000. 


16-30 (Objective 16-4) You have been assigned to the confirmation of aged accounts 
receivable for the Blank Paper Company audit. You have tested the aged trial balance and 
selected the accounts for confirming. Before the confirmation requests are mailed, the 
controller asks to look at the accounts you intend to confirm to determine whether he will 
permit you to send them. 

He AB Go PDE FHnat ey not want you to confirm six of the 
accoun | ist. Two oF thein are credit batafices, one is a zero balance, two of the other 
three have a fairly small balance, and the remaining balance is highly material. The reason he 
gives is that he feels the confirmations will upset these customers because “they are kind of 
hard to get along with.” He does not want the credit balances confirmed because it may 
encourage the customer to ask for a refund. 

In addition, the controller asks you to send an additional 20 confirmations to customers 
he has listed for you. He does this as a means of credit collection for “those stupid idiots 
who won't know the difference between a CPA and a credit collection agency.” 


a. Is it acceptable for the controller to review the list of accounts you intend to confirm? 
Discuss. 


b. Discuss the appropriateness of sending the 20 additional confirmations to the customers. 


c. What additional procedures should be performed if the auditor agrees with the 
client’s request not to send confirmations to the six customers. 


16-31 (Objective 16-4) You have been assigned to the first audit of the Chicago Company 
for the year ending March 31, 2011. Accounts receivable were confirmed on December 31, 
2010, and at that date the receivables consisted of approximately 200 accounts with 
balances totaling $956,750. Fifty of these accounts with balances totaling $650,725 were 
selected for confirmation. All but 10 of the confirmation requests have been returned; 24 
were returned without any exceptions, 6 had minor differences that have been cleared 
satisfactorily, and 10 confirmations had the following information and comments: 


1. We are sorry, but we cannot answer your request for confirmation of our account as 
the PDQ Company uses an accounts payable voucher system and can only confirm 
individual invoices. 

2. The balance of $1,050 was paid on December 28, 2010. 

. The balance of $7,750 was paid on January 5, 2011. 

4. The balance of $2,975 was paid on December 13, 2010. 


1S) 
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5. We do not owe you anything at December 31, 2010, as the goods, represented by 


your invoice dated December 30, 2010, number 25050, in the amount of $11,550, 
were received on January 5, 2011, on FOB destination terms. 


6. An advance payment of $2,500 made by us in November 2010 should cover the two 


invoices totaling $1,350 shown on the statement attached. 


7. This confirmation was returned as undeliverable by the post office. 


. We are contesting the propriety of this $12,525 charge. We think the charge is excessive. 


9. We do not owe this balance as our agreement with the company allows us to return 


any unsold goods without penalty. Amount okay. As the goods have been shipped to 
us on consignment, we will remit payment upon selling the goods. 


10. Your credit memo dated December 5, 2010, in the amount of $440 cancels the 


a. 


b. 


Cc. 


balance above. 
Indicate which of these confirmation responses likely represent timing differences. 


Which of the ten confirmation responses likely represent a misstatement? Explain why 
the response indicates a misstatement. 

For each of the 10 confirmation responses, indicate the procedures you would 
perform to determine whether the exception is a misstatement or has been 
appropriately recorded by the client.* 


16-32 (Objectives 16-3, 16-5) The following are various changes in audit circumstances. 
Audit Circumstance 


2. 


1S) 


. Analytical procedures indicated a significant slowing in accounts receivable turnover. 
The client entered into sales contracts with new customers that differ from the 
client’s standard sales contracts. 

. The client had a significant increase in sales near year-end. 


4, Accounts receivable confirmations were ineffective due to a very low response rate in 


the prior year audit. 
. The client began experiencing an increase in returns due to product changes that 


resulted in increased defects. JA’ aao PDF Enhancer 


6. You found several pricing errors iff youf substantive tests of transactions for sales. 
7. In performing substantive test of transactions for cash receipts, you found that 


receipts were promptly recorded in customer accounts, but there were delays in 
depositing the receipts at the bank. 

. The client entered into a new loan agreement with the bank. Accounts receivable are 
pledged as collateral for the loan. 


9. The client did not reconcile the accounts receivable subsidiary records with the 


accounts receivable balance in the general ledger on a regular basis. 


Match each change in audit circumstance with the most likely test of details of balances 
response. Each response is used once. 


a 


b. 


. Expand testing of sales returns after year-end and compare the level of returns with 


the prior year. 


Send positive confirmations that include requests for information on side agreements 
and special terms. 


. Increase the number of accounts traced from the accounts receivable trial balance to 


the accounts receivable subsidiary records. 


. Expand the review of cash receipts after year-end to evaluate the collectibility of 


accounts receivable. 


. Increase the sample size for sales cutoff testing for sales recorded before year-end. 
. Send a confirmation to the bank confirming amounts pledged as collateral under loan 


agreements. 


. Increase the sample size for positive confirmations of accounts receivable. 
. While at the client’s premises at year-end, obtain information on the last few cash 


receipt at year-end for cash receipts cutoff testing. 


*AICPA adapted. 
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Required 


i. Perform alternative procedures to test the existence and accuracy of accounts receivable 
instead of sending positive confirmations. 


16-33 (Objective 16-4) In the confirmation of accounts receivable for the Reliable Service 
Company, 85 positive and no negative confirmations were mailed to customers. This 
represents 35% of the dollar balance of the total accounts receivable. Second requests were 
sent for all nonresponses, but there were still 10 customers who did not respond. The 
decision was made to perform alternative procedures on the 10 unanswered confirmation 
requests. An assistant is requested to conduct the alternative procedures and report to the 
senior auditor after he has completed his tests on two accounts. He prepared the following 
information for the audit files: 


1. Confirmation request no. 9 
Customer name—Jolene Milling Co. 
Balance—$3,621 at December 31, 2011 
Subsequent cash receipts per the 
accounts receivable master file: January 15, 2012—$1,837 
January 29, 2012—$1,263 
February 6, 2012—$1,429 


2. Confirmation request no. 26 
Customer name—Rosenthal Repair Service 
Balance—$2,500 at December 31, 2011 
Subsequent cash receipts per the 
accounts receivable master file February 9, 2012—$500 
Sales invoices per the accounts receivable 
master file (I examined the duplicate invoice) September 1, 2011—$4,200 


a. If you are called on to evaluate the adequacy of the sample size, the type of confirma- 
tion used, and the percent of accounts confirmed, what additional information will 


"A need? 
b. Apage..uPDE: aD hance Fecform alternative procedures for non- 


responses. 


c. Evaluate the adequacy of the alternative procedures used for verifying the two non- 
responses. 


CASE 


16-34 (Objectives 16-1, 16-3, 16-4, 16-5) You are auditing the sales and collection cycle for 
the Smalltown Regional Hospital, a small not-for-profit hospital. The hospital has a 
reputation for excellent medical services and deficient record keeping. The medical people 
have a tradition of doing all aspects of their job correctly, but because of a shortage of 
accounting personnel, there is not time for internal verification or careful performance. In 
previous years, your CPA firm has found quite a few misstatements in billings, cash 
receipts, and accounts receivable. As in all hospitals, the two largest assets are accounts 
receivable and property, plant, and equipment. 

The hospital has several large loans payable to local banks, and the two banks have told 
management that they are reluctant to extend more credit, especially considering the modern 
hospital that is being built in a nearby city. In the past, county taxes have made up deficits, but 
in the past year, the county has also been incurring deficits because of high unemployment. 

In previous years, your response from patients to confirmation requests has been 
frustrating at best. The response rate has been extremely low, and those who did respond 
did not know the purpose of the confirmations or their correct outstanding balance. You 
have had the same experience in confirming receivables at other hospitals. 

You conclude that control over cash is excellent and the likelihood of fraud is extremely 
small. You are less confident about unintentional errors in billing, recording sales, cash 
receipts, accounts receivable, and bad debts. 


Part 3 / APPLICATION OF THE AUDIT PROCESS TO THE SALES AND COLLECTION CYCLE 


a. Identify the major factors affecting client business risk and acceptable audit risk for Required 
this audit. 


b. What inherent risks are you concerned about? 
c. In this audit of the sales and collection cycle, which types of tests are you likely to 


emphasize? 
d. For each of the following, explain whether you plan to emphasize the tests and give 
reasons: 
(1) Tests of controls (3) Analytical procedures 
(2) Substantive tests of transactions (4) Tests of details of balances 


INTEGRATED CASE APPLICATION — 


PINNACLE MANUFACTURING: PART VII 





16-35 (Objectives 16-2, 16-3, 16-4) Parts III, V, and VI of this case study dealt with obtaining 
an understanding of internal control and assessing control risk for transactions affecting 
accounts payable of Pinnacle Manufacturing. In Part VI, you will design analytical 
procedures and design and perform tests of details of balances for accounts payable. 

Assume that your understanding of internal controls over acquisitions and cash 
disbursements and the related tests of controls and substantive tests of transactions 
support an assessment of a low control risk. The listing of the 519 accounts making up the 
accounts payable balance of $12,969,686 at December 31, 2011 is included under the 
Pinnacle link on the textbook Web site. 


a. List those relationships, ratios, and trends that you believe will provide useful infor- | Required 
mation about the overall reasonableness of accounts payable. You should consider 
income statement accounts that affect accounts payable in selecting the analytical 
procedures. 


b. Study Table 19-5 (p. 647) contain APAGOcdhROE: HARAN CSF details 


of balances for accounts payable to be sure you understand each procedure and its 
purpose. Prepare an audit program for accounts payable in a performance format, 
using the audit procedures in Table 19-5. The format of the audit program should be 
similar to Table 16-5 (p. 541). Be sure to include a sample size for each procedure. 


c. Assume for requirement b that (1) assessed control risk had been high rather than low 
for each transaction-related audit objective, (2) inherent risk was high for each 
balance-related audit objective, and (3) analytical procedures indicated a high 
potential for misstatement. What would the effect have been on the audit procedures 
and sample sizes for requirement b? 


d. Confirmation requests were sent to a stratified sample of 51 vendors listed in Figure 
16-8 (p. 552). Confirmation responses from 45 vendors were returned indicating no 
difference between the vendor’s and the company’s records. Figure 16-9 (pp. 553-554) 
presents the six replies that indicate a difference between the vendor’s balance and 
the company’s records. The auditor’s follow-up findings are indicated on each reply. 
Prepare an audit schedule similar to the one illustrated in Figure 16-10 (p. 555) to 
determine the misstatements, if any, for each difference. The audit schedule format 
shown in Figure 16-10 can be downloaded using the Pinnacle link on the textbook 
Web site. The exception for Fiberchem is analyzed as an illustration. Assume that 
Pinnacle Manufacturing took a complete physical inventory at December 31, 2011, 
and the auditor concluded that recorded inventory reflects all inventory on hand at 
the balance sheet date. Include the balances confirmed without exception as one 
amount on the schedule for each stratum, and total the schedule columns. 


e. Estimate the total misstatement in the income statement, not just the misstatements 
in the sample, based on the income statement misstatements you identified in 
requirement d. The total misstatement should include a projected misstatement and 
an estimate for sampling error. Hint: See pages 257-258 for guidance on calculating 
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elt) {305 ) Pinnacle Manufacturing Sample of Accounts Payable Selected 
for Confirmation — December 31, 2011 





High-Volume Items (>$250,000) 











1. American Press $ 340,767.94 
2. Clean-O-Rama, Co. 317,668.63 
3. Fiberchem 793,049.89 
4. Rufus Austin Antiques 400,046.08 
5. Todd Machinery 531,073.93 
6. Welburn Manufacturing 388,836.07 $2,771,442.54 
Large Balance Items ($50,001-$250,000) 
1. A&M Sandler Inc. $ 81,348.54 
2. American Baby/USTC TD AS275 
3. Beach & Hoover Refining 76,408.79 
4. Bearing Drives Co. 73,017.24 
5. Burton Martin 78,682.54 
6. Cable Sys./Ind. Traf. Cons. 71,288.95 
7. Eddie Ventura, Inc. 60,255.55 
8. Fiberoptics 60,102.78 
9. Finish Metals Inc. 60,769.71 
10. Freeman Furniture—Attn A/P 130,493.51 
11. GP Chambers Co. 64,125.44 
12. Godwin Drug Co. 84,331.05 
13. Holy Family Hospital 117,916.83 
14. Las Flores Designs Inc. 88,644.92 
15. Lean Corp. 67,985.23 
16. MacDonald Svc. Corporation 147,943.95 
17. McCoys Inc. 67,936.32 
18. Metadyne Corp. 85,432.51 
19. Micron Power Systems 136,071.37 
20. Mobil Oil 93,210.48 
21. National Elevator & Mach. Co. 76,921.40 
22. Norris Industries 88,314.64 
23. R & B Products 80,092.46 
24. Remington Supply 123,411.24 
25. Safety Envelope Co. 223,950.34 
26. Scandec USA Inc. 65,942.94 
27. The Dutton Company 63,882.02 
28. The Haberdashery Co. 71,869.16 
29. University of California 80,624.95 
30. ZZZZ Bank Adjustments 64,471.21 $2,660,878.80 
Items $50,000 and less 
1. Advent Sign Mfg. Co. $ 51,750.00 
2. B&K Mfg. Co. Inc. 42,668.50 
3. Bellco 42,710.74 
4. Boston Shoecase Co. 52,174.50 
5. Dynamic Metal Products 36,546.05 
6. Everhart Co. 47,519.14 
7. Fuller Travel 32,470.11 
8. Good House Home Video Inc. 46,472.67 
9. Harrah’s Metals, Inc. 51,279.85 
10. J C Licht Co.—Glendale Hts. 53,228.47 
11. Liberty Lighting 46,802.78 
12. Long Beach Lawn Service 48,488.96 
13. Premier Whirlpool Bath 6,550.33 
14. Quaker Transanalysis 50,363.69 
15. Tower International 37,299.55 $ 646,325.34 
TOTAL TESTED $6,078,646.68 
& 7 





the point estimate. Note that the misstatements should be projected separately for 
each stratum. You will need to determine the size of each stratum using the accounts 
payable listing. Use your judgment to estimate sampling error, considering the size of 
the population and the amounts tested. 
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f. Estimate the total misstatement in accounts payable in the same way you did for the 
income statement in requirement e. Hint: A misstatement caused by the failure to 
record an FOB origin purchase is an understatement of accounts payable and inven- 
tory and has no effect on income. 


g. What is your conclusion about the fairness of the recorded balance in accounts payable 
for Pinnacle Manufacturing as it affects the income statement and balance sheet? How 
does this affect your assessment of control risk as being low for all transaction-related 
audit objectives? Assume you decided that tolerable misstatement for accounts 
payable as it affects the income statement is $250,000. 





Replies to Requests for Information 








STATEMENT FROM FIBERCHEM 


Pinnacle Manufacturing 
Detroit, MI 


Amounts due as of December 31, 2011: 


Invoice No. Date Amount Balance Due 
8312 11-22-11 $300,000.00 $300,000.00 
8469 12-02-11 178,000.00 478,000.00 
8819 12-18-11 315,049.89 793,049.89(1) 
9002 12-30-11 32,500.00(2) 825,549.89 


Auditor's notes: 

(1) Agrees with accounts payable listing. 

(2) Goods shipped FOB Fiberchem’s plant on December 31, 2011; 
arrived at Pinnacle Manufacturing on January 4, 2012. 


STATEMENT FROM MOBIL OIL 


Pinnacle Manufacturing 
Detroit, MI 


Amounts due as of December 31, 2011: 


Invoice No. Date Amount Balance Due 
DX14777 12-23-11 $93,210.48 $ 93,210.48(1) 
DX16908 12-29-11 37,812.00(2) 131,022.48 


Auditor's notes: 

(1) Agrees with accounts payable listing. 

(2) Goods shipped FOB Pinnacle Manufacturing on December 29, 2011; 
arrived at Pinnacle Manufacturing on January 3, 2012. 


STATEMENT FROM NORRIS INDUSTRIES 


Pinnacle Manufacturing 
Detroit, MI 


Amounts due as of December 31, 2011: 


Invoice No. Date Amount Balance Due 
14896 12-27-11 $ 88,314.64 $ 88,314.64(1) 
15111 12-28-11 117,296.00(2) 205,610.64 


Auditor’s notes: 
(1) Agrees with accounts payable listing. 
(2) Goods received December 30, 2011; recorded on January 2, 2012. 





(Figure 16-9 continued on next page) 
nn ______________ _____i_i__esH__i__i __ 
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Replies to Requests for Information (Cont.) 





STATEMENT FROM REMINGTON SUPPLY 


Pinnacle Manufacturing 
Detroit, MI 


Amounts due as of December 31, 2011: 


Invoice No. Date Amount Balance Due 
141702 11-11-11 $23,067.00 $ 23,067.00 
142619 11-19-11 12,000.00 35,067.00 
142811 12-04-11 7,100.00 42,167.00 
143600 12-21-11 27,715.24 69,882.24 
144927 12-29-11(2) 53,529.00 123,411.24(1) 


Auditor's notes: 
(1) Agrees with accounts payable listing. 


(2) Goods shipped FOB Pinnacle Manufacturing on December 29, 2011; arrived at 
Pinnacle Manufacturing on January 4, 2012. 


STATEMENT FROM ADVENT SIGN MFG. CO. 


Pinnacle Manufacturing 
Detroit, MI 


Amounts due as of December 31, 2011: 


First progress billing per contract $51,750.00(1) 
Second progress billing per contract 7,500.00(2) 
Total due $59,250.00 


Auditor's notes: 

(1) Agrees with accounts payable listing. 

(2) Progress payment due as of December 31, 2011, per contract for construction 
of new custom electric sign; sign installation completed on January 15, 2012. 


STATEMENT FROM FULLER TRAVEL 


Pinnacle Manufacturing 
Detroit, MI 


Amounts due as of December 31, 2011: 


Invoice No. Date Amount Balance Due 
84360110 12-04-11 $9,411.63(2) $ 9,411.63 
84360181 12-12-11 9,411.63(2) 18,823.26 
84360222 12-21-11 7,100.00(1) 25,923.26 
84360291 12-26-11 13,646.85(2) 39,570.11 


Auditor's notes: 
(1) Paid by Pinnacle Manufacturing on December 28, 2011; payment in transit at year-end. 
(2) The total of these items of $32,470.11 agrees with accounts payable listing. 
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oe Pinnacle Manufacturing Analysis of Trade Accounts Payable — December 31, 2011 | 


Misstatement in 
Related Accounts 





Books Timing Misstatement Other Balance Income 
Balance Amount Over (Under) Difference: in Accounts Sheet Statement 
per Confirmed Amount No Payable Misstatement Misstatement Brief 
Vendor Books by Vendor Confirmed Misstatement  0/s (u/s)* o/s (u/s)* o/s (u/s)* Explanation 


Key Accounts (>$250,000) 


F.O.B. Origin 
error: 
; Dr. Inv. 
Fiberchem | $793,049.89 | $825,549.89 | $(32,500.00) $(32,500.00) | $(32,500.00) cr. A/P 





Accounts in stratum $50,001-$250,000 


Accounts in stratum less than or equal to $50,000 


*0/s=overstatement u/s =understatement 
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ACL PROBLEM 


ACD 


16-36 (Objective 16-3) This problem requires the use of ACL software, which is included in 
the CD attached to the text. Information about installing and using ACL and solving this 
problem can be found in Appendix, pages 838-842. You should read all of the reference 
material preceding the instructions for “Quick Sort” before locating the appropriate 
command to answer questions a-f. For this problem use the Metaphor_Trans_All file in 
ACL Demo, which is a file of outstanding sales invoices (each row represents an invoice 
transaction). The suggested command or other source of information needed to solve the 
problem requirement is included at the end of each question. 


a. Determine the total number of invoices (read the bottom of the Metaphor_Trans_All 
file screen) and total unpaid invoices outstanding (NEWBAL) for comparison to the 
general ledger. (Total Field) 


b. How many of the invoices included a finance charge (FINCHG) and what was the 
total amount of the finance charges? (Filter, Count Records, and Total Field) 


c. Determine and print accounts receivable outstanding from each customer and total 
the amount for comparison to part a (Note: remove the filter from step b first). 
(Summarize and Total Field) Which customer number has the largest balance due? 

d. What is the largest and smallest account balance outstanding? (Quick Sort) 

e. For the account with the largest balance, prepare and print an aging of the account 
from the transaction file using the statement date labeled “STMTTDT.” Use the aging 
date as of 4/30/2003 and “NEWBAL’ as the subtotal field. (Filter and Age) 

. To better decide the customers to select for confirmation you decide to stratify 
customer balances into two intervals after excluding all balances less than $5,000. How 
many balances are greater than $5,000? Print the output. (Filter and Stratify) 


aan) 





Required 


In recent years, several high-profile incidents of improper revenue recognition attracted 
the attention of the business media. The SEC has also expressed concerns about the 
number of instances of improper revenue recognition identified by SEC staff. One revenue 
issue involves “bill and hold” sales. In a bill and hold transaction, a customer agrees to 
purchase the goods, but the seller retains physical possession until the customer requests 
shipment to designated locations. Normally, such an arrangement does not qualify as a sale 
because delivery has not occurred. Under certain conditions, however, when a buyer has 
made a firm purchase commitment and has assumed the risks and rewards of the 
purchased product, but is unable to accept delivery because of a compelling business 
reason, bill and hold sales may qualify for revenue recognition. Read the SEC guidance on 
revenue recognition (www.sec.gov/interps/account/sabcodet13.htm) to answer the following 
questions: 


a. What does the SEC indicate are the four basic criteria for determining whether 
revenue is realized or realizable? 


b. A customer of your audit client, Henson LLC, made a formal written request to 
establish a bill and hold arrangement in November 2011, an arrangement which is 
typical in the industry. The customer’s written request outlines a delivery schedule 
that will begin in February 2012. As of November 2011, the product to be shipped in 
February is already complete and ready for shipment. Because the sale was completed 
in 2011, your audit client would like to record the bill and hold the transaction 
described as a sale in 2011. You do not recall noticing any inventory held in a separate 
area of the client’s warehouse during the December 31, 2011 inventory observation. In 
making your determination regarding the timing of the revenue recognition, what 
criteria has the SEC determined to be important? 
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AUDIT SAMPLING 


FOR TESTS OF LEARNING OBJECTIVES 
DETAILS OF BALANCES ew 


you should be able to 

17-1 Differentiate audit sampling for 
Both Statistical And Nonstatistical Sampling tests of details of balances and 
Are Acceptable Under Auditing Standards, Je Nel re 
But Whichever Is Used, It Must Be Done Right fF epi monctataucal/eatnpline ts 


Bob Lake was the manager on the audit of Images, Inc., a specialty retailer besle ohdete Bich) ales 








that had shops throughout the Midwest. Images appealed to upscale work- 17-3 Apply monetary unit sampling. 
ing women and offered its own credit card. Images’ accounting was done 17-4 Describe variables sampling. 
centrally. Transactions were captured online and sales and accounts receiv- 17-5 Use difference estimation in tests 
able files were maintained on a database. of details of balances. 

__ 





Bob Lake's firm encouraged the use of statistical sampling in its practice and 
provided a training program for the development of a statistical coordinator 
for each office. The coordinator in Bob's office was Barbara Ennis. Bob believed that sales transactions and accounts 
receivable confirmation tests should be done using statistical sampling and asked Barbara to help design and oversee 


the statistical aspects of this testing. 


ago PDF Enhancer 
Barbara developed a program for the design of confirmation audit procedures as part of doing tests of details of bal- 


ances for accounts receivable. Her work included determining sample sizes. She left the program with Bob to carry out 
and said that she would be available to help evaluate the results after the tests were performed. 


When all the confirmation replies were received or alternative procedures were completed several weeks later, Bob 
called Barbara to do the statistical evaluation. Much to his dismay, he found out that Barbara had left the firm, and 
worse, there was no statistically trained person to take her place. Bob was under a lot of pressure to get the job com- 
pleted and decided to make the statistical calculations himself. Based on his calculations, he concluded that the poten- 
tial misstatement was large, but not material, so Bob concluded the objectives of the confirmation tests had been met. 


The next year Images, Inc’s earnings declined sharply, partially because of large write-offs of accounts receivable. The 
stock price dropped sharply and a class action suit was filed, naming Bob's firm among the defendants. An outside 
expert was brought in to review the audit documentation. The expert redid all of Bob’s work and found errors in the sta- 
tistical calculations. The expert calculated that the misstatement in accounts receivable, based on the auditor's sample, 
was significantly more than a material amount. Bob’s firm settled the suit for $3.5 million. 





n Chapter 16, we moved into phase III of the audit process by examining analytical procedures and tests of details 
Lee balances for accounts receivable. We will now continue with phase III by determining sample size and items to 
select from the population for the audit of accounts receivable. Although the concepts in this chapter deal with 
accounts receivable, they apply to the audit of many other account balances. 

As the story about the audit of Images, Inc. demonstrates, auditors must correctly use sampling to avoid making 
incorrect conclusions about a population. While both statistical and nonstatistical audit sampling methods are used 
extensively for tests of details of balances, auditors must decide which method to use, depending on their 
preference, experience, and knowledge about statistical sampling. This chapter should help you make correct 
inferences about populations using either statistical or nonstatistical methods. 

Before starting the study of this chapter, we suggest you refer to Figure 13-9 on page 425 to be sure you 
understand where we are in the audit process. At this stage, all items in phases I and II will have been completed 
before auditors determine sample size and items to select from the population. Also, the auditor will have 
completed substantive analytical procedures and designed audit procedures for tests of details of balances, as 
covered in Chapter 16 (part of phase II). The auditor cannot perform the audit procedures for tests of details of 
balances until first deciding sample size and items to select from the population. 


COMPARISONS OF AUDIT SAMPLING FOR TESTS OF 
DETAILS OF BALANCES AND FOR TESTS OF CONTROLS 


AND SUBSTANTIVE TESTS OF TRANSACTIONS 





OBJECTIVE 17-1 Most of the sampling concepts for tests of controls and substantive tests of trans- 
actions, which were discussed in Chapter 15, apply equally to sampling for tests of 
details of balances. In both cases, an auditor wants to make inferences about the entire 





Differentiate audit sampling 

for tests of details of balances i : : ; 
and for tests of controls and population based on a sample. Both sampling and nonsampling risks are therefore 
substantive tests of important for tests of controls, substantive tests of transactions, and tests of details of 


transactions. balandAPAGQ:ss BDF Enhanceaxise either nonstatistical or statistical 





methods for all three types of tests. 
The main differences among tests of controls, substantive tests of transactions, and 
tests of details of balances are in what the auditor wants to measure. 








Type of Test What it Measures 
Tests of controls » The operating effectiveness of internal controls 
Substantive tests of transactions » The operating effectiveness of internal controls 
» The monetary correctness of transactions in the accounting 
system 
Tests of details of balances » Whether the dollar amounts of account balances are 


materially misstated 





Auditors perform tests of controls and substantive tests of transactions: 


* To determine whether the exception rate in the population is sufficiently low 

* To reduce assessed control risk and thereby reduce tests of details of balances 

* For larger public companies, to conclude that the control is operating effectively 
for purposes of auditing internal control over financial reporting 


Unlike for tests of controls and substantive tests of transactions, auditors rarely use 
rate of occurrence tests in tests of details of balances. Instead, auditors use sampling 
methods that provide results in dollar terms. There are three primary types of 
sampling methods used for calculating dollar misstatements in account balances 
addressed in this chapter: nonstatistical sampling, monetary unit sampling, and variables 
sampling. 
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NONSTATISTICAL SAMPLING 


There are 14 steps required in audit sampling for tests of details of balances. These steps OBJECTIVE 17-2 
parallel the 14 steps used for sampling for tests of controls and substantive tests of 
transactions, although the objectives differ. As an auditor, you need to understand how 
audit sampling for tests of details of balances both resembles and differs from audit 
sampling for tests of controls and substantive tests of transactions. The primary 
differences in applying audit sampling for tests of details of balances are indicated in 


Apply nonstatistical sampling 
to tests of details of balances. 








italics. 

Steps—Audit Sampling for Tests of 
Steps—Audit Sampling for Tests of Controls and Substantive Tests of 
Details of Balances Transactions (see p. 486) 
Plan the Sample Plan the Sample 

1. State the objectives of the audit test. 1. State the objectives of the audit test. 

2. Decide whether audit sampling 2. Decide whether audit sampling 

applies. applies. 

3. Define a misstatement. 3. Define attributes and exception 

conditions. 

4. Define the population. 4. Define the population. 

5. Define the sampling unit. 5. Define the sampling unit. 

6. Specify tolerable misstatement. 6. Specify the tolerable exception rate. 

7. Specify acceptable risk of incorrect 7. Specify acceptable risk of assessing 

acceptance. control risk too low. 

8. Estimate misstatements in the 8. Estimate the population exception 

population. rate. 

9. Determine the initial sample size. Determine the initial sample size. 
Select the Sample and Apago..PD E.,, pnhance r 
Perform the Audit Procedures Perform the Audit Procedures 
10. Select the sample. 10. Select the sample. 

11. Perform the audit procedures. 11. Perform the audit procedures. 
Evaluate the Results Evaluate the Results 
12. Generalize from the sample to 12. Generalize from the sample to the 
the population. population. 
13. Analyze the misstatements. 13. Analyze the exceptions. 
14. Decide the acceptability of the 14. Decide the acceptability of the 
population. population. 
Auditors sample for tests of details of balances to determine whether the account balance State the Objectives 
being audited is fairly stated. The population of 40 accounts receivable in Table 17-1 of the Audit Test 


(p. 560), totaling $207,295, illustrates the application of nonstatistical sampling. An 
auditor will do tests of details of balances to determine whether the balance of $207,295 
is materially misstated. Typically, tolerable misstatement defines a material misstatement. 


As stated in Chapter 15, “Audit sampling applies whenever the auditor plans to reach Decide Whether 
conclusions about a population based on a sample.” Although auditors commonly Audit Sampling Applies 
sample in many accounts, in some situations sampling does not apply. For the 

population in Table 17-1, the auditor may decide to audit only items over $5,000 and 

ignore all others because the total of the smaller items is immaterial. Similarly, if the 

auditor is verifying fixed asset additions and finds many small additions and one 

extremely large purchase of a building, the auditor may decide to ignore the small 

items entirely. In either case, the auditor has not sampled. 
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Define a Misstatement 


Define the Population 











> 
bea Illustrative Accounts Receivable Population 
Population Item Recorded Amount 
Population Item Recorded Amount (cont.) (cont.) 

] $ 1,410 21 $ 4,865 

yD. 9,130 22. 770 

3 660 25 2,305 

4 555) 24 2,665 

5 S725) 25 1,000 

6 8,210 26 6,225 

7/ 580 27 3,675 

8 44,110 28 6,250 

9 825 29 1,890 

10 SS 30 27,705 

11 22710 31 935 

12 50 32 5,595 

13 5,785 35 930 

14 940 34 4,045 

15 1,820 35 9,480 

16 3,380 36 360 

17 530 2i7/ 1,145 

18 955 38 6,400 

19 4,490 39 100 

20 17,140 40 8,435 

$ 207,295 

X f 














Becauge audit sampl4 te f details of balances measures monetary misstate- 
ments, RAG AP DF wehhance fem is misstated. In auditing accounts 
receivable, any client misstatement in a customer balance included in the auditor’s 
sample is a misstatement. 


In tests of details of balances, the population is defined as the items making up the 
recorded dollar population. The recorded population of accounts receivable in Table 
17-1 consists of 40 accounts totaling $207,295. Most accounting populations that 
auditors sample will, of course, include far more items totaling a much larger dollar 
amount. The auditor will evaluate whether the recorded population is overstated or 
understated. 


Stratified Sampling For many populations, auditors separate the population into 
two or more subpopulations before applying audit sampling. This is called stratified 
sampling, where each subpopulation is a called a stratum. Stratification enables the 
auditor to emphasize certain population items and deemphasize others. In most audit 
sampling situations, including confirming accounts receivable, auditors want to 
emphasize the larger recorded dollar values, so they define each stratum on the basis of 
the size of recorded dollar values. 

By examining the population in Table 17-1, you can see that there are different 
ways to stratify the population. Assume that the auditor decided to stratify as follows: 


No. in Dollars in 
Stratum Stratum Criteria Population Population 
1 >$15,000 3 $ 88,955 
2 $5,000-$15,000 10 71,235 
3 <$5,000 27 47,105 
40 $207,295 
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There are many alternative ways to stratify this population. One example is to have 
four strata (make stratum 3 items between $2,000 and $5,000, and add a fourth 
stratum for items less than $2,000). 


For nonstatistical audit sampling in tests of details of balances, the sampling unit is 
almost always the items making up the account balance. For example, for the accounts 
receivable in Table 17-1 the sampling unit will be the customer number. Auditors can 
use the items making up the recorded population as the sampling unit for testing all 
audit objectives except completeness. If auditors are concerned about the completeness 
objective they should select the sample from a different source, such as customers or 
vendors with zero balances. Accordingly, the sampling unit for a completeness test will 
be customers with zero balances. 


Auditors use tolerable misstatement, as discussed in Chapter 9, for determining sample 
size and evaluating results in nonstatistical sampling. The auditor starts with a 
preliminary judgment about materiality and uses that total in deciding tolerable 
misstatement for each account. The required sample size increases as the auditor’s 
tolerable misstatement decreases for the account balance or class of transactions. 


For all statistical and nonstatistical sampling applications, auditors risk making 
incorrect quantitative conclusions about the population. This is always true unless the 
auditor tests 100 percent of the population. 

Acceptable risk of incorrect acceptance (ARIA) is the amount of risk an auditor is 
willing to take of accepting a balance as correct when the true misstatement in the 
balance exceeds tolerable misstatement. ARIA measures the auditor’s desired assurance 
for an account balance. For greater assurance in auditing a balance, auditors will set 
ARIA lower. (Note that ARIA is the equivalent term to ARACR (acceptable risk of 
assessing control risk too low) for tests of controls and substantive tests of trans- 
actions.) Like for ARACR, ARIA “Apago" PDF Enhrayice!?”). or 
qualitatively (such as low, medium or Migh): 

There is an inverse relationship between ARIA and required sample size. If, for 
example, an auditor decides to reduce ARIA from 10 percent to 5 percent, the required 
sample size will increase. Stated differently, if the auditor is less willing to take risk, a 
larger sample size is needed. 

An important factor affecting the auditor’s decision about ARIA is assessed control 
risk in the audit risk model. When internal controls are effective, control risk can be 
reduced, permitting the auditor to increase ARIA. This, in turn, reduces the sample size 
required for the test of details of the related account balance. 

You need to understand how ARACR and ARIA interact to affect evidence 
accumulation. You already know from earlier chapters that tests of details of balances 
for monetary misstatements can be reduced if auditors find internal controls effective 
after assessing control risk and performing tests of controls. The effects of ARACR and 
ARIA are consistent with that conclusion. If the auditor concludes that internal 
controls are likely to be effective, preliminary control risk can be reduced. A lower 
control risk requires a lower ARACR in testing the controls, which requires a larger 
sample size. If controls are found to be effective, control risk can remain low, which 
permits the auditor to increase ARIA (through use of the audit risk model), thereby 
requiring a smaller sample size in the related substantive tests of details of balances. 
Figure 17-1 (p. 562) shows the effect of ARACR and ARIA on substantive testing when 
controls are not considered effective and when they are considered effective. 

In addition to control risk, ARIA is directly affected by acceptable audit risk and 
inversely affected by other substantive tests already performed (or planned) for the 
account balance. If auditors reduce acceptable audit risk, they should also reduce 
ARIA. If analytical procedures indicate that the account balance is likely to be fairly 
stated, ARIA can be increased. In other words, analytical procedures are evidence 


Define the 
Sampling Unit 


Specify Tolerable 
Misstatement 


Specify 
Acceptable Risk of 
Incorrect Acceptance 
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Estimate 
Misstatements 
in the Population 






























































y 
fee Effect of ARACR and ARIA on Substantive Testing 
Controls Not Controls 
Considered Effective Considered Effective 
Control risk = 100% Reduce 
control risk 
ARACR = 100% Reduce ARACR 
Perform no Perform 
tests of controls tests of controls 
Use low ARIA Use high ARIA" 
Perform extensive Perform limited 
substantive testing substantive testing 
*Assumes tests of controls results were satisfactory, which permits control risk 
to remain low. 
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supporting thé account balance, meaning auditors require smaller sample sizes in tests 
of details of balances to achieve the desired acceptable audit risk. The same conclusion 
is appropriate for the relationship among substantive tests of transactions, ARIA, and 
sample size for tests of details of balances. The various relationships affecting ARIA are 
summarized in Table 17-2. 


The auditor typically makes this estimate based on prior experience with the client and 
by assessing inherent risk, considering the results of tests of controls, substantive tests 
of transactions, and analytical procedures already performed. The planned sample size 
increases as the amount of misstatements expected in the population approaches 
tolerable misstatement. 





Relationship Among Factors Affecting ARIA, Effect on ARIA, and Required Sample Size for 
Audit Sampling 




















Analytical procedures 


Effect on 
Factor Affecting ARIA Example Effect on ARIA Sample Size 
Effectiveness of internal controls Internal controls are effective (reduced control risk). Increase Decrease 
(control risk) 
Substantive tests of transactions No exceptions were found in substantive tests of Increase Decrease 
transactions. 
Acceptable audit risk Likelihood of bankruptcy is low (increased Increase Decrease 
acceptable audit risk). 
Analytical procedures are performed with no Increase Decrease 





indications of likely misstatements. 
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When using nonstatistical sampling, auditors determine the initial sample size by 
considering the factors we’ve discussed so far. Table 17-3 summarizes these factors, 
including the effect of changing each factor on sample size. It shouldn't be surprising that 
considering all of these factors requires considerable judgment. To help auditors make 
the sample size decision, they often follow guidelines provided by their firm or some 
other source. Figure 17-2 (p. 564) presents a grid for combining these factors and a 
formula for computing sample size based on the AICPA Audit Sampling Auditing Guide. 

Assume an auditor applied this formula to the population in Table 17-1 (p. 560) and 
that tolerable misstatement is $15,000. The auditor decided to eliminate from the 
recorded population the three items making up the first stratum because they exceed 
tolerable misstatement. These three individually material accounts will be tested 
separately. The remaining population to be sampled is $118,340, which is the combined 
amount of stratum 2 and 3. Further, assume that the combined assessed inherent and 
control risk is moderate and that there is a moderate risk that substantive tests of 
transactions and substantive analytical procedures will not detect a material 
misstatement. Based on the grid, the required assurance factor is 1.6, and the computed 
sample size will be 13 [($118,340/$15,000) x 1.6 = 12.6]. 

When auditors use stratified sampling, they must allocate sample size among the 
strata, typically allocating a higher portion of the sample items to larger population 
items. In the example from Table 17-1, the auditor must test all items in stratum 1, 
which is not audit sampling. They decided to allocate the sample size of 13 to seven 
from stratum 2 and six from stratum 3. 


For nonstatistical sampling, auditing standards permit the auditor to use any of the 
selection methods discussed in Chapter 15. The auditor will make the decision after 
considering the advantages and disadvantages of each method, including cost con- 


siderations. 
les independently from each 
ROE B nhancex ; items 


For stratified sampling, the Apa selects sa 
from the 10 population items in stratum 2 and six of the 27 items in stratum 3. 


Determine the 
Initial Sample Size 


Select the Sample 





stratum. In our example from Tab Apagouk 
pore Factors Influencing Sample Sizes for Tests of Details of Balances 





Conditions Leading to 


Factor Smaller Sample Size 


Conditions Leading to 
Larger Sample Size 





Control risk (ARACR)—Affects acceptable risk Low control risk 


of incorrect acceptance 


High control risk 





Results of other substantive procedures related to the 
same assertion (including analytical procedures 
and other relevant substantive tests)—Affect 
acceptable risk of incorrect acceptance 


Satisfactory results in other related 
substantive procedures 


Unsatisfactory results in other 
related substantive procedures 





Acceptable audit risk—Affects acceptable risk of 
incorrect acceptance 


High acceptable audit risk 


Low acceptable audit risk 





Tolerable misstatement for a specific account Larger tolerable misstatement 


Smaller tolerable misstatement 





Inherent risk—Affects estimated misstatements Low inherent risk 


in the population 


Smaller misstatements or lower 
frequency 


Expected size and frequency of misstatements— 
Affect estimated misstatements in the population 


High inherent risk 


Larger misstatements or higher 
frequency 





Dollar amount of population Smaller account balance 


Larger account balance 





Number of items in the population Almost no effect on sample size 


unless population is very small 





Almost no effect on sample size 
unless population is very small 





7 
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Perform the 
Audit Procedures 


Generalize from 

the Sample to the 
Population and Decide 
the Acceptability of 
the Population 


564 





> 
Formula for Computing Nonstatistical Tests of Details of Balances 
Sample Size Based on AICPA Audit Sampling Formula 
Population’s recorded amount* 
Tolerable misstatement 








x Assurance factor = Sample size 


Select the appropriate assurance factor as follows: 


Risk That Other Substantive Procedures 
Will Fail to Detect a Material Misstatement 


Slightly Below 


Assessed 
Inherent and 





Control Risk Maximum Maximum Moderate Low 
Maximum 3.0 PLT DES 2.0 
Slightly below maximum QT, 2.4 2.0 1.6 
Moderate Des) Dal 1.6 122) 
Low 2.0 1.6 V2 1.0 


*Individual items exceeding tolerable misstatement are tested individually and subtracted from 
the population for this calculation. 











To perform the audit procedures, the auditor applies the appropriate audit procedures 
to each item in the sample to determine whether it contains a misstatement. In the 
confirmation of accounts receivable, auditors send the sample of positive confirma- 
tions in the manner described in Chapter 16 and determine the amount of misstatement 
in each account confirmed. For nonresponses, they use alternative procedures to deter- 
mine the misstatements. 

Referring to our example from Table 17-1 on page 560 again, assume an auditor 
sends first and second requests for confirmations and performs alternative procedures. 
Also assume the auditor reaches the following conclusions about the sample after 
reconfipago Pp Enhancer 


Dollars Audited 








Stratum Sample Size Recorded Value Audited Value Client Misstatement 
1 5 $ 88,955 $ 91,695 $ (2,740) 
2 7 43,995 43,024 971 
3 6 13,105 10,947 2,158 
Total 16 $ 146,055 $ 145,666 $ 389 





The auditor must generalize from the sample to the population by (1) projecting mis- 
statements from the sample results to the population and (2) considering sampling 
error and sampling risk (ARIA). In our example, will the auditor conclude that 
accounts receivable is overstated by $389? No, the auditor is interested in the population 
results, not those of the sample. It is therefore necessary to project from the sample to 
the population to estimate the population misstatement. 

The first step is to calculate a point estimate. The point estimate can be calculated 
in different ways, but a common approach is to assume that misstatements in the 
unaudited population are proportional to the misstatements in the sample. That 
calculation must be done for each stratum and then totaled, rather than combining the 
total misstatements in the sample. In our example, the point estimate of the misstate- 
ment is calculated by using a weighted-average method, as shown below. 








Client Misstatement Recorded 
+ Recorded Value Book Value Point Estimate 
Stratum of the Sample x for the Stratum = of Misstatement 
1 $ (2,740 )/$88,955 $ 88,955 $ (2,740) 
2 $ 971 /$43,995 71,235 1,572 
3 $ 2,158 /$13,105 47,105 7,157 
Total $ 6,589 
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The point estimate of the misstatement in the population is $6,589, indicating an 
overstatement. The point estimate, by itself, is not an adequate measure of the popu- 
lation misstatement, however, because of sampling error. In other words, because the 
estimate is based on a sample, it will be close to the true population misstatement, but 
it is unlikely to be exactly the same. Whenever the point estimate ($6,589 in the 
example) is less than tolerable misstatement ($15,000 in the example), the auditor 
must consider the possibility that the true population misstatement is greater than the 
amount of misstatement that is tolerable in the circumstances. This must be done for 
both statistical and nonstatistical samples. 

An auditor using nonstatistical sampling cannot formally measure sampling error 
and therefore must subjectively consider the possibility that the true population 
misstatement exceeds a tolerable amount. Auditors do this by considering: 


1. The difference between the point estimate and tolerable misstatement (this is 
called calculated sampling error) 

The extent to which items in the population have been audited 100 percent 
Whether misstatements tend to be offsetting or in only one direction 

The amounts of individual misstatements 

The sample size 


Wis WS 


In our example, suppose that tolerable misstatement is $40,000. In that case, the 
auditor may conclude it is unlikely, given the point estimate of $6,589, that the true 
population misstatement exceeds the tolerable amount (calculated sampling error is 
$33,411). 

Suppose that tolerable misstatement is $15,000 (as it was in the example), only 
$8,411 greater than the point estimate. In that case, the auditor will consider other 
factors. If the larger items in the population were audited 100 percent (as was done 
here), any unidentified misstatements will be restricted to smaller items. If the 
misstatements tend to be offsettinggand_ar go by) aHever the auditor may 
conclude that the true population ARAY ag: if ae ANGE Rierable 
amount. Also, the larger the sample size, the more confident the auditor can be that the 
point estimate is close to the true population value. In this example, when sample size 
is considered large, auditors will be more willing to accept that the true population 
misstatement is less than tolerable misstatement. However, if one or more of these 
other conditions differs, auditors may judge the chance of a misstatement in excess of 
the tolerable amount to be high and the recorded population unacceptable. 

Even if the amount of likely misstatement is not considered material, the auditor 
must wait to make a final evaluation until the entire audit is completed. The estimated 
total misstatement and estimated sampling error in accounts receivable must be 
combined with estimates of misstatements in all other parts of the audit to evaluate the 
effect of all misstatements on the financial statements as a whole. 


It is essential for auditors to evaluate the nature and cause of each misstatement found 
in tests of details of balances. For example, suppose that when the auditor confirmed 
accounts receivable, all misstatements resulted from the client’s failure to record 
returned goods. The auditor will determine why that type of misstatement occurred so 
often, the implications of the misstatements on other audit areas, the potential impact 
on the financial statements, and its effect on company operations. The same approach 
is followed for all misstatements. 

The auditor must do misstatement analysis to decide whether any modification of 
the audit risk model is needed. In the preceding paragraph, if the auditor concluded 
that the failure to record the returns resulted from a breakdown of internal controls, it 
might be necessary to reassess control risk. That in turn will probably cause the auditor 
to reduce ARIA, which will increase planned sample size. As we discussed in Chapter 9, 
revisions of the audit risk model must be done with extreme care because the model is 
intended primarily for planning, not evaluating results. 


Analyze the 
Misstatements 
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Action When a 
Population Is Rejected 


When the auditor concludes that the misstatement in a population may be larger than 
tolerable misstatement after considering sampling error, the population is not 
considered acceptable. At that point, an auditor has several possible courses of action. 


Take No Action Until Tests of Other Audit Areas Are Completed Ultimately, 
the auditor must evaluate whether the financial statements taken as a whole are 
materially misstated. If offsetting misstatements are found in other parts of the audit, 
such as in inventory, the auditor may conclude that the estimated misstatements in 
accounts receivable are acceptable. Of course, before the audit is finalized, the auditor 
must evaluate whether a misstatement in one account may make the financial 
statements misleading even if there are offsetting misstatements. 


Perform Expanded Audit Tests in Specific Areas If an analysis of the misstate- 
ments indicates that most of the misstatements are of a specific type, it may be desirable 
to restrict the additional audit effort to the problem area. For example, if an analysis of 
the misstatements in confirmations indicates that most of the misstatements result from 
failure to record sales returns, the auditor can make an extended search of returned 
goods to make sure that they have been recorded. However, care must be taken to evaluate 
the cause of all misstatements in the sample before a conclusion is reached about the 
proper emphasis in the expanded tests. Problems may exist in more than one area. 
When auditors analyze a problem area and correct it by proposing an adjustment 
to the client’s records, the sample items that led to isolating the problem area can then 
be shown as “correct.” The point estimate can now be recalculated without the 
misstatements that have been “corrected.” (This is only true when the error can be 
isolated to a specific area. Errors must generally be projected to the population being 
sampled, even if the client adjusts for the error.) With the new facts in hand, the auditor 
will also have to reconsider sampling error and the acceptability of the population. 
Rp e the Samp > bie Wea auditor increases the sample size, sampling error 
is red Apago.: sta: ANRSP#anded sample, their dollar amounts, 
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Anicom was a national distributor of wire and 
cable products. Anicom officers and employees 
engaged in improper earnings management 
techniques that inflated Anicom’s revenues by 
over $38 million and net income by over $20 
million from the first quarter of 1998 through the 
first quarter of 2000, including extensive improper 
revenue recognition. Anicom recognized over 66 
fictitious sales transactions to at least 38 different 
customers. Most of the fictitious sales transactions 
were created just prior to quarter-end, when it 
was clear that Anicom would not meet its revenue 
goals. These end-of-the-quarter sales transactions 
were either entirely fictitious or potential orders 
disguised as sales. 

The partner on the engagement assessed 
Anicom as high-risk because of cash-flow 
problems, potential violations of debt covenants, 
and allegations of improper billing practices. 
Despite being aware of these red flags, the 
partner did not design audit procedures to test 
Anicom’s accounts receivable more extensively 
than originally planned. 

The audit firm’s testing of Anicom’s accounts 
receivable included confirming the existence and 
accuracy of 20 customer balances totaling 


$14,354,505 out of $98,182,737 in accounts 
receivable. The audit team could not confirm 
$1,152,965 of the $14,354,505 tested, resulting in 
an error rate of 8%. Projecting this error rate over 
the entire accounts receivable population indicates 
a potential misstatement of $7,854,619, which 
was material to Anicom’s financial statements. 
However, the audit partner did not expand the 
confirmation procedures or subject the potentially 
misstated accounts receivable balances to further 
testing. Further, the audit firm performed alterna- 
tive procedures for 17 of the 20 balances for which 
confirmation responses were not received. The 
auditors tested only $2,746,487, or 28% of the 
$9,817,038 in subsequent cash payments pur- 
portedly made by customers toward their balances. 

Anicom was delisted by Nasdaq in 2000 and 
filed for bankruptcy in January 2001. The engage- 
ment audit partner was charged with improper 
professional conduct and violations of the 
Securities Exchange Act of 1934 and prohibited 
from practicing before the SEC. 


Source: Adapted from Securities and Exchange 
Commission Accounting and Auditing Enforcement 
Release No. 20678, August 11, 2004 (www.sec.gov). 
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and their direction are similar to those in the original sample. Therefore, increasing the 
sample size may satisfy the auditor’s tolerable misstatement requirements. 

Increasing the sample size enough to satisfy the auditor’s tolerable misstatement 
standards is often costly, especially when the difference between tolerable misstatement 
and projected misstatement is small. Moreover, an increased sample size does not 
guarantee a satisfactory result. If the number, amount, and direction of the misstate- 
ments in the extended sample are proportionately greater or more variable than in the 
original sample, the results are still likely to be unacceptable. 

For tests such as accounts receivable confirmation and inventory observation, it is 
often difficult to increase the sample size because of the practical problem of “reopening” 
those procedures once the initial work is done. By the time the auditor discovers that the 
sample was not large enough, several weeks have usually passed. 

Despite these difficulties, sometimes the auditor must increase the sample size after 
the original testing is completed. It is much more common to increase sample size in 
audit areas other than confirmations and inventory observation, but it is occasionally 
necessary to do so even for these two areas. When stratified sampling is used, increased 
samples usually focus on the strata containing larger amounts, unless misstatements 
appear to be concentrated in some other strata. 


Adjust the Account Balance When the auditor concludes that an account balance is 
materially misstated, the client may be willing to adjust the book value based on the 
sample results. In the preceding example, assume the client is willing to reduce book 
value by the amount of the point estimate ($6,589) to adjust for the estimate of the mis- 
statement. The auditor’s estimate of the misstatement is now zero, but it is still 
necessary to consider sampling error. Again, assuming a tolerable misstatement of 
$15,000, the auditor must now assess whether sampling error exceeds $15,000, not the 
$8,411 originally considered. If the auditor believes sampling error is $15,000 or less, 
accounts receivable is acceptable after the adjustment. If the auditor believes it is more 


than $15,000, adjusting the account AyAaG@ot PDE..abnhancer 


Request the Client to Correct the Population In some cases, the client’s records are 
so inadequate that a correction of the entire population is required before the audit can 
be completed. For example, in accounts receivable, the client may be asked to correct the 
accounts receivable records and prepare the accounts receivable listing again if the 
auditor concludes that it has significant misstatements. When the client changes the 
valuation of some items in the population, the results must be audited again. 


Refuse to Give an Unqualified Opinion If the auditor believes that the recorded 
amount in an account is not fairly stated, it is necessary to follow at least one of the 
preceding alternatives or to qualify the audit report in an appropriate manner. If the auditor 
believes that there is a reasonable chance that the financial statements are materially mis- 
stated, it would be a serious breach of auditing standards to issue an unqualified opinion. For 
purposes of reporting on internal control, the material misstatement should be considered 
a potential indicator of a material weakness in internal control over financial reporting. 


MONETARY UNIT SAMPLING 





Now that we have discussed nonstatistical sampling, we will move on to statistical OBJECTIVE 17-3 
sampling, starting with monetary unit sampling, which is a statistical sampling Roeninone ayant 
methodology developed specifically for use by auditors. Monetary unit sampling sampling. 


(MUS) is the most commonly used statistical method of sampling for tests of details of 
balances because it has the statistical simplicity of attributes sampling yet provides a 
statistical result expressed in dollars (or another appropriate currency). MUS is also 
called dollar unit sampling, cumulative monetary amount sampling, and sampling 
with probability proportional to size. 
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Differences 
Between MUS 
and Nonstatistical 
Sampling 


MUS is similar to using nonstatistical sampling. All 14 of the steps must also be 
performed for MUS, although some are done differently. Understanding those 
differences is the key to understanding MUS. Let’s examine these differences in detail. 


The Definition of the Sampling Unit Is an Individual Dollar A critical feature 
of MUS is the definition of the sampling unit as an individual dollar in an account 
balance. The name of the statistical method, monetary unit sampling, results from this 
distinctive feature. For example, in the population in Table 17-1 (p. 560), the sampling 
unit is 1 dollar and the population size is 207,295 dollars, not the 40 physical units 
discussed earlier. (A physical unit is an accounts receivable customer balance, an 
inventory item in an inventory listing, and other such identifiable units in a listing.) 

By focusing on the individual dollar as the sampling unit, MUS automatically 
emphasizes physical units with larger recorded balances. Because the sample is selected 
on the basis of individual dollars, an account with a large balance has a greater chance 
of being included than an account with a small balance. For example, in accounts 
receivable confirmation, an account with a $5,000 balance has a 10 times greater 
probability of selection than one with a $500 balance, as it contains 10 times as many 
dollar units. As a result, stratified sampling is unnecessary with MUS. Stratification 
occurs automatically. 


The Population Size Is the Recorded Dollar Population For example, the popu- 
lation of accounts receivable in Table 17-1 consists of 207,295 dollars, which is the 
population size, not the 40 accounts receivable balances. This is the recorded dollar 
amount of accounts receivable. 

Because of the method of sample selection in MUS, which is discussed later, it is 
not possible to evaluate the likelihood of unrecorded items in the population. Assume, 
for example, that MUS is used to evaluate whether inventory is fairly stated. MUS 
cannot be used to evaluate whether certain inventory items exist but have not been 


count com S Opjectpye.is i t in the audit test, and it usually is, 
that ‘ARags. PDE Enna eee Ts tests. 

Preliminary Judgment of Materiality Is Used for Each Account Instead of 
Tolerable Misstatement Another unique aspect of MUS is the use of the pre- 
liminary judgment about materiality, as discussed in Chapter 9, to directly determine 
the tolerable misstatement amount for the audit of each account. Other sampling 
techniques require the auditor to determine tolerable misstatement for each account by 
allocating the preliminary judgment about materiality. This is not required when MUS 
is used. For example, assume that an auditor decides that the preliminary judgment 
about materiality should be $60,000 for the financial statements as a whole. That 
materiality amount of $60,000 will be used as tolerable misstatement in all applications 
of MUS—inventory, accounts receivable, accounts payable, and so forth. 


Sample Size Is Determined Using a Statistical Formula This process is examined 
in detail after we have discussed the 14 sampling steps for MUS. 


A Formal Decision Rule Is Used for Deciding the Acceptability of the Popula- 
tion The decision rule used for MUS is similar to that used for nonstatistical sampling, 
but it is sufficiently different to merit discussion. The decision rule is illustrated on 
page 576 after the calculation of the misstatement bounds is shown. 


Sample Selection Is Done Using PPS Monetary unit samples are samples selected 
with probability proportional to size sample selection (PPS). PPS samples can be 
obtained by using computer software, random number tables, or systematic sampling 
techniques. Table 17-4 provides an illustration of an accounts receivable population, 
including cumulative totals that will be used to demonstrate selecting a sample. 

Assume that the auditor wants to select a PPS sample of four accounts from the 
population in Table 17-4. Because the sampling unit is defined as an individual dollar, 
the population size is 7,376, and four random numbers are needed. Assume that the 
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auditor uses a computer program to generate the following random numbers from 
between 1 and 7,376: 6,586, 1,756, 850, and 6,499. 

Auditors have no way to audit these dollars directly so they must associate the 
individual dollars with physical units, in this case customer balances. The population 
physical unit items that contain these random dollars are determined by reference to the 
cumulative total column. Looking again at Table 17-4, they are items 11 (containing 
dollars 6,577 through 6,980), 4 (dollars 1,699 through 2,271), 2 (dollars 358 through 
1,638), and 10 (dollars 5,751 through 6,576). These four accounts will be audited 
because the cumulative total associated with these accounts includes the random dollars 
selected, and the result for each physical unit will be used to make statistical inferences. 

The statistical methods used to evaluate monetary unit samples permit the 
inclusion of a physical unit in the sample more than once. In the previous example, if 
the random numbers had been 6,586, 1,756, 850, and 6,599, the sample items would 
have been 11, 4, 2, and 11. Item 11 would be audited once but treated as two sample 
items statistically, and the sample total would be four items because four monetary units 
were involved. If audit tests determine that item 11 included an error, it would count as 
two errors in the statistical evaluation. 

One problem using PPS selection is that population items with a zero recorded 
balance have no chance of being selected with PPS sample selection, even though they 
may be misstated. Similarly, small balances that are significantly understated have little 
chance of being included in the sample. This problem can be overcome by doing specific 
audit tests for zero- and small-balance items, assuming that they are of concern. 

Another problem with PPS is its inability to include negative balances, such as credit 
balances in accounts receivable, in the PPS (monetary unit) sample. It is possible to 
ignore negative balances for PPS selection and test those amounts by some other means. 
An alternative is to treat them as positive balances and add them to the total number of 
monetary units being tested. However, this complicates the evaluation process. 


The Auditor Generalizes fromApag@le BDE pRnhancer MUS 
Techniques Regardless of the sampling method selected, the auditor must generalize 
from the sample to the population by (1) projecting misstatements from the sample 
results to the population and (2) determining the related sampling error. There are 
four aspects in doing so using MUS: 
1. Attributes sampling tables are used to calculate the results. Tables, such as the 
one on page 505, can be used, replacing ARACR with ARIA. 
2. The attributes results must be converted to dollars. MUS estimates the dollar 
misstatement in the population, not the percent of items in the population that 








=a 
TABLE 17-4 Accounts Receivable Population 
Population Item Cumulative Total 
(Physical Unit) Recorded Amount (Dollar Unit) 
] $ 357 $ 357 
2 1,281 1,638 
3) 60 1,698 
4 By 2,27) 
5 691 2,962 
6 143 3,105 
Vf 1,425 4,530 
8 278 4,808 
9 942 5,750 
10 826 6,576 
il 404 6,980 
12 396 7,376 
XS <4 
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Generalizing from 
the Sample to the 
Population When 

No Misstatements 
Are Found Using MUS 


are misstated. Therefore, auditors can estimate the rate of population dollars 
that contain a misstatement as a way of estimating the total dollar misstatement. 

3. The auditor must make an assumption about the percentage of misstatement 
for each population item that is misstated. This assumption enables the auditor 
to use the attributes sampling tables to estimate dollar misstatements. 

4. The statistical results when MUS is used are called misstatement bounds. 
These misstatement bounds are estimates of the likely maximum overstate- 
ment (upper misstatement bound) and likely maximum understatement 
(lower misstatement bound) at a given ARIA. Auditors calculate both an upper 
misstatement bound and a lower misstatement bound. 


This final step, generalizing from the sample to the population, is essential. General- 
ization is different when the auditor finds no misstatements in the sample compared to when 
there are misstatements. We will examine generalizing under these two situations next. 


Suppose that the auditor is confirming a population of accounts receivable for monetary 
correctness. The population totals $1,200,000, and a sample of 100 confirmations is 
obtained. Upon audit, no misstatements are uncovered in the sample. The auditor wants 
to determine the maximum amount of overstatement and understatement amounts that 
could exist in the population even when the sample contains no misstatements. These are 
called the upper misstatement bound and the lower misstatement bound, respectively. 
Assuming an ARIA of 5 percent, and using the attributes sampling table on page 505, 
both the upper and lower bounds are determined by locating the intersection of the 
sample size (100) and the actual number of misstatements (0) in the same manner as for 
attributes sampling. The CUER of 3 percent on the table represents both the upper and 
lower bound, expressed as a percent. Because the sample misstatement rate was 0 percent, 
the 3 percent represents an estimate of sampling error. 

Based on the sample results and the misstatement bounds from the table, the auditor 
can cA Pa Gia a Ent Bn haNCel Go more than 3 percent of the dollar 
units in the population are misstated. To convert this percent into dollars, the auditor 
must make an assumption about the average percent of misstatement for population 
dollars that contain a misstatement. This assumption significantly affects the misstate- 
ment bounds. To illustrate this, three sets of example assumptions are examined: 


Assumption 1 Overstatement amounts equal 100 percent; understatement amounts 
equal 100 percent; misstatement bounds at a 5 percent ARIA are: 


Upper misstatement bound = $1,200,000 x 3% x 100% = $36,000 
Lower misstatement bound = $1,200,000 x 3% x 100% = $36,000 


The assumption is that, on average, those population items that are misstated are 
misstated by the full dollar amount of the recorded value. Because the misstatement 
bound is 3 percent, the dollar value of the misstatement is not likely to exceed $36,000 
(3 percent of the total recorded dollar units in the population). If all the amounts are 
overstated, there is an overstatement of $36,000. If they are all understated, there is an 
understatement of $36,000. 

The assumption of 100 percent misstatements is extremely conservative, especially 
for overstatements. Assume that the actual population exception rate is 3 percent. The 
following two conditions both have to exist before the $36,000 correctly reflects the 
true overstatement amount: 


1. Allamounts have to be overstatements. Offsetting amounts would have reduced 
the amount of the overstatement. 

2. All population items misstated have to be 100 percent misstated. There cannot, 
for example, be a misstatement such as a receivable balance of $226 recorded as 
$262. This would be only a 13.7 percent misstatement (262 — 226 = 36 
overstatement; 36/262 = 13.7%). 
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In the calculation of the overstatement and understatement misstatement bounds 
of $36,000, the auditor did not calculate a point estimate and sampling error (called 
precision amount in MUS) in the manner discussed earlier in the chapter. This is 
because the tables used include both a point estimate and a precision amount to derive 
the upper exception rate. Even though the point estimate and precision amount are not 
calculated for MUS, they are implicit in the determination of misstatement bounds 
and can be determined from the tables. In this illustration, the point estimate is zero 
and the statistical precision is $36,000. 


Assumption 2 Overstatement amounts equal 10 percent; understatement amounts 
equal 10 percent; misstatement bounds at a 5 percent ARIA are: 

Upper misstatement bound = $1,200,000 x 3% x 10% = $3,600 

Lower misstatement bound = $1,200,000 x 3% x 10% = $3,600 


The assumption is that, on average, those items that are misstated are misstated by 
no more than 10 percent. If all items were misstated in one direction, the misstatement 
bounds will be + $3,600 and — $3,600. The change in assumption from 100 percent to 
10 percent misstatements significantly affects the misstatement bounds. The effect is in 
direct proportion to the magnitude of the change. 


Assumption 3 Overstatement amounts equal 20 percent; understatement amounts 
equal 200 percent; misstatement bounds at a 5 percent ARIA are: 

Upper misstatement bound = $1,200,000 x 3% x 20% = $7,200 

Lower misstatement bound = $1,200,000 x 3% x 200% = $72,000 


The justification for a larger percent for understatements is the potential for a 
larger misstatement in percentage terms. For example, an accounts receivable recorded 
at $20 that should have been recorded at $200 is understated by 900 percent [(200 — 
20)/20], whereas one that is recorded at $200 that should have been recorded at $20 is 
overstated by 90 percent [(200 — 20)2200]. 

Items ee large inderst AAG uP DE naenhancen value 
as a result of those misstatements. As a consequence, because of the mechanics of 
MUS, few of them will have a chance of being selected in the sample. For this reason, 
some auditors select an additional sample of small items to supplement the monetary 
unit sample when understatement amounts are an audit concern. 


Appropriate Percent of Misstatement Assumption The appropriate assumption 
for the overall percent of misstatement in those population items containing a 
misstatement is an auditor’s decision. The auditor must set these percentages based on 
professional judgment in the circumstances. In the absence of convincing information 
to the contrary, most auditors believe that it is desirable to assume a 100 percent 
amount for both overstatements and understatements unless there are misstatements 
in the sample results. This approach is considered highly conservative, but it is easier to 
justify than any other assumption. In fact, the reason upper and lower limits are called 
misstatement bounds when MUS is used, rather than maximum likely misstatement or 
the commonly used statistical term confidence limit, is because of widespread use of 
that conservative assumption. Unless stated otherwise, the 100 percent misstatement 
assumption is used in this chapter and problem materials. 


So far, we have assumed the samples contain no misstatements. What happens, however, 
if misstatements are found? We will use the example from the preceding section but 
assume there are five misstatements instead of none. The misstatements are shown in 
Table 17-5 (p. 572). 

The four aspects of generalizing from the sample to the population we discussed 
earlier still apply, but their use is modified as follows: 


1. Overstatement and understatement amounts are dealt with separately and then 
combined. First, initial upper and lower misstatement bounds are calculated 


Generalizing When 
Misstatements 
Are Found 
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bens Misstatements Found ) 
Recorded Audited Misstatement 
Accounts Accounts = 
Customer Receivable Receivable Recorded 
No. Amount Amount Misstatement Amount 
2073 $ 6,200 $ 6,100 $ 100 .016 
5111 12,910 12,000 910 07 
5206 4,322 4,450 (128) (.03) 
7642 23,000 22,995 5 0002 
9816 8,947 2,947 $6,000 .671 
— SY 
separately for overstatement and understatement amounts. Next, a point esti- 
mate of overstatements and understatements is calculated. The point estimate of 
understatements is used to reduce the initial upper misstatement bound, and the 
point estimate of overstatements is used to reduce the initial lower misstatement 
bound. The method and rationale for these calculations will be illustrated by 
using the four overstatement and one understatement amounts in Table 17-5. 
2. A different misstatement assumption is made for each misstatement, including zero 


misstatements. When there were no misstatements in the sample, an assumption 
was required as to the average percent of misstatement for the population items 
misstated. The misstatement bounds were calculated showing several different 
assumptions. Now that misstatements have been found, auditors can use 
available sample information in determining the misstatement bounds. The 
misstatement assumption is still required, but it can be modified based on this 
actual misstatement data. 


Apago: oRDEnceBNAANCeD percent assumption for all misstate- 


ments is not only exceptionally conservative, it is inconsistent with the sample 
results. A common assumption in practice, and the one followed in this book, 
is that the actual sample misstatements are representative of the population 
misstatements. This assumption requires the auditor to calculate the percent 
that each sample item is misstated (misstatement + recorded amount) and apply 
that percent to the population. The calculation of the percent for each mis- 
statement is shown in the last column in Table 17-5. As we will explain shortly, 
a misstatement assumption is still needed for the zero misstatement portion of 
the computed results. For this example, a 100 percent misstatement assumption 
is used for the zero misstatement portion for both overstatement and under- 
statement misstatement bounds. 

The auditor must deal with layers of the computed upper exception rate 
(CUER) from the attributes sampling table. Auditors do this because different 








—_ 
TABLE 17-6 Percent Misstatement Bounds 
Increase in Precision 
Number of Upper Precision Limit Resulting from 
Misstatements Limit from Table Each Misstatement (Layers) 
0 03 .03 
] .047 .017 
2 .062 015 
5 .076 .014 
4 .090 014 
== =4 
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TABLE 17-7 Illustration of Calculating Initial Upper and Lower Misstatement 
Bounds 
Unit Misstatement 
Number of Upper Precision Recorded Misstatement Bound Portion 
Misstatements Limit Portion* Value Assumption (Columns 2x3x4) 
Overstatements 
0 .030 $1,200,000 1.0 $36,000 
] 017 1,200,000 .671 13,688 
2. 015 1,200,000 07 1,260 
BS .014 1,200,000 .016 269 
4 .014 1,200,000 .0002 3 
Upper precision limit .090 
Initial misstatement bound $51,220 
Understatements 
0 .030 $1,200,000 1.0 $36,000 
] 017 1,200,000 03 612 
Lower precision limit .047 
Initial misstatement bound $36,612 
X J 





*ARIA of 5%. Sample size of 100. 


misstatement assumptions exist for each misstatement. Layers are calculated 
by first determining the CUER from the table for each misstatement and then 
calculating each layer. Table 17-6 shows the layers in the attributes sampling 
table for the example at hand, using an ARIA of 5% and the attributes sampling 
table on page 505. (The layers were determined by reading across the table for 
a sample size of 100, from ‘Apaga 4B. 4 RDF .En, ncer 

4. Misstatement assumptions must be associated with each layer. The most common 
method of associating misstatement assumptions with layers is to conservatively 
associate the largest dollar misstatement percents with the largest layers. Table 
17-7 shows this association. For example, the largest misstatement was .671 for 
customer 9816. That misstatement is associated with the layer factor of .017, the 
largest layer where misstatements were found. The portion of the upper 
precision limit related to the zero misstatement layer has a misstatement 
assumption of 100 percent, which is still conservative. Table 17-7 shows the 
calculation of misstatement bounds before consideration of offsetting amounts. 
The upper misstatement bound was calculated as if there were no understate- 
ment amounts, and the lower misstatement bound was calculated as if there 
were no overstatement amounts. 


Most MUS users believe that this approach is overly conservative when there are 
offsetting amounts. If an understatement amount is found, it is logical and reasonable 
that the bound for overstatement amounts should be lower than it would be had no 
understatement amounts been found, and vice versa. The adjustment of bounds for 
offsetting amounts is made as follows: 


1. A point estimate of misstatements is made for both overstatement and under- 
statement amounts. 
2. Each bound is reduced by the opposite point estimate. 


The point estimate for overstatements is calculated by multiplying the average 
overstatement amount in the dollar units audited times the recorded value. The same 
approach is used for calculating the point estimate for understatements. Our example 
shows one understatement amount of 3 cents per dollar unit in a sample of 100. The 
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Acceptability of the 
Population Using MUS 





























> 
TABLE 17-8 Illustration of Calculating Adjusted Misstatement Bounds 
Unit 
Number of Misstatement Sample Recorded Point 
Misstatements Assumption Size Population Estimate Bounds 
Initial overstatement bound $51,220 
Understatement amount 
] .03 100 $1,200,000 $ 360 (360) 
Adjusted overstatement bound $50,860 
Initial understatement bound $36,612 
Overstatement amounts 
] .671 
2 .07 
5 .016 
4 .0002 
Sum 52, 100 $1,200,000 $9,086 (9,086) 
Adjusted understatement bound $27,526 
_—— 











understatement point estimate is therefore $360 (.03/100 x $1,200,000). Similarly, 
the overstatement point estimate is $9,086 [(.671 + .07 + .016 + .0002)/100 x 
$1,200,000]. 
Table 17-8 shows the adjustment of the bounds that follow from this procedure: 
* The initial upper bound of $51,220 is reduced by the estimated most likely 
understatement amount of $360 to an adjusted bound of $50,860. 
. ApagooPDEndEnhancerd by the estimated most likely over- 
statement amount of $9,086 to an adjusted bound of $27,526. 


Given the methodology and assumptions followed, the auditor concludes that 
there is a5 percent risk that accounts receivable is overstated by more than $50,860, or 
understated by more than $27,526. 

It should be noted that if the misstatement assumptions are changed, the misstate- 
ment bounds will also change. The method used to adjust the bounds for offsetting 
amounts is only one of several in use. The method illustrated here is taken from Leslie, 
Teitlebaum, and Anderson. ! 

Table 17-9 shows the seven steps followed in the calculation of the adjusted mis- 
statement bounds for monetary unit sampling when there are offsetting amounts. The 
calculation of the adjusted upper misstatement bound for the four overstatement 
amounts in Table 17-5 on page 572 is used to illustrate. 


After the misstatement bounds are calculated, the auditor must decide whether the 
population is acceptable. To do that, a decision rule is needed. The decision rule for MUS 
is as follows: If both the lower misstatement bound (LMB) and upper misstatement 
bound (UMB) fall between the understatement and overstatement tolerable misstate- 
ment amounts, accept the conclusion that the book value is not misstated by a material 
amount. Otherwise, conclude that the book value is misstated by a material amount. 
This decision rule is illustrated in Figure 17-3 (p. 576). The auditor should 
conclude that both the LMB and UMB for situations 1 and 2 fall completely within 
both the understatement and overstatement tolerable misstatement limits. 
Therefore, the auditor concludes that the population is not misstated by a material 


1D. A. Leslie, A. D. Teitlebaum, and R. J. Anderson, Dollar Unit Sampling: A Practical Guide for Auditors, Toronto, 
Copp, Clark and Pitman, 1979. 
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Summary of Steps to Calculate Adjusted Misstatement Bounds 


Calculation for Overstatements in 
Tables 17-5 (p. 572), 17-7 (p. 573), and 17-8 





Steps to Calculate Adjusted Misstatement Bounds 





Table 17-5; 
four overstatements 


1. Determine misstatement for each sample item, 
keeping overstatements and understatements 
separate. 





Table 17-5; 
.016, .07, .0002, .671 


2. Calculate misstatement per dollar unit in each 
sample item (misstatement/recorded amount). 





3. Layer misstatements per dollar unit from highest 
to lowest, including the percent misstatement 
assumption for sample items not misstated. 


Table 17-7; 
1.0, .671, .07, .016, .0002 





4. Determine upper precision limit from attributes 
sampling table and calculate the percent mis- 
statement bound for each misstatement (layer). 


Table 17-7; 
Total of 9.0% for four misstatements; 
calculate five layers 





5. Calculate initial upper and lower misstatement 
bounds for each layer and total. 


Table 17-7; 
Total of $51,220 





6. Calculate point estimate for overstatements 
and understatements. 


Table 17-8; 
$360 for understatements 





7. Calculate adjusted upper and lower misstatement Table 17-8; 








bounds. $50,860 adjusted overstatement 





amount. For situations 3, 4, and 5, either LMB or UMB, or both, are outside tolerable 
misstatements. Therefore, the ppaApage vaPDFE! btinkadncer 

Assume that the auditor in our exampleé had set a tolerable misstatement amount 
for accounts receivable of $40,000 (overstatement or understatement). As previously 
shown, the auditor selected a sample of 100 items, found five misstatements, and 
calculated the lower bound to be $27,526 and the upper bound to be $50,860. 
Application of the decision rule leads the auditor to the conclusion that the population 
should not be accepted because the upper misstatement bound is more than tolerable 
misstatement of $40,000. 


Tolerable misstatement 
($40,000) 


Tolerable misstatement 
$40,000 











($27,526) 


$50,860 


LMB UMB 


When one or both of the misstatement bounds lie outside the tolerable misstatement 
limits and the population is not considered acceptable, the auditor has several options. 
These are the same as the ones already discussed for nonstatistical sampling on pages 
566-567. 


Our overview of MUS included the step for determining sample size, but we have 
waited until now to discuss the method for making that calculation, because you first 
needed to understand average misstatement assumptions. The method used to 
determine sample size for MUS is similar to that used for physical unit attributes 
sampling, using the attributes sampling tables. By this point, you have studied the five 
things necessary for calculating sample size using MUS. 


Action When a 
Population Is Rejected 


Determining Sample 
Size Using MUS 
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fee Illustration of the Auditor's Decision Rule for MUS ) 


— Tolerable Misstatement $0 Misstatements + Tolerable Misstatement 





ee #1 pole 


























LMB ~ UMB 
LMB UMB 
LMB , UMB 
ah 
LMB os UMB 
S 4 





Materiality The preliminary judgment about materiality is normally the basis for 
the tolerable misstatement amount used. If misstatements in non-MUS tests are 
expected, tolerable misstatement will be materiality less those amounts. Tolerable 
misstatement may be different for overstatements or understatements. For this 
example, tolerable misstatement for both overstatements and understatements is 
$100,000. 


Assumption of the Average Percent of Misstatement for Population Items 
That Contain a Misstatement Again, there may be a separate assumption for the 
upper aGQoRDE iE @RCRGudgment. It should be based on the 
auditor’s knowledge of the client and past experience, and if less than 100 percent is 
used, the assumption must be clearly defensible. For this example, 50 percent is used 
for overstatements and 100 percent for understatements. 


Acceptable Risk of Incorrect Acceptance ARIA is an auditor judgment and is 
often reached with the aid of the audit risk model. It is 5 percent for this example. 


Recorded Population Value The dollar value of the population is taken from the 
client’s records. For this example, it is $5 million. 


Estimate of the Population Exception Rate Normally, the estimate of the popula- 
tion exception rate for MUS is zero, as it is most appropriate to use MUS when no 
misstatements, or only a few, are expected. When misstatements are expected, the total 
dollar amount of expected population misstatements is estimated and then expressed 
as a percent of the population recorded value. In this example, a $20,000 overstatement 
amount is expected. This is equivalent to a .4 percent exception rate. To be conserva- 
tive, a .5 percent expected exception rate is used. 


These assumptions are summarized as follows: 





Tolerable misstatement (same for upper and lower) $ 100,000 
Average percent of misstatement assumption, overstatements 50% 
Average percent of misstatement assumption, understatements 100% 
ARIA 5% 
Accounts receivable—recorded value $5 million 
Estimated misstatement in accounts receivable $ 20,000 





The sample size is calculated as follows: 
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Upper Bound Lower Bound 





Tolerable misstatement 100,000 100,000 
Average percent of misstatement assumption + 50 + 1.00 
200,000 100,000 
Recorded population value + 5,000,000 + 5,000,000 
Tolerable exception rate 4% 2% 
Estimated population exception rate (EPER) 5% 0 
Sample size from the attributes table (p. 504) 
5% ARACR, 4% and 2% TER, and .5% and 0% EPER 117 149 





Because only one sample is taken for both overstatements and understatements, 
the larger of the two computed sample sizes is used, in this case 149 items. In auditing 
the sample, if auditors find any understatement amounts, the lower bound will exceed 
the tolerable limit because the sample size is based on no expected misstatements. 
Conversely, several overstatement amounts might be found before the tolerable limit 
for the upper bound is exceeded. When concerned about finding an unexpected 
misstatement that would cause the population to be rejected, the auditor can guard 
against it by arbitrarily increasing sample size above the amount determined by the 
tables. In this illustration, the auditor might use a sample size of 200 instead of 149. 


Relationship of the Audit Risk Model to Sample Size for MUS The audit risk 
model for planning was introduced in Chapter 9 and covered in subsequent chapters as: 


AAR 


PDR = ———— 
IRX CR 


(See pages 261-263 for description of the terms.) 

Chapter 16 discussed how the sea reduces detection risk to the planned level 
by performing substantive tests of WN Sage s owas alysical procedures, and 
tests of details of balances. MUS i ‘AR He. ROnARGEE Ffances. 
Therefore, auditors need to eee . Paci of the three independent 
factors in the audit risk model, plus analytical procedures and substantive tests of 
transactions, to sample size for tests of details of balances. 

Table 17-2 on page 562 shows that four of these five factors (control risk, substan- 
tive tests of transactions, acceptable audit risk, and substantive analytical procedures) 


affect ARIA. ARIA in turn determines the planned sample size. The other factor, 
inherent risk, affects the estimated population exception rate directly. 


MUS appeals to auditors for at least four reasons: 


1. MUS automatically increases the likelihood of selecting high dollar items from 
the population being audited. Auditors make a practice of concentrating on 
these items because they generally represent the greatest risk of material 
misstatements. Stratified sampling can also be used for this purpose, but MUS 
is often easier to apply. 

2. MUS often reduces the cost of doing the audit testing because several sample 
items are tested at once. For example, if one large item makes up 10 percent of 
the total recorded dollar value of the population and the sample size is 100, the 
PPS sample selection method is likely to result in approximately 10 percent of 
the sample items from that one large population item. Naturally, that item 
needs to be audited only once, but it counts as a sample of 10. If the item is 
misstated, it is also counted as 10 misstatements. Larger population items may 
be eliminated from the sampled population by auditing them 100 percent and 
evaluating them separately, if the auditor so desires. 

3. MUSis easy to apply. Monetary unit samples can be evaluated by the application 
of simple tables. It is easy to teach and to supervise the use of MUS techniques. 


Audit Uses 
of Monetary 
Unit Sampling 
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Firms that utilize MUS extensively use audit software or other computer 
programs that streamline sample size determination and evaluation even 
further than shown in this chapter. 

4. MUS provides a statistical conclusion rather than a nonstatistical one. Many 
auditors believe that statistical sampling aids them in making better and more 
defensible conclusions. 


There are two main disadvantages of MUS. 


1. The total misstatement bounds resulting when misstatements are found may 
be too high to be useful to the auditor. This is because these evaluation 
methods are inherently conservative when misstatements are found and often 
produce bounds far in excess of materiality. To overcome this problem, large 
samples may be required. 

2. It may be cumbersome to select PPS samples from large populations without 
computer assistance. 


For all these reasons, auditors commonly use MUS when zero or few misstate- 
ments are expected, a dollar result is desired, and the population data are maintained 
on computer files. 


VARIABLES SAMPLING 


OBJECTIVE 17-4 Variables sampling, like MUS, is a statistical method that auditors use. Variables 
sampling and nonstatistical sampling for tests of details of balances have the same 
objective—to measure the misstatement in an account balance. As with nonstatistical 
sampling, when auditors determine that the misstatement amount exceeds the tolerable 
amount, they reject the population and take additional actions. 

SAPIAG Onde PDE uenha ARANCERral class of methods called variables 
sampling: difference estimation, ratio estimation, and mean-per-unit estimation. These 
are discussed later. 





Describe variables sampling. 





Differences Between The use of variables methods shares many similarities with nonstatistical sampling. All 

Variables and 14 steps we discussed for nonstatistical sampling must be performed for variables 

Nonstatistical Sampling | methods, and most are identical. Some of the differences between variables and non- 
statistical sampling are examined after we discuss sampling distributions. 


Sampling Distributions To understand why and how auditors use variables sampling methods in auditing, it is 
useful to understand sampling distributions and how they affect auditors’ statistical 
conclusions. The auditor does not know the mean value (average) of misstatements in 
the population, the distribution of the misstatement amounts, or the audited values. 
These population characteristics must be estimated from samples, which, of course, is 
the purpose of the audit test. 

Assume that an auditor, as an experiment, took thousands of repeated samples of 
equal size from a population of accounting data having a mean value of X. For each 
sample, the auditor calculates the mean value of the items in the sample as follows: 

2x; 


n 


x= 

where: 
xX = mean value of the sample items 
x; = value of each individual sample item 


n = sample size 
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frre Frequency Distribution of Sample Means ) 








Frequency of values in percent 





Value of x in dollars 











After calculating (x) for each sample, the auditor plots them into a frequency 
distribution. As long as the sample size is sufficient, the frequency distribution of the 
sample means will appear much like that shown in Figure 17-4. 

A distribution of the sample means such as this is normal and has all the charac- 
teristics of the normal curve: (1) the curve is symmetrical, and (2) the sample means 
fall within known portions of the sampling distribution around the average or mean of 
those means, measured by the distance along the horizontal axis in terms of standard 
deviations. 

Furthermore, the mean of the sample means (the midpoint of the sampling dis- 
tribution) is equal to the Is i eae sna pi aarti iil 
distribution is equal to SD/,/n, where SD is the population standard deviation and n is 
the sample size. 

To illustrate, assume a population with a mean of $40 and a standard deviation 
of $15 (X = $40 and SD = $15), from which we elected to take many random samples 
of 100 items each. The standard deviation of our sampling distribution is $1.50 
(SD//n = 15/100 = 1.50). The reference to “standard deviation” of the population and 
to “standard deviation” of the sampling distribution is often confusing. To avoid 
confusion, remember that the standard deviation of the distribution of the sample 
means is often called the standard error of the mean (SE). With this information, 
auditors can make the tabulation of the sampling distribution, as shown in Table 17-10 
below. 








TABLE 17-10 Calculated Sampling Distribution from a Population with a 
Known Mean and Standard Deviation 
(1) (4) 
Number of Standard (2) (3) Percent of Sample 
Errors of the Mean Value Range Around Means Included 

(Confidence Coefficient) [(1) x $1.50] X [$40 +/- (2)] in Range 
1 $1.50 $38.50 — $41.50 68.2 
2 $3.00 $37.00 — $43.00 95.4 
5 $4.50 $35.50 — $44.50 99.7 
(taken from table for normal curve) 

XS <4 
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Statistical Inference 


To summarize, three things shape the results of the experiment of taking a large 
number of samples from a known population: 


1. The mean value of all the sample means is equal to the population mean (X). 
A corollary is that the sample mean value (x) with the highest frequency of 
occurrence is also equal to the population mean. 

2. The shape of the frequency distribution of the sample means is that of a 
normal distribution (curve), as long as the sample size is sufficiently large, 
regardless of the distribution of the population, as illustrated in Figure 17-5. 

3. The percentage of sample means between any two values of the sampling 
distribution is measurable. The percentage can be calculated by determining 
the number of standard errors between any two values and determining the 
percentage of sample means represented from a table for normal curves. 


Naturally, when samples are taken from a population in an actual audit situation, the 
auditor does not know the population’s characteristics and, ordinarily, only one sample 
is taken from the population. But the knowledge of sampling distributions enables 
auditors to draw statistical conclusions, or statistical inferences, about the population. 
For example, assume that the auditor takes a sample from a population and calculates 
(x) as $46 and SE at $9. (We'll explain how SE is calculated later.) We can now calculate 
a confidence interval of the population mean using the logic gained from the study of 
sampling distributions. It is as follows: 


Chak + 7-St 


where: CI = confidence interval for the population mean 


Sl 


[> 


X = point estimate of the population mean 
1 = 68.2% confidence level 


Apago PPP MKHHAACSe be = 95.4% confidence level 
3 = 99.7% confidence level 
SE = standard error of the mean 


Z-SE = precision interval 


For the example: 
Cl z = $46 + 1($9) = $46 + $9 at a 68.2% confidence level 


Cl xz = $46 + 2($9) = $46 + $18 at a 95.4% confidence level 
Cl xz = $46 + 3($9) = $46 + $27 at a 99.7% confidence level 





recurs 17s Distribution for a Population Distribution 


Mean 








Population distribution— 
Skewed 





Frequency values in percent 











Value of x in dollars 
= 7 
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The results can also be stated in terms of confidence limits (CIx). The upper 
confidence limit (UCL x) is X + Z* SE ($46 + $18 = $64 ata95 percent confidence level) 
and a lower confidence limit (LCL x) is X- Z: SE ($46 — $18 = $28 ata 95 percent con- 
fidence level). Graphically, the results are as follows: 





Lower Upper 
confidence r confidence 
limit xX limit 
| | | 
| ! 
$28 $46 $64 


Auditors can state the conclusions drawn from a confidence interval using 
statistical inference in different ways. However, they must take care to avoid incorrect 
conclusions, remembering that the true population value is always unknown. There is 
always a possibility that the sample is not sufficiently representative of the population 
to provide a sample mean and/or standard deviation reasonably close to those of the 
population. The auditor can say, however, that the procedure used to obtain the sample 
and compute the confidence interval will provide an interval that will contain the true 
population mean value a given percent of the time. In short, the auditor knows the 
reliability of the statistical inference process that is used to draw conclusions. 


Auditors use the preceding statistical inference process for all the variables sampling 
methods. Each method is distinguished by what is being measured. Let’s examine the 
three variables methods individually. 


Difference Estimation Auditors use difference estimation to measure the estimated 
total misstatement amount in a population when both a recorded value and an 
audited value exist for each item in the sample, which is almost always the case in 
audits. For example, an auditor might confirm a sample of accounts receivable and 
determine the difference (misstate Roo. (PDEPtsEnkancetr the 
amount the auditor considers correct for each selected account. The auditor makes an 
estimate of the population misstatement based on the number of misstatements in the 
sample, average misstatement size, individual misstatements in the sample, and 
sample size. The result is stated as a point estimate of the population misstatement 
plus or minus a computed precision interval at a stated confidence level. Referring 
back to the discussion of sampling distributions, assume the auditor confirmed a 
random sample of 100 from a population of 1,000 accounts receivable and concluded 
that the confidence limits of the mean of the misstatement for accounts receivable 
were between $28 and $64 at a 95 percent confidence level. The estimate of the total 
population misstatement can also be easily calculated as being between $28,000 and 
$64,000 at a 95 percent confidence level (1,000 x $28 and 1,000 x $64). If the auditor’s 
tolerable misstatement is $100,000, the population is clearly acceptable. If tolerable 
misstatement is $40,000, the population is not acceptable. An extended illustration 
using difference estimation is shown on pages 583-589. 

Difference estimation frequently results in smaller sample sizes than any other 
method, and it is relatively easy to use. For that reason, difference estimation is often 
the preferred variables method. 


Ratio Estimation Ratio estimation is similar to difference estimation except the 
auditor calculates the ratio between the misstatements and their recorded value and 
projects this to the population to estimate the total population misstatement. For 
example, assume that an auditor finds misstatements totaling $12,000 in a sample with 
a recorded value of $208,000. The misstatement ratio is .06 ($12,000/$208,000). If the 
total recorded value of the population is $1,040,000 the projected misstatement in the 
population is $62,400 ($1,040,000 x .06). The auditor can then calculate confidence 
limits of the total misstatement for ratio estimation with a calculation similar to the one 
shown for difference estimation. Ratio estimation can result in sample sizes even 


Variables Methods 
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Stratified 
Statistical Methods 


Sampling Risks 


smaller than difference estimation if the size of the misstatements in the population is 
proportionate to the recorded value of the population items. If the size of the individual 
misstatements is independent of the recorded value, difference estimation results in 
smaller sample sizes. Most auditors prefer difference estimation because it is somewhat 
simpler to calculate confidence intervals. 


Mean-per-Unit Estimation In mean-per-unit estimation, the auditor focuses on 
the audited value rather than the misstatement amount of each item in the sample. 
Except for the definition of what is being measured, the mean-per-unit estimate is 
calculated in exactly the same manner as the difference estimate. The point estimate of 
the audited value equals the average audited value of items in the sample times the 
population size. The computed precision interval is calculated on the basis of the 
audited value of the sample items rather than the misstatements. When auditors have 
computed the upper and lower confidence limits, they decide the acceptability of the 
population by comparing these amounts with the recorded book value. For example, 
assume the auditor takes a sample of 100 items from an inventory listing containing 
3000 items and a recorded value $265,000. If the mean value of the items sampled is 
$85, the estimated value of the inventory is $255,000 ($85 x 3000). If the recorded 
value of $265,000 is within the upper confidence limit, the auditor would accept the 
population balance. Mean-per-unit-estimation is rarely used in practice because 
sample sizes are typically much larger than for the two previous methods. 


As we discussed earlier in this chapter, stratified sampling is a method of sampling in 
which all the elements in the total population are divided into two or more sub- 
populations. Each subpopulation is then independently tested. The calculations are 
made for each stratum and then combined into one overall population estimate for a 
confidence interval of the entire population. The results are measured statistically. 
Stratification is Laan to difference, ratio, and mean-per-unit estimation, but is 
not ABAYO PDE mAh shee zo 

Stratrtying’a population is not unique to statistical sampling, of course. Auditors 
have traditionally emphasized certain types of items when they are testing a population 
using nonstatistical sampling. For example, in confirming accounts receivable, auditors 
customarily place more emphasis on large accounts than on small ones. In statistical 
stratified sampling, however, the approach is more objective and better defined than 
for nonstatistical stratification methods. 


We have discussed acceptable risk of incorrect acceptance (ARIA) for nonstatistical 
sampling. For variables sampling, auditors use ARIA as well as acceptable risk of 

















fae os cone for Confidence Levels, ARIAs, and ARIRs 
Confidence Level (%) ARIA (%) ARIR (%) Confidence Coefficient 
99 #3) 1 2.58 
95 2D 5 1.96 
90 5 10 1.64 
80 10 20 1.28 
7h) 1225 25 115 
70 15 30 1.04 
60 20 40 84 
50 25 50 .67 
40 30 60 FO) 
30 35 70 39 
20 40 80 D5) 
10 45 90 Alle) 
0 50 100 .0 
XX SJ 
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. 
TABLE 17-12 ARIA and ARIR 


Actual State of the Population 





Actual Audit Decision Materially Misstated Not Materially Misstated 





Incorrect conclusion— 
risk is ARIR 


Correct conclusion— 
no risk 


Conclude that the population is 
materially misstated 





Conclude that the population is Incorrect conclusion— Correct conclusion— 


not materially misstated tisk is ARIA no risk 
S 4 











incorrect rejection (ARIR). It is important to understand the distinctions between and 
uses of the two risks. 


ARIA After auditors perform an audit test and calculate statistical results, they must 
conclude either that the population is or is not materially misstated. ARIA is the statis- 
tical risk that the auditor has accepted a population that is, in fact, materially misstated. 
ARIA is a serious concern to auditors because of the potential legal implications of con- 
cluding that an account balance is fairly stated when it is misstated by a material amount. 

An account balance can be either overstated or understated, but not both; 
therefore, ARIA is a one-tailed statistical test. The confidence coefficients for ARIA are 
therefore different from the confidence level. (Confidence level = 1 — 2 x ARIA. So, if 
ARIA equals 10 percent, the confidence level is 80 percent.) The confidence coefficients 
for various ARIAs are shown in Table 17-11 together with confidence coefficients for 
the confidence level and ARIR. 


ARIR Acceptable risk of incorrect rejection (ARIR) is the statistical risk that the 
auditor has concluded that a populations we asst An itj ARIR 
affects auditors’ actions only when Ap: A O.. t DE Hs AGE T. cated, 
When auditors find a balance not fairly stated, they typically increase the sample size 
or perform other tests. An increased sample size will usually lead the auditor to con- 
clude that the balance is fairly stated if the account is, in fact, not materially misstated. 
While ARIA is always important, ARIR is important only when there is a high cost to 


increasing the sample size or performing other tests. Confidence coefficients for ARIR 
are also shown in Table 17-11. 


As you examine the summary of ARIA and ARIR in Table 17-12 above, you might 
conclude that auditors should attempt to minimize ARIA and ARIR. To accomplish 
that, auditors have to increase the sample size, thus minimizing the risks. However, the 
cost of that approach makes having reasonable ARIA and ARIR a more desirable goal. 


ILLUSTRATION USING DIFFERENCE ESTIMATION 


As we've discussed, several types of variables sampling techniques may be applicable to 
auditing in different circumstances. To illustrate the concepts and methodology of 
variables sampling, we have selected difference estimation using hypothesis testing 
because of its relative simplicity. When this method is considered reliable in a given set 
of circumstances, most auditors prefer it to other variables sampling methods. 

For difference estimation, the same 14 steps as nonstatistical sampling are used in 
determining whether the account balance in the audit of accounts receivable is 
correctly stated. The following example is based on the use of positive confirmations in 
the audit of Hart Lumber Company. Accounts receivable consists of 4,000 accounts 
listed on the aged trial balance with a recorded value of $600,000. Internal controls are 
considered somewhat ineffective, and a large number of small misstatements in 


OBJECTIVE 17-5 


Use difference estimation in 


tests of details of balances. 
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Plan the Sample 

and Calculate the 
Sample Size Using 
Difference Estimation 


recorded amounts are expected in the audit. Total assets are $2,500,000, and net 
earnings before taxes are $400,000. Acceptable audit risk is reasonably high because of 
the limited users of the statements and the good financial health of Hart Lumber. 
Analytical procedures results indicated no significant problems. Assume that all 
confirmations were returned or that effective alternative procedures were carried out. 
Hence, the sample size is the number of positive confirmations sent. 


State the Objectives of the Audit Test The objective of the audit test is to determine 
whether accounts receivable before consideration of the allowance for uncollectible 
accounts is materially misstated. 


Decide Whether Audit Sampling Applies Audit sampling applies in the confirma- 
tion of the accounts receivable because of the large number of accounts receivable. 


Define Misstatement Conditions The misstatement condition is a client misstate- 
ment determined by the confirmation of each account or alternative procedure. 


Define the Population The population size is determined by count, as it was for 
attributes sampling. An accurate count is much more important in variables sampling 
because population size directly affects sample size and the computed precision limits. 
The population size for Hart Lumber’s accounts receivable is 4,000. 


Define the Sampling Unit The sampling unit is an account on the list of accounts 
receivable. 


Specify Tolerable Misstatement The amount of misstatement the auditor is willing 
to accept is a materiality question. The auditor decides to accept a tolerable misstate- 
ment of $21,000 in the audit of Hart Lumber’s accounts receivable. 


Specify Acceptable Risk The auditor specifies two risks: 


1. Acceptable risk of incorrect acceptance (ARIA). It is the risk of accepting accounts 

asPdD Et finhamoemted by more than $21,000. ARIA is 

affected by acceptable audit risk, results of tests of controls and substantive tests 

of transactions, analytical procedures, and the relative significance of accounts 

receivable in the financial statements. For the Hart Lumber audit, assume an 
ARIA of 10 percent. 

2. Acceptable risk of incorrect rejection (ARIR). It is the risk of rejecting accounts 
receivable as incorrect if it is not actually misstated by a material amount. 
ARIR is affected by the additional cost of resampling. Because it is fairly costly 
to confirm receivables a second time, assume an ARIR of 25 percent. (For audit 
tests for which it is not costly to increase the sample size, a much higher ARIR 
is common.) 


After auditors specify the tolerable misstatement and ARIA, they can state a hypothe- 
sis. The auditor’s hypothesis for the audit of accounts receivable for Hart Lumber is: 
Accounts receivable is not misstated by more than $21,000 at an ARIA of 10 percent. 


Estimate Misstatements in the Population This estimate has two parts: 


1. Estimate an expected point estimate. Auditors need an advance estimate of the 
population point estimate for difference estimation, much as they need an 
estimated population exception rate for attributes sampling. The advance 
estimate is $1,500 (overstatement) for Hart Lumber, based on the previous year’s 
audit tests. 

2. Make an advance population standard deviation estimate—variability of the 
population. To determine the initial sample size, auditors need an advance 
estimate of the variation in the misstatements in the population as measured 
by the population standard deviation. (The calculation of the standard 
deviation is explained later, when audit results are evaluated.) For Hart 
Lumber, it is estimated to be $20 based on the previous year’s audit tests. 
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Calculate the Initial Sample Size The initial sample size for Hart Lumber can be 
now calculated using the following formula: 


2 
(2 rae 





TM — E* 


where: n = initial sample size 
SD* = advance estimate of the standard deviation 


Z " confidence coefficient for ARIA (see Table 17-11) 


Z, = confidence coefficient for ARIR (see Table 17-11) 


N= population size 
TM = tolerable misstatement for the population (materiality) 


E* = estimated point estimate of the population misstatement 
Applied to Hart Lumber, this equation yields: 


2 
20(1.28 + 1.15)4,000 
= AE = (9.97)* = 100 
21,000 — 1,500 


Select the Sample Because a random sample (other than PPS) is required, the 
auditor must use one of the probabilistic sample selection methods discussed in 
Chapter 15 to select the 100 sample items for confirmation. In this case the auditor 
used a computer generated random sample. 


Perform the Audit Procedures The auditor must use care in confirming the accounts 
receivable and performing stern ADAG SP Re porevet tel Capes in 
Chapter 16. For confirmations, a misSt em 1S thé 1) ae etWeerl the CoMmirmation 
response and the client’s balance after the reconciliation of all timing differences and 
customer errors. For example, if a customer returns a confirmation and states the correct 
balance is $887.12, and the balance in the client’s records is $997.12, the difference of 
$110 is an overstatement amount if the auditor concludes that the client’s records are 
incorrect. For nonresponses, the misstatements discovered by alternative procedures are 
treated identically to those discovered through confirmation. At the end of this step, the 
auditor determines a misstatement value for each item in the sample, many of which 


are likely to be zero. The misstatements for Hart Lumber are shown in Table 17-13 
(pp. 586-587). 


Generalize from the Sample to the Population In concept, nonstatistical sampling 
and difference estimation accomplish the same thing—generalizing from the sample to 
the population. While both methods measure the likely population misstatement based 
on the results of the sample, difference estimation uses statistical measurement to 
compute confidence limits. The following four steps describe the calculation of the 
confidence limits for Hart Lumber Company. (The calculations are illustrated in Table 
17-13, Steps 3 through 6.) 

1. Compute the point estimate of the total misstatement. The point estimate is a 
direct extrapolation from the misstatements in the sample to the misstatements 
in the population. The calculation of the point estimate for Hart Lumber is 
shown in Table 17-13, step 3. 

It is unlikely that the actual, but unknown, misstatement is exactly the 
same as the point estimate. Instead, it is more realistic to estimate the misstate- 
ment in terms of a confidence interval determined by the point estimate plus 
and minus a computed precision interval. The calculation of the confidence 
interval is an essential part of difference estimation. 


Select the Sample 
and Perform 
the Procedures 


Evaluate the Results 
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Calculation of Confidence Limits 





Step 


Statistical Formula 


Illustration for Hart Lumber 





1. Take a random sample 
of size n. 


2. Determine the value of each 
misstatement in the sample. 


3. Compute the point estimate 
of the total misstatement. 


4. Compute the population 
standard deviation of the 
misstatements from the 
sample. 








n=sample size 


OD! 
ll 


Se pe} 
E =NeéorN—+ 


where: 


é = average misstatement in the sample 

> = summation 
e; =an individual misstatement in the sample 
n=sample size 

r= point estimate of the total misstatement 
N = population size 





where: 


SD = standard deviation 

e; =an individual misstatement in the sample 
n=sample size 
€ = average misstatement in sample 


100 accounts receivable are selected 
randomly from the aged trial balance 
containing 4,000 accounts. 


75 accounts are confirmed by customers, 
and 25 accounts are verified by alternative 
procedures. After reconciling timing differ- 
ences and customer errors, the following 
12 items were determined to be client 
errors (understatements) stated in dollars: 





1. $12.75 ZT ) C87) 
2. (69.46) 8. 24.32 
By tehs}743} 9. 36.59 
4. 100.00 10. (102.16) 
5. (27.30) 11. 54.71 
6. 41.06 125s 71256) 

Sum = $226.48 

$226.48 





e = $2.26 
a 100 
E = 4,000 ($2.26) = $9,040 


or 


$226.48 
100 





E = 4,000 ( = $9,040 


(rounded to nearest dollar) 





ej (G; y 

ls 35 zs $ 169 
2. (69) 4761 
5: 85 W225 
4. 100 10,000 
Sg) 729 
6. 41 1,681 
7 1 
8. 24 576 
9. 37 1,369 
10. (102) 10,404 
AE 55) 3,025 
125 72 5,184 
$228 $45,124 








a 2 
(a 100 ($2.26) 


99 
SD = $21.2 





(Table 17-13 continued on next page) 
/ 
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= Calculation of Confidence Limits (Cont.) 





Step 


Statistical Formula 


Illustration for Hart Lumber 





5. Compute the precision 
interval for the estimate 
of the total population 
misstatement at the 
desired confidence level. 


6. Compute the confidence 
limits at the CL desired. 


SD ;|N-n 


one N 


CPI= NZ 


where: 
CPI = computed precision interval 
N = population size 
Z, = confidence coefficient for ARIA 
(see Table 17-11) 
SD = population standard deviation 
n=sample size 


N-n 





= finite correction factor 


UCL = E + CPI 
ie =e Cel 


$21.2 | 4,000—100 


CPI = 4,000 -1.28- 





$21.2 
= 4,000 -1.28. ——..99 
10 


= 4,000 -1.28-$2.12-.99 
= $10,800 (rounded) 


UCL = $9,040 + $10,800 = $19,840 
LCL = $9,040 — $10,800 = $(1,760) 


1/100 4,000 





where: 
UCL= computed upper confidence limit 
LCL= computed lower confidence limit 
E =point estimate of the total misstatement 
CPI= computed precision interval at desired CL 














See Sy eS Sos See = 


Compute an estimate of the population standard deviation. The population 
standard deviation is a statistical measure of the variability in the values of the 
individual items in the population. If there is a large amount of variation in the 
values of population items, the standard deviation will be larger than when the 
variation is small. For example, in the confirmation of accounts receivable, 
misstatements of $2, $275, and $812 have far more variation than the set $4, 
$14, and $26. Obviously, the standard deviation is smaller in the second set. 
The standard deviation has a significant effect on the computed precision 
interval. As one might expect, the auditor’s ability to predict total misstatements 
is better when there is a small amount of variation in the individual sample items. 
The auditor can compute a reasonable estimate of the value of the popula- 
tion standard deviation by using the standard statistical formula shown in 
Table 17-13, step 4. The standard deviation estimate is determined from the 
auditor’s sample results and is not affected by professional judgment. 


Compute the precision interval. The precision interval is calculated by a 
statistical formula. The results are a dollar measure of the inability to predict 
the true population misstatement because the test is based on a sample rather 
than on the entire population. For the computed precision interval to have any 
meaning, it must be associated with ARIA. The formula to calculate the 
precision interval is shown in Table 17-13, step 5. 

An examination of the formula in step 5 of Table 17-13 indicates that the 
effect of changing each factor while the other factors remain constant is as 
follows: 
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Action When a 
Hypothesis Is Rejected 


Type Effect on the Computed 


of Change Precision Interval 
Increase ARIA Decrease 
Increase the point estimate of Increase 
the misstatements 
Increase the standard deviation Increase 
Increase the sample size Decrease 


4. Compute the confidence limits. Auditors calculate the confidence limits, which 
define the confidence interval, by combining the point estimate of the total 
misstatements and the computed precision interval at the desired confidence 
level (point estimate + computed precision interval). The formula to calculate 
the confidence limits is shown in Table 17-13, step 6. 

The lower and upper confidence limits for Hart Lumber are ($1,760) and 
$19,840, respectively. There is a 10 percent statistical risk that the population is 
understated by more than $1,760, and the same risk that it is overstated by 
more than $19,840. (Remember, an ARIA of 10 percent is equivalent to a 
confidence level of 80 percent.) 


Analyze the Misstatements There are no differences in analyzing misstatements for 
nonstatistical and statistical methods. The auditor must evaluate misstatements to 
determine the cause of each misstatement and decide whether modification of the 
audit risk model is needed. 


Decide the Acceptability of the Population To decide whether a population is 
acceptable, when auditors use a statistical method, they rely on a decision rule, as 
follows: If the two-sided confidence interval for the misstatements is completely within 
the plus and minus tolerable misstatements, accept the hypothesis that the book value 
is not misstated by a material amount. Otherwise, accept the hypothesis that the book 
value Apa¢oly PDP iabirhancer 

This decision rule is illustrated in Figure 17-6. The auditor should conclude that 
both the LCL and UCL for situations 1 and 2 fall completely within both the under- 
statement and overstatement tolerable misstatement limits. Therefore, auditors can 
accept the conclusion that the population is not misstated by a material amount. For 
situations 3, 4, and 5, either LCL or UCL, or both, are outside tolerable misstatements. 
Therefore, the population book value will be rejected for these situations. 

Application of the decision rule to Hart Lumber leads the auditor to the conclusion 
that the population should be accepted, because both confidence limits are within the 
tolerable misstatement range. 


Tolerable misstatement range 
($21,000) 0 $21,000 





LCL $9,040 UCL 


Confidence interval 
($1,760) $19,840 





In accepting the population in this way, the auditor is taking a 10 percent chance 
of being wrong—that is, that the population is, in fact, misstated by a material amount. 
However, based on the auditor’s planning judgments, this level of risk is appropriate. 

Analysis Given that the actual standard deviation (21.2) was larger than the advanced 


estimate (20), and the actual point estimate ($9,040) was larger than the advanced 
estimate ($1,500), it may seem surprising that the population was accepted. However, 
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7 
Illustration of the Auditor's Decision Rule for Difference 
Estimation 
— Tolerable misstatement $0 Misstatements + Tolerable misstatement 
re #1 vee 
ter #2 oe 
Se #3 oe 
LCL UCL 
Lee Tj 
LGIE #5 UCL 
b =" 











the use of a reasonably small ARIR caused the sample size to be larger than if ARIR had 
been 100 percent. If ARIR had been 100 percent, which is common when the additional 
audit cost to increase the sample size is small, the required sample size would have been 
only 28: 





2 
20(1.28 + 0) 4,000 | _ 
21,000 — 1,500 


Assuming a sample size of 28 and the same actual point estimate and standard 
deviation, the upper confidence “Apayo’ VEnhanee e, the 
population book value would have bedn rejetted. Auditors can use 0 reduce the 
likelihood of needing to increase the sample size if the standard deviation or point 
estimate is larger than was expected. 


When one or both of the confidence limits lie outside the tolerable misstatement range, 
the population is not considered acceptable. The courses of action for the auditor are 
the same as those we discussed for nonstatistical sampling, except that a better estimate 
of the population misstatement has been made. 

For example, in the Hart Lumber case, if the confidence level had been $9,040 + 
$15,800 and the client had been willing to reduce the book value by $9,040, the results 
would be 0 + $15,800. The new computed lower confidence limit would be an under- 
statement of $15,800, and the upper confidence limit a $15,800 overstatement, which are 
both acceptable given the tolerable misstatement of $21,000. The minimum adjustment 
that the auditor could make and still have the population acceptable is $3,840 [($9,040 + 
$15,800) — $21,000]. 

However, the client may be unwilling to adjust the balance on the basis of a sample. 
Furthermore, if the computed precision interval exceeds tolerable misstatement, no 
adjustment to the books will satisfy the auditor. This would have been the case in the 
previous example if tolerable misstatement had been only $15,000. 


SUMMARY 


This chapter discussed nonstatistical and statistical audit sampling methods for tests of 
details of balances. In sampling for tests of balances, the auditor determines whether the 
dollar amount of an account balance is materially misstated. We then discussed the 14 steps 
in nonstatistical sampling for tests of balances. When performing nonstatistical audit 
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sampling, the auditor uses judgment in generalizing from the sample to the population to 
determine whether it is acceptable. Monetary unit sampling is the most common statistical 
method for tests of balances. This method defines the sampling unit as individual dollars in 
the recorded account balance, and as a result, larger accounts are more likely to be included 
in the sample. Variables statistical sampling methods include difference estimation, ratio 
estimation, and mean-per-unit estimation. These methods compare audited sample values 
to recorded values to develop an estimate of the misstatement in the account value. Use of 


variables sampling was illustrated using difference estimation. 


Acceptable risk of incorrect acceptance 
(ARIA)—the risk that the auditor is 
willing to take of accepting a balance as 
correct when the true misstatement in the 
balance exceeds tolerable misstatement 


Acceptable risk of incorrect rejection 
(ARIR)—the risk that the auditor is willing 
to take of rejecting a balance as incorrect 
when it is not misstated by a material 
amount 


Difference estimation—a method of 
variables sampling in which the auditor 
estimates the population misstatement 
by multiplying the average misstatement 
in the sample by the total number of 
population items and also calculates 


ESSENTIAL TERMS 


sampling with probability proportional 
to size 

Point estimate—a method of projecting 
from the sample to the population to 
estimate the population misstatement, 
commonly by assuming that misstate- 
ments in the unaudited population are 
proportional to the misstatements found 
in the sample 


Probability proportional to size sample 
selection (PPS)—sample selection of 
individual dollars in a population by the 
use of random or systematic sample 
selection 


Ratio estimation—a method of variables 
sampling in which the auditor estimates 


sampliAPago PDF Enhances population misstatement by multi- 


Mean-per-unit estimation—a method of 
variables sampling in which the auditor 
estimates the audited value of a popu- 
lation by multiplying the average audited 
value of the sample by the population size 
and also calculates sampling risk 


Misstatement bounds—an estimate of 
the largest likely overstatements and 
understatements in a population at a given 
ARIA, using monetary unit sampling 


Monetary unit sampling (MUS)—a 
statistical sampling method that provides 
upper and lower misstatement bounds 
expressed in monetary amounts; also 
referred to as dollar unit sampling, cumu- 
lative monetary amount sampling, and 


plying the portion of sample dollars 
misstated by the total recorded popu- 
lation book value and also calculates 
sampling risk 

Statistical inferences—statistical conclu- 
sions that the auditor draws from sample 
results based on knowledge of sampling 
distributions 


Stratified sampling—a method of 
sampling in which all the elements in the 
total population are divided into two or 
more subpopulations that are indepen- 
dently tested and statistically measured 
Variables sampling—sampling techniques 
for tests of details of balances that use the 
statistical inference process 


REVIEW QUESTIONS 


17-1 (Objective 17-1) What major difference between (a) tests of controls and substantive 
tests of transactions and (b) tests of details of balances makes attributes sampling inappro- 
priate for tests of details of balances? 
17-2 (Objective 17-2) Define stratified sampling and explain its importance in auditing. 
How can an auditor obtain a stratified sample of 30 items from each of three strata in the 
confirmation of accounts receivable? 
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17-3 (Objective 17-2) Distinguish between the point estimate of the total misstatements 
and the true value of the misstatements in the population. How can each be determined? 


17-4 (Objective 17-2) Evaluate the following statement made by an auditor: “On every 
aspect of the audit where it is possible, I calculate the point estimate of the misstatements 
and evaluate whether the amount is material. If it is, I investigate the cause and continue to 
test the population until I determine whether there is a serious problem. The use of 
statistical sampling in this manner is a valuable audit tool.” 


17-5 (Objective 17-3) Define monetary unit sampling and explain its importance in 
auditing. How does it combine the features of attributes and variables sampling? 


17-6 (Objectives 17-1, 17-2, 17-3, 17-4) Define what is meant by sampling risk. Does 
sampling risk apply to nonstatistical sampling, MUS, attributes sampling, and variables 
sampling? Explain. 

17-7 (Objectives 17-1, 17-2) What are the major differences in the 14 steps used in 
nonstatistical sampling for tests of details of balances versus for tests of controls and sub- 
stantive tests of transactions? 

17-8 (Objective 17-3) The 2,620 inventory items described in Question 17-14 are listed on 
44 inventory pages with 60 lines per page. There is a total for each page. The client’s data are 
not in machine-readable form. Describe how a monetary unit sample can be selected in 
this situation. 


17-9 (Objective 17-3) Explain how the auditor determines tolerable misstatement for MUS. 


17-10 (Objective 17-2) Explain what is meant by acceptable risk of incorrect acceptance. 
What are the major audit factors affecting ARIA? 


17-11 (Objective 17-4) Evaluate the following statement made by an auditor: “I took a 
random sample and derived a 90 percent confidence interval of $800,000 to $900,000. That 
means that the true population value will be between $800,000 and $900,000, 90 percent of 
the time.” 


17-12 (Objective 17-2) What is the rey ahgetvwPDEU Bnkstvcer 
17-13 (Objective 17-3) What is meant by the “percent of misstatement assumption” for 
MUS in those population items that are misstated? Why is it common to use a 100% 
misstatement assumption when it is almost certain to be highly conservative? 


17-14 (Objective 17-3) An auditor is determining the appropriate sample size for testing 
inventory valuation using MUS. The population has 2,620 inventory items valued at 
$12,625,000. The tolerable misstatement for both understatements and overstatements is 
$500,000 at a 10% ARIA. No misstatements are expected in the population. Calculate the 
preliminary sample size using a 100% average misstatement assumption. 

17-15 (Objective 17-5) Assume that a sample of 100 units was obtained in sampling the 
inventory in Question 17-14. Assume further that the following three misstatements were 
found: 





Misstatement Recorded Value Audited Value 
] $ 897.16 $ 609.16 
2 47.02 0 
3 1,621.68 1,522.68 





Calculate adjusted misstatement bounds for the population. Draw audit conclusions based 
on the results. 

17-16 (Objective 17-3) Why is it difficult to determine the appropriate sample size for 
MUS? How should the auditor determine the proper sample size? 

17-17 (Objective 17-5) What is meant by a decision rule using difference estimation? State 
the decision rule. 

17-18 (Objective 17-2) What alternative courses of action are appropriate when a popu- 
lation is rejected using nonstatistical sampling for tests of details of balances? When should 
each option be followed? 
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17-19 (Objective 17-4) Define what is meant by the population standard deviation and 
explain its importance in variables sampling. What is the relationship between the 
population standard deviation and the required sample size? 


17-20 (Objective 17-5) In using difference estimation, an auditor took a random sample of 
100 inventory items from a large population to test for proper pricing. Several of the inven- 
tory items were misstated, but the combined net amount of the sample misstatement was 
not material. In addition, a review of the individual misstatements indicated that no 
misstatement was by itself material. As a result, the auditor did not investigate the 
misstatements or make a statistical evaluation. Explain why this practice is improper. 
17-21 (Objectives 17-3, 17-4) Distinguish among difference estimation, ratio estimation, 
mean-per-unit estimation, and stratified mean-per-unit estimation. Give one example in 
which each can be used. When is MUS preferable to any of these? 

17-22 (Objective 17-4) An essential step in difference estimation is the comparison of each 
computed confidence limit with tolerable misstatement. Why is this step so important, and 
what should the auditor do if one of the confidence limits is larger than the tolerable 
misstatement? 


17-23 (Objective 17-4) Explain why difference estimation is commonly used by auditors. 


17-24 (Objectives 17-3, 17-4) Give an example of the use of attributes sampling, MUS, and 
variables sampling in the form of an audit conclusion. 


MULTIPLE CHOICE QUESTIONS FROM CPA AND CIA EXAMINATIONS 





17-25 (Objective 17-2) The following questions relate to determining sample size in tests of 
details of balances. For each one, select the best response. 


a. Mr. Murray decides to use stratified sampling. The reason for using stratified sampling 


ApaSS, POE BHRaAeS F iability in the overall population. 


(2) give every element in the population an equal chance of being included in the 
sample. 

(3) allow the person selecting the sample to use personal judgment in deciding which 
elements should be included in the sample. 

(4) allow the auditor to emphasize larger items from the population. 


b. Which of the following sample planning factors will influence the sample size for a 
test of details of balances for a specific account? 





Expected Amount Measure of 
of Misstatements Tolerable Misstatement 
(1) No No 
(2) Yes Yes 
(3) No Yes 
(4) Yes No 





c. How would increases in tolerable misstatement and assessed level of control risk affect 
the sample size in substantive tests of details? 





Increase in Increase in 
Tolerable Misstatement Assessed Level of Control Risk 
(1) Increase sample size Increase sample size 
(2) Increase sample size Decrease sample size 
(3) Decrease sample size Increase sample size 
(4) Decrease sample size Decrease sample size 





17-26 (Objective 17-2) The following apply to evaluating results of audit sampling for tests 
of details of balances. For each one, select the best response. 
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a. While performing a substantive test of details during an audit, the auditor determined 
that the sample results supported the conclusion that the recorded account balance 
was materially misstated. It was, in fact, not materially misstated. This situation 
illustrates the risk of 
(1) assessing control risk too high. (3) incorrect rejection. 

(2) assessing control risk too low. (4) incorrect acceptance. 


b. Which of the following is true regarding two random samples drawn in the same way 

from the same population, one of size 30 and the other of size 300? 

(1) The two samples would have the same expected value. 

(2) The larger sample is more likely to produce a larger sample mean. 

(3) The smaller sample will have a 95% confidence interval for the mean. 

(4) The smaller sample will, on average, produce a lower estimate of the variance of 
the population. 

c. The accounting department reports the accounts receivable balance as $175,000. You 
are willing to accept that balance if it is within $15,000 of the actual balance. Using a 
variables sampling plan, you compute a 95% confidence interval of $173,000 to 
$187,000. You would therefore 
(1) find it impossible to determine the acceptability of the balance. 

(2) accept the balance but with a lower level of confidence. 

(3) take a larger sample before rejecting the sample and requiring adjustments. 

(4) accept the $175,000 balance because the confidence interval is within the materiality 

limits. 


17-27 (Objectives 17-3, 17-4, 17-5) The following relate to the use of statistical sampling 
for tests of details of balances. For each one, select the best response. 
a. When the auditor uses monetary unit statistical sampling to examine the total dollar 
value of invoices, each invoice 
(1) has an equal probability of being selected. 


(2) can be represented by no Ws 01 wa”) ung 
(3) has an unknown probability 6 AGO. 5 F Enhance r 
(4) has a probability proportional to its dollar value of being selected. 
b. Which of the following would be an advantage of using variables sampling rather than 
probability-proportional-to-size (PPS) sampling? 
(1) An estimate of the standard deviation of the population’s recorded amount is not 
required. 
(2) The auditor rarely needs the assistance of a computer program to design an 
efficient sample. 
(3) The inclusion of zero and negative balances usually does not require special design 
considerations. 
(4) Any amount that is individually significant is automatically identified and selected. 
c. In applying variables sampling, an auditor attempts to 
(1) estimate a qualitative characteristic of interest. 
(2) determine various rates of occurrence for specified attributes. 
(3) discover at least one instance of a critical deviation. 
(4) predict a monetary population value within a range of precision. 


DISCUSSION QUESTIONS AND PROBLEMS 


17-28 (Objective 17-2) You are planning to use nonstatistical sampling to evaluate the 
results of accounts receivable confirmation for the Meridian Company. You have already 
performed tests of controls for sales, sales returns and allowances, and cash receipts, and 
they are considered excellent. Because of the quality of the controls, you decide to use an 
acceptable risk of incorrect acceptance of 10%. There are 3,000 accounts receivable with a 
gross value of $6,900,000. The accounts are similar in size and will be treated as a single 
stratum. An overstatement or understatement of more than $150,000 is considered material. 


we ma wa a 
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Required . Calculate the required sample size. Assume your firm uses the following nonstatistical 


formula to determine sample size: 


fe) 


Sample size = (Book value of population / Tolerable misstatement) x Assurance factor 
An assurance factor of 2 is used for a 10% ARIA. 


b. Assume that instead of good results, poor results were obtained for tests of controls 
and substantive tests of transactions for sales, sales returns and allowances, and cash 
receipts. How will this affect your required sample size? How will you use this 
information in your sample size determination? 


c. Regardless of your answer to part a, assume you decide to select a sample of 100 
accounts for testing. Indicate how you will select the accounts for testing using 
systematic selection. 


d. Assume a total book value of $230,000 for the 100 accounts selected for testing. You 
uncover three overstatements totaling $1,500 in the sample. Evaluate whether the 
population is fairly stated. 


17-29 (Objective 17-2) You are evaluating the results of a nonstatistical sample of 85 
accounts receivable confirmations for the Bohrer Company. Information on the sample 
and population are included below. An overstatement or understatement of more than 
$100,000 is considered material. 

















Sample Population 
# of Recorded # of Recorded 
Stratum Accounts Value Accounts Value 
] >$75,000 8 $1,287,643 8 $1,287,643 
2 $10,000 - $74,999 40 1,349,678 257 4,348,268 
5 <$10,000 25 94,637 712 947,682 
73 $2,731,958 977 $6,583,593 
They ion PYyPRes FAK Net eb pall exception, other than the following 
items: pays a Cc 
Acct. Recorded Confirmation 
No. Value Response Auditor Follow-up 
147 $ 24,692 $ 23,597 Customer was charged the wrong price. 
228 183,219 157,216 $26,003 shipment recorded on December 30th; 
goods were not shipped until January 3rd. 
278 7,546 5,546 Customer sent $2,000 payment on December 29th; 
received on January 2nd. 
497 15,319 0 $17,443 shipment recorded on December 30th; 
goods were not shipped until January 2nd. 
564 8,397 7,858 Customer received less than the full quantity ordered. 
653 32,687 19,328 $13,359 shipment recorded on December 30th; 
goods were not shipped until January 2nd. 
830 5,286 0 $5,286 shipment made December 30th; 
goods were received by the customer on 
January 4th. 
Required a. Evaluate each of the confirmation exceptions to determine whether they represent 
misstatements. 


b. Estimate the total amount of misstatement in the accounts receivable population. 
Ignore sampling risk in the calculation. 


c. Is the population acceptable? If not, indicate what follow-up action(s) you consider 
appropriate in the circumstances. 


17-30 (Objective 17-3) The accounts receivable population for Jake’s Bookbinding Company 
follows. This table is the same as Table 17-1 on page 560, except that cumulative amounts 
are included to assist you in completing the problem. The population is smaller than is 
ordinarily the case for statistical sampling, but an entire population is useful to show how 
to select PPS samples. 
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a. Select a random PPS sample of 10 items, using computer software. Required 


b. Select a sample of 10 items using systematic PPS sampling using the same concepts dis- 
cussed in Chapter 15 for systematic sampling. Use a starting point of 1857. Identify the 
physical units associated with the sample dollars. (Hint: The interval is 207,295 + 10.) 


c. Which sample items will always be included in the systematic PPS sample regardless of 
the starting point? Will that also be true of random PPS sampling? 


d. Which method is preferable in terms of ease of selection in this case? 
e. Why will an auditor use MUS? 





Population Recorded Cumulative Population Recorded Cumulative 
Item Amount Amount Item (cont.) | Amount (cont.) Amount (cont.) 
1 $ 1,410 $ 1,410 21 $ 4,865 $117,385 
2 9,130 10,540 22 770 118,155 
3 660 11,200 23 2,305 120,460 
4 3,355 14,555 24 2,665 123,125 
5 5,725 20,280 25 1,000 124,125 
6 8,210 28,490 26 6,225 130,350 
7 580 29,070 27 3,675 134,025 
8 44,110 73,180 28 6,250 140,275 
9 825 74,005 29 1,890 142,165 
10 1,155 75,160 30 27,705 169,870 
11 2,270 77,430 31 935 170,805 
12 50 77,480 32 5,595 176,400 
13 5,785 83,265 33 930 177,330 
14 940 84,205 34 4,045 181,375 
15 1,820 86,025 35 9,480 190,855 
16 3,380 89,405 36 360 191,215 
17 530 89,935 37 1,145 192,360 
18 955 90,890 38 6,400 198,760 
19 4,490 95,380 39 100 198,860 


20 17,140 12Apago+vPDF Brhnancegr2: 





17-31 (Objective 17-3) In the audit of Price Seed Company for the year ended September 30, 
the auditor set a tolerable misstatement of $50,000 at an ARIA of 10%. A PPS sample of 100 
was selected from an accounts receivable population that had a recorded balance of 
$1,975,000. The following table shows the differences uncovered in the confirmation process: 





Accounts Accounts 

Receivable Receivable per 
per Records Confirmation Follow-up Comments by Auditor 
1. $2,728.00 $2,498.00 Pricing error on two invoices. 

2. $5,125.00 -0- Customer mailed check 9/26; company received check 10/3. 
3. $3,890.00 $1,190.00 Merchandise returned 9/30 and counted in inventory; credit 
was issued 10/6. 

4. $ 791.00 $ 815.00 Footing error on an invoice. 

5. $ 548.00 $ 1,037.00 Goods were shipped 9/28; sale was recorded on 10/6. 

6. $3,115.00 $3,190.00 Pricing error on a credit memorandum. 

7. $1,540.00 -0- Goods were shipped on 9/29; customer received goods 10/3; 


sale was recorded on 9/30. 





a. Calculate the upper and lower misstatement bounds on the basis of the client mis- | Required 
statements in the sample. 


b. Is the population acceptable as stated? If not, what options are available to the auditor 
at this point? Which option should the auditor select? Explain. 


17-32 (Objective 17-3) You intend to use MUS as a part of the audit of several accounts for 
Roynpower Manufacturing Company. You have done the audit for the past several years, 
and there has rarely been an adjusting entry of any kind. Your audit tests of all tests of 
controls and substantive tests of transactions cycles were completed at an interim date, and 
control risk has been assessed as low. You therefore decide to use an ARIA of 10% and an 
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Required 


Required 


EPER of 0% for all tests of details of balances. You also decide to use a 100% misstatement 
assumption for both overstatements and understatements. 

You intend to use MUS in the audit of the three most material asset balance sheet 
account balances: accounts receivable, inventory, and marketable securities. You feel justi- 
fied in using the same ARIA for each audit area because of the low assessed control risk. 

The recorded balances and related information for the three accounts are as follows: 


Recorded Value 





Accounts receivable $ 3,600,000 
Inventory 4,800,000 
Marketable securities 1,600,000 

$ 10,000,000 





Net earnings before taxes for Roynpower are $2,000,000. You decide that a combined 
misstatement of $100,000 is allowable for the client. 

The audit approach to be followed will be to determine the total sample size needed for all 
three accounts. A sample will be selected from all $10 million, and the appropriate testing for 
a sample item will depend on whether the item is a receivable, inventory, or marketable security. 
The audit conclusions will pertain to the entire $10 million, and no conclusion will be made 
about the three individual accounts unless significant misstatements are found in the sample. 

a. Evaluate the audit approach of testing all three account balances in one sample. 

b. Calculate the required sample size for all three accounts. 

c. Calculate the required sample size for each of the three accounts, assuming you decide 
that the tolerable misstatement in each account is $100,000. (Recall that tolerable 
misstatement equals preliminary judgment about materiality for MUS.) 

d. Assume that you select the random sample using computer software. How will you 
identify which sample item in the population to audit for the number 4,627,871? 
What audit procedures will be performed? 

e. ‘Apa OP HF sappy ha treme gees for testing and you find one mis- 
stat€mentin inventory. The recorded value is $987.12 and the audit value is $887.12. 
Calculate the misstatement bounds for the three combined accounts and reach 
appropriate audit conclusions. 


17-33 (Objectives 17-2, 17-3, 17-4, 17-5) An audit partner is developing an office training 
program to familiarize her professional staff with audit sampling decision models applicable 
to the audit of dollar-value balances. She wishes to demonstrate the relationship of sample 
sizes to population size and estimated population exception rate and the auditor’s specifica- 
tions as to tolerable misstatement and ARIA. The partner prepared the following table to 
show comparative population characteristics and audit specifications of the two populations: 


Audit Specifications as to a 








Characteristics of Population 1 Sample from Population 1 
Relative to Population 2 Relative to a Sample from Population 2 
Estimated Population Tolerable 
Size Exception Rate Misstatement ARIA 
Case 1 Equal Equal Equal Lower 
Case 2 Smaller Smaller Equal Higher 
Case 3 Larger Equal Equal Lower 
Case 4 Equal Larger Larger Equal 
Case 5 Larger Equal Smaller Higher 





In items (1) through (5) you are to indicate for the specific case from the table the required 
sample size to be selected from population | relative to the sample from population 2. 

(1) In case 1, the required sample size from population 1 is 

(2) In case 2, the required sample size from population 1 is 

(3) In case 3, the required sample size from population 1 is 

(4) In case 4, the required sample size from population 1 is 

(5) In case 5, the required sample size from population 1 is 
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Your answer choice should be selected from the following responses: 

a. Larger than the required sample size from population 2. 

b. Equal to the required sample size from population 2. 

c. Smaller than the required sample size from population 2. 

d. Indeterminate relative to the required sample size from population 2.* 
17-34 (Objective 17-5) In auditing the valuation of inventory, the auditor, Claire Butler, 
decided to use difference estimation. She decided to select an unrestricted random sample 
of 80 inventory items from a population of 1,840 that had a book value of $175,820. Butler 
decided in advance that she was willing to accept a maximum misstatement in the popu- 
lation of $6,000 at an ARIA of 5 percent. There were eight misstatements in the sample, 
which were as follows: 








Audit Value Book Value Sample Misstatements 

$ 812.50 $ 740.50 $(72.00) 
12.50 78.20 65.70 
10.00 51.10 41.10 
25.40 61.50 36.10 
600.10 651.90 51.80 

12 0 (12) 
51.06 81.06 30.00 
83.11 104.22 21.11 
Total $1,594.79 $1,768.48 $173.69 





a. Calculate the point estimate, the computed precision interval, the confidence interval, 
and the confidence limits for the population. Label each calculation. Use a computer 
for this purpose (instructor’s option). 

b. Should Butler accept the book value of the population? Explain. 

c. What options are available to her at this point? 


17-35 (Objective 17-5) Marjorie Jorge Ois PDE: Enhamcéetyanding 
accounts payable for Marygold Hardware, a Targe, single-location retail hardware store. 
There are 650 vendors listed on the outstanding accounts payable list. She has eliminated 
from the population 40 vendors that have large ending balances and will audit them 
separately. There are now 610 vendors. 

She plans to do one of three tests for each item in the sample: examine a vendotr’s state- 
ment in the client’s hands, obtain a confirmation when no statement is on hand, or exten- 
sively search for invoices when neither of the first two is obtained. There is no accounts 
payable master file available, and a large number of misstatements are expected. Marjorie 
has obtained facts or made audit judgments as follows: 





ARIR 20% ARIA 10% 
Tolerable misstatement $§ 45,000 Expected misstatement $ 20,000 
Recorded book value $ 600,000 Estimated standard deviation $ 280 





a. Under what circumstances is it desirable to use difference estimation in the situation 
described? Under what circumstances is it undesirable? 

b. Calculate the required sample size for the audit tests of accounts payable using 
difference estimation, assuming that ARIR is ignored. 

c. Assume that the auditor selects exactly the sample size calculated in part b. The point 
estimate calculated from the sample results is $21,000 and the estimated population 
standard deviation is 267. Is the population fairly stated as defined by the decision 
rule? Explain what causes the result to be acceptable or unacceptable. 

d. Calculate the required sample size for the audit tests of accounts payable, assuming 
that the ARIR is considered. 

e. Explain the reason for the large increase of the sample size resulting from including 
ARIR in determining sample size. 


*AICPA adapted. 
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CASES 


17-36 (Objective 17-3) You are doing the audit of Peckinpah Tire and Parts, a wholesale 
auto parts company. You have decided to use monetary unit sampling (MUS) for the audit 
of accounts receivable and inventory. The following are the recorded balances: 


Accounts receivable $12,000,000 
Inventory $23,000,000 





You have already made the following judgments: 





Materiality for planning purposes $800,000 
Acceptable audit risk 5% 
Inherent risk: 
Accounts receivable 80% 
Inventory 100% 
Assessed control risk: 
Accounts receivable 50% 
Inventory 80% 





Analytical procedures have been planned for inventory, but not for accounts receivable. 
The analytical procedures for inventory are expected to have a 60% chance of detecting a 
material misstatement should one exist. 

You have concluded that it will be difficult to alter sample size for accounts receivable 
confirmation once confirmations are sent and replies are received. However, inventory tests 
can be reopened without great difficulty. 

After discussions with the client, you believe that the accounts are in about the same 
condition this year as they were last year. Last year no misstatements were found in the confir- 
mation of accounts receivable. Inventory tests revealed an overstatement amount of about 1%. 


F ts pr i essary in deciding the factors affecting 
sample tae OF bE seis tate Sdsen, estimate sample size judgmentally. 
Required a. Plan the sample size for the confirmation of accounts receivable using MUS. 


b. Plan the sample size for the test of pricing of inventories using MUS. 


c. Plan the combined sample size for both the confirmation of accounts receivable and 
the price tests of inventory using MUS. 


d. (Instructor’s option) Using an electronic spreadsheet, generate a list of random dollars 
in generation order and in ascending order for the sample of accounts receivable items 
determined in part a. 


17-37 (Objectives 17-2, 17-3) You have just completed the accounts receivable confir- 
mation process in the audit of Danforth Paper Company, a paper supplier to retail shops 
and commercial users. Following are the data related to this process: 





Accounts receivable recorded balance $ 2,760,000 
Number of accounts 7,320 
A nonstatistical sample was taken as follows: 
All accounts over $10,000 (23 accounts) $ 465,000 
77 accounts under $10,000 $ 81,500 
Tolerable misstatement for the confirmation test $ 100,000 


Inherent and control risk are both high 
No relevant analytical procedures were performed 





The following are the results of the confirmation procedures: 





Recorded Value Audited Value 
Items over $10,000 $ 465,000 $ 432,000 
Items under $10,000 81,500 77,150 


(continued on following page) 
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Recorded Value Audited Value 





Individual misstatements for items under $10,000: 


Item 12 5,120 4,820 
Item 19 485 385 
Item 33 1,250 250 
Item 35 3,910) 3,875 
Item 51 1,850 1,825 
Item 59 4,200 3,780 
Item 74 2,405 0 





a. Evaluate the results of the nonstatistical sample. Consider both the direct implications 
of the misstatements found and the effect of using a sample. 


b. Assume that the sample was a PPS sample. Evaluate the results using monetary unit 
sampling. 


c. (Instructor’s option) Do the preceding analyses using an electronic spreadsheet. 


Required 


ACL PROBLEM 


17-38 (Objective 17-3) This problem requires the use of ACL software, which is included in 
the CD attached to the text. Information about installing and using ACL and solving this 
problem can be found in Appendix, pages 838-842. You should read all of the reference 
material, especially the material on sampling, to answer questions a—e. For this problem use 
the “Inventory” file in the “Inventory_Review” subfolder under tables in Sample_Project. 
Suggested commands, where applicable, are indicate at the end of the problem requirements. 


a. Calculate the sample size and sampling interval for an MUS sample based on inven- 
tory value at cost (Value). Use a confidence level of 90%, materiality of $40,000, and 
expected errors of $2,500. re Sample Size; select “monetary” radio 


button) ago PDF Enhancer 


b. What is the sampling size and = pling hae if you increase materiality to $50,000 
and decrease expected errors to $1,000? 

c. Select the sample based on the sampling interval determined in part a. (Sampling 
/Sample Records; select “Sample type” as MUS. For “Sample Parameters” select fixed 
interval and enter the interval from part a.; use a random start of 3179.) 

d. How many items were selected for testing? Why is this number less than the sample 
size determined in part a? 

e. What is the largest item selected for testing? How many sample items are larger than the 
sampling interval? How many items are larger than the sampling interval in the population? 


ACD 


Required 


INTERNET PROBLEM 17-1: 


MONETARY UNIT SAMPLING CONSIDERATIONS 





Monetary unit sampling (MUS) is the most commonly used statistical method of sampling 
for tests of details because of its simplicity and its ability to provide statistical results in 
dollars. Read an article titled “Monetary-Unit Sampling Using Microsoft Excel” that 
appeared in the May 2005 issue of The CPA Journal (www.nysscpa.org/cpajournal/2005/ 
505/essentials/p36.htm) to answer the following questions. 


a. The authors suggest that there are three critical steps in applying MUS. What are these 
steps? 

b. How do the authors indicate that an MUS sample size is determined? 

c. What two factors must be considered when evaluating the results of the sample? 


Required 
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CHAPTERS 


18 - 23 





APPLICATION OF THE AUDIT 
PNOICESS TO Olsen CVCuUES 





Each chapter in Part 4 demonstrates the relationship of internal controls, 
substantive tests of transactions, and analytical procedures to the related balance 
sheet and income statement accounts in the cycle and to test of details of balances. 

e Chapters 18 and 19 address the audit of the acquisition and payment 
cycle, including the audit of accounts payable and other liability accounts. 

e Chapter 20 covers the audit of the payroll and personnel cycle. 

e Chapter 21 addresses the audit of the inventory and warehousing cycle, 
including physical observation tests and the relationship of the inventory 
and warehousing cycle to other cycles. 

e Chapter 22 includes the audit of the capital acquisition and repayment cycle. 

e Chapter 23 is the audit of cash balances, which is covered last because 
cash is affected by the transactions in other cycles. 











AUDIT OF THE ACQUISITION 
AND PAYMENT CYCLE: 


LEARNING OBJECTIVES 








TESTS OF CONTROLS ei i ert 
! you should be able to 
B TA N a7 | VV E al E ii 18-1 Identify the accounts and the 
classes of transactions in the 
acquisition and payment cycle. 
OC F TRAN SACT| @) N S 18-2 Describe the business functions 
! and the related documents and 
records in the acquisition and 
AND ACCOUNTS PAYABLE fans 
18-3 Understand internal control, 
and design and perform tests of 
controls and substantive tests of 
False Purchases Camouflage Overstated Profits tates ions fot eacausitan 
. . . ; and payment cycle. 
Comptronix Corporation announced that senior members of its manage- 18-4 Describe the methodology for 
ment team overstated profits, and there would be material adjustments to designing tests of details of 
the prior years’ audited financial statements. Central to the fraud was the balances for accounts payable 
use of fictitious purchases of large equipment items to overstate fixed using the audit risk model. 
assets and hide fictitious sales. 18-5 Design and perform analytical 
; Apago PDF Enhancer procedures for accounts payable. 
The senior executives circumvented Comptronix’s existing internal controls 18-6 Design and perform tests of 
by bypassing the purchasing and receiving departments so that no one at deteiis off belemecs Ger aecenals 
Comptronix could discover the scheme. Comptronix employees usually payable, including out-of-period 
created a fairly extensive paper trail for equipment purchases. Company liability tests. 
internal controls over acquisition and cash disbursement transactions 18-7 Distinguish the reliability of 
typically required a purchase order, receiving report, and vendor invoice vendors’ invoices, vendors’ 
before payment could be authorized by the Chief Operating Officer or the AAS ame CNT EH 
. . of accounts payable as audit 
controller/treasurer, who were both participants in the fraud. As a result, es 
the executives were able to bypass controls over cash disbursements and 


authorize payment for nonexistent purchases without creating any docu- 
ments for the fictitious transactions. 





The company also created fictitious sales and related receivables. The company issued checks to pay for the false 
purchase transactions. The checks were then redeposited into the company’s bank account and recorded as 
collections on the fictitious receivables. As a result, it appeared that the fictitious sales were collected, and that 
payments were made to support the false fixed asset purchases. 


The fraud scheme grossly exaggerated the company’s performance by reporting profits when the company was 
actually incurring losses. On the day that the public announcement of the fraud was made, Comptronix’s common 
stock price declined abruptly by 72 percent! The SEC ultimately charged the executives with violating the antifraud 
provisions of the Securities Act of 1933 and the Securities Exchange Act of 1934. The SEC permanently barred the 
executives from serving as officers or directors of any public company, ordered them to repay bonuses and trading 
losses avoided, and imposed civil monetary penalties against them. 


Source: Accounting and Auditing Enforcement Release No. 543, Commerce Clearing House, Inc., Chicago. 


ell now discuss the acquisition and payment cycle. The acquisition of goods and services includes the 
W scquisition of such things as raw materials, equipment, supplies, utilities, repairs and maintenance, and 
research and development. In the first part of the chapter, we'll examine assessing control risk and designing tests of 
controls and substantive tests of transactions for the classes of transactions in the acquisition and payment cycle. 
Then, we'll cover performing tests of details of balances for accounts payable. 
As with the sales and collection cycle, auditors need to understand the business functions and documents and 
records in a company before they can assess control risk and design tests of controls and substantive tests of 
transactions. We first examine two related topics: 


1. The acquisition and payment cycle classes of transactions and account balances in a typical company 
2. Typical documents and records used in the acquisition and payment cycle 


ACCOUNTS AND CLASSES OF TRANSACTIONS IN 


THE ACQUISITION AND PAYMENT CYCLE 





OBJECTIVE 18-1 





Identify the accounts and 
the classes of transactions in 
the acquisition and payment 


cycle. 





The objective in the audit of the acquisition and payment cycle is to evaluate whether 
the accounts affected by the acquisitions of goods and services and the cash disburse- 
ments for those acquisitions are fairly presented in accordance with accounting 
standards. Figure 18-1 shows the way accounting information flows through the various 
accounts in the acquisition and payment cycle. 

There are three classes of transactions included in the cycle: 


1. Acquisitions of goods and services 
2. Cash disbursements 
3. Purchase returns and allowances and purchase discounts 


epee Accounts in the Acquisition and Payment Cycle ) 


Cash in bank 








Raw material purchases 











Accounts payable 


oe Acquisitions | 7" 
Cash of goods 

disbursements and 
services 





Property, plant, 
and equipment 


Ss 


Prepaid expenses 


Purchase returns 
and allowances Purchase 


returns and 


-_ allowances 
Purchase 
discounts 











Purchase discounts 



















Selling expense 
control account 


Manufacturing expense 
control account 


Administrative expense 
control account 























Subsidiary Subsidiary 
- accounts accounts 
Subsidiary Commissions Supplies 
accounts : Travel expense Officers travel 
Repair and maintenance Delivery expense Legal fees 
Taxes” Repairs — Auditing fees 
Supplies Advertising Taxes 
Freight in 
Utilities 
L a4 
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Ten typical accounts involved in the acquisition and payment cycle are shown by T 
accounts in Figure 18-1. For simplicity, we show only the control accounts for the three 
major categories of expenses used by most companies. For each control account, 
examples of the subsidiary expense accounts are also given. Note the large number of 
accounts affected by this cycle. It is therefore not surprising that auditing the acquisition 
and payment cycle often takes more time than any other cycle. 

Figure 18-1 shows that every transaction is either debited or credited to accounts 
payable. Because many companies make acquisitions directly by check or through 
petty cash, the figure is an oversimplification. We assume that acquisitions made for 
cash are processed in the same manner as those made by accounts payable. 


BUSINESS FUNCTIONS IN THE CYCLE AND 


RELATED DOCUMENTS AND RECORDS 





The acquisition and payment cycle involves the decisions and processes necessary for 
obtaining the goods and services for operating a business. The cycle typically begins 
with the initiation of a purchase requisition by an authorized employee who needs the 
goods or services, and it ends with payment on accounts payable. In the following 
discussion, the example of a small manufacturing company that makes tangible 
products for sale to third parties is used, but the principles covered here also apply to 
service companies, government entities, and other types of organizations. 

The third column of Table 18-1 (p. 604) lists four business functions that occur in 
every business in recording the three classes of transactions in the acquisition and 
payment cycle. The first three functions are for recording the acquisition of goods and 
services on account, and the fourth function is for recording cash disbursements for 


payments to vendors. For simplicity, our illustration dges not show processing 
purchase returns and allowances wApagedPDE GSKeturns 
and allowances and purchase discounts business functions also occur in this cycle, we 
omit them here because the amounts are not significant for most companies. 

Next, we examine in more detail each of the four business functions, paying 
particular attention to the typical documents and records used. These are listed in the 
fourth column of Table 18-1. 


The request for goods or services by the client’s personnel is the starting point for the 
cycle. The exact form of the request and the required approval depend on the nature of 
the goods and services and company policy. Common documents include: 


Purchase Requisition A purchase requisition is used to request goods and services 
by an authorized employee. This may take the form of a request for such acquisitions as 
materials by production staff or the storeroom supervisor, outside repairs by office or 
plant personnel, or insurance by the vice president in charge of property and equip- 
ment. Companies often rely on pre-specified reorder points used by the computer to 
initiate inventory purchase requisitions automatically. 


Purchase Order A purchase order is a document used to order goods and services 
from vendors. It includes the description, quantity, and related information for goods 
and services the company intends to purchase and is often used to indicate authorization 
of the acquisition. Companies often submit purchase orders electronically to vendors 
who have made arrangements for electronic data interchange (EDI). 


The receipt by the company of goods or services from the vendor is a critical point in 
the cycle because it is when most companies first recognize the acquisition and related 
liability on their records. When goods are received, adequate control requires 
examination for description, quantity, timely arrival, and condition. A receiving 
report is a paper or electronic document prepared at the time goods are received. It 


OBJECTIVE 18-2 


Describe the business 
functions and the related 


documents and records in 


the acquisition and payment 
cycle. 








Processing 
Purchase Orders 


Receiving 
Goods and Services 
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TABLE 18-1 Classes of Transactions, Accounts, Business Functions, and Related Documents and Records 
for the Acquisition and Payment Cycle 
Classes of 
Transactions Accounts Business Functions Documents and Records 
Acquisitions Inventory Processing purchase orders Purchase requisition 
Property, plant, and equipment Purchase order 
Prepaid expenses 
Leasehold improvements Receiving goods and services Receiving report 
Accounts payable 
Manufacturing expenses Recognizing the liability Vendor's invoice 
Selling expenses Debit memo 
Administrative expenses Voucher 
Acquisitions transaction file 
Acquisitions journal or listing 
Accounts payable master file 
Accounts payable trial balance 
Vendor's statement 
Cash disbursements Cash in bank (from cash Processing and recording cash Check or electronic payment 
disbursements) disbursements Cash disbursements transaction file 
Accounts payable Cash disbursements journal or listing 
Purchase discounts 
x y 
includes a description of the goods, the quantity received, the date received, and other 
relevant data. 
Recognizing The proper recognition of the liability for the receipt of goods and services requires 


the Liability promp4,and_accurate en Th¢ initial recording affects the financial statements 
and ARAGa, PR: om ARC ST nics must take care to include all 
acquisition transactions, only acquisitions that occurred, and at the correct amounts. 
Common documents and records include: 


Vendor’s Invoice A vendor’s invoice is a document received from the vendor and shows 
the amount owed for an acquisition. It indicates the description and quantity of goods 
and services received, price (including freight), cash discount terms, date of the billing 
and total amount. The vendor’s invoice is important because it indicates the amount 
recorded in the acquisition transaction file. For companies using EDI, the vendor’s 
invoice is transmitted electronically, which affects how the auditor evaluates evidence. 


Debit Memo A debit memo is also a document received from the vendor and 
indicates a reduction in the amount owed to a vendor because of returned goods or an 
allowance granted. It often takes the same form as a vendor’s invoice, but it supports 
reductions in accounts payable rather than increases. 


Voucher A voucher is commonly used by organizations to establish a formal means 
of recording and controlling acquisitions, primarily by enabling each acquisition 
transaction to be sequentially numbered. Vouchers include a cover sheet or folder for 
containing documents and a package of relevant documents such as the purchase 
order, copy of the packing slip, receiving report, and vendor’s invoice. After payment, a 
copy of the check is added to the voucher package. 


Acquisitions Transaction File This is a computer-generated file that includes all 
acquisition transactions processed by the accounting system for a period, such as a day, 
week, or month. It contains all information entered into the system and includes 
information for each transaction, such as vendor name, date, amount, account classifi- 
cation or classifications, and description and quantity of goods and services purchased. 
The file can also include purchase returns and allowances or there can be a separate file 
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for those transactions. Depending on the company’s needs, the information in the 
acquisitions transaction file is used for a variety of records, listings, or reports, such as 
an acquisitions journal, accounts payable master file, and transactions for a certain 
account balance or division. 


Acquisitions Journal or Listing The acquisitions journal or listing, often referred 
to as the purchases journal, is generated from the acquisitions transaction file and 
typically includes the vendor name, date, amount, and account classification or classi- 
fications for each transaction, such as repair and maintenance, inventory, or utilities. It 
also identifies whether the acquisition was for cash or accounts payable. The journal or 
listing can cover any time period, typically a month. The journal or listing includes 
totals of every account number included for the time period. The same transactions 
included in the journal or listing are also posted simultaneously to the general ledger 
and, if they are on account, to the accounts payable master file. 


Accounts Payable Master File An accounts payable master file records acquisitions, 
cash disbursements, and acquisition returns and allowances transactions for each 
vendor. The master file is updated from the acquisition, returns and allowances, and cash 
disbursement computer transaction files. The total of the individual account balances in 
the master file equals the total balance of accounts payable in the general ledger. A 
printout of the accounts payable master file shows, by vendor, the beginning balance in 
accounts payable, each acquisition, acquisition return and allowance, cash disbursement, 
and the ending balance. Many companies do not maintain an accounts payable master 
file by vendor. These companies pay on the basis of individual vendor’s invoices. There- 
fore, the total of unpaid vendors’ invoices in the master file equals total accounts payable. 


Accounts Payable Trial Balance An accounts payable trial balance listing includes 
the amount owed to each vendor or for each invoice or voucher at a point in time. It is 
prepared directly from the accounts payable master file. 


Vendor’s Statement A vendor’s spat go PPP tEpyha nealpby the 


vendor and indicates the beginning BalanTe, acquisitions, returns and allowances, 
payments to the vendor, and ending balance. These balances and activities are the 
vendor's representations of the transactions for the period, not the client’s. Except for 
disputed amounts and timing differences, the client’s accounts payable master file 
should be the same as the vendor’s statement. 


The payment for goods and services represents a significant activity for all entities. This 
activity directly reduces balances in liability accounts, particularly accounts payable. 
Documents associated with the disbursement process that auditors examine include: 


Check This document is commonly used to pay for the acquisition when payment is 
due. Most companies use computer-prepared checks based on information included in 
the acquisition transactions file at the time goods and services are received. Checks are 
typically prepared in a multi-copy format, with the original going to the payee, one 
copy filed with the vendor’s invoice and other supporting documents, and another filed 
numerically. In most cases, individual checks are recorded in a cash disbursements 
transaction file. 

After a check is signed by an authorized person, it is an asset. Therefore, signed 
checks should be mailed by the signer or a person under the signer’s control. When 
cashed by the vendor and cleared by the client’s bank, it is called a cancelled check. At 
that point it is no longer an asset, but now is a document. In many EDI arrangements, 
the company submits payments to the vendor electronically through an electronic 
funds transfer (EFT) between the company’s bank and the vendor’s bank. 


Cash Disbursements Transaction File This is a computer-generated file that 
includes all cash disbursements transactions processed by the accounting system for a 
period, such as a day, week, or month. It includes the same type of information 
discussed for the acquisitions transaction file. 


Processing 
and Recording 
Cash Disbursements 
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Cash Disbursements Journal or Listing This is a listing or report generated from 
the cash disbursements transaction file that includes all transactions for any time 
period. The same transactions, including all relevant information, are included in the 
accounts payable master file and general ledger. 


METHODOLOGY FOR DESIGNING TESTS OF CONTROLS 


AND SUBSTANTIVE TESTS OF TRANSACTIONS 





OBJECTIVE 18-3 In a typical audit, the most time-consuming accounts to verify by substantive tests of 
details of balances are accounts receivable, inventory, fixed assets, accounts payable, 
and expense accounts. Notice that four of these five are directly related to the acquisi- 





Understand internal control, 
and design and perform tests 


of controls and substantive tion and payment cycle. If the auditor can reduce tests of details of the account 
tests of transactions for the balances by using tests of controls and substantive tests of transactions to verify the 
acquisition and payment effectiveness of internal controls for acquisitions and cash disbursements, the net time 
oycle. saved can be dramatic. Tests of controls and substantive tests of transactions for the 





acquisition and payment cycle receive a considerable amount of attention, especially 
when the client has effective internal controls. 

Tests of controls and substantive tests of transactions for the acquisition and 
payment cycle are divided into two broad areas: 


1. Tests of acquisitions, which concern three of the four business functions 
discussed earlier in this chapter: processing purchase orders, receiving goods 
and services, and recognizing the liability 

2. Tests of payments, which concern the fourth function, processing and 
recording cash disbursements 


Figure 18-2 illustrates the methodology for designing tests of controls and sub- 
stanti PagoraPDEns Enhancexs and payment cycle. It is the same 
methodology used in earlier chapters. Next, let’s examine each part of Figure 18-2, 
starting with understanding internal control. 


Understand The auditor gains an understanding of internal control for the acquisition and payment 

Internal Control cycle as part of performing risk assessment procedures by studying the client’s flow- 
charts, reviewing internal control questionnaires, and performing walkthrough tests for 
acquisition and cash disbursement transactions. The procedures for understanding 
internal control in the acquisition and payment cycle are similar to the procedures 
performed in other transaction cycles, as discussed in earlier chapters. 


Assess Planned Next, the key internal controls for each of the business functions described earlier in 

Control Risk this chapter are examined. These are authorization of purchases, separation of the 
custody of the received goods from other functions, timely recording and independent 
review of transactions, and authorization of payments to vendors. 


Authorization of Purchases Proper authorization for acquisitions ensures that the 
goods and services acquired are for authorized company purposes, and it avoids the 
acquisition of excessive or unnecessary items. Most companies require different levels of 
authorization for different types of acquisitions or dollar amounts. For example, acqui- 
sitions of fixed assets in excess of a specified dollar limit require approval by the board of 
directors; items acquired relatively infrequently, such as insurance policies and long-term 
service contracts, are approved by certain officers; supplies and services costing less than 
a designated amount are approved by supervisors and department heads; and some types 
of raw materials and supplies are reordered automatically when they fall below a predeter- 
mined level, often by direct communication with vendors’ computers. 

After the purchase requisition for an acquisition has been approved, a purchase 
order to acquire the goods or services must be initiated. A purchase order is issued to a 
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Methodology for Designing Tests of Controls and Substantive 
Tests of Transactions for the Acquisition and Payment Cycle 


Understand internal 
control— 
acquisitions and 
cash disbursements 


Assess planned 
control risk— 
acquisitions and 
cash disbursements 


Determine extent 
of testing controls* 
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transaction-related 
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* Extent of testing of controls is determined by planned reliance on controls. For accelerated filer 
public companies, testing must be sufficient to issue an opinion on internal control over 
financial reporting. 
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vendor for a specified item at a certain price to be delivered at or by a designated time. 
The purchase order, issued either in written or electronic form, is generally viewed as a 
legal document, and represents an offer to buy the goods or services. 

Companies commonly establish purchasing departments to ensure an adequate 
quality of goods and services at a minimum price. For effective internal control, the 
purchasing department should be separate from those who authorize the acquisition or 
receive the goods. All purchase orders should be prenumbered to permit easier accounting 
for all outstanding purchases orders and should be designed to minimize the likelihood of 
unintentional omissions on the form when goods are ordered. 


Separation of Asset Custody from Other Functions Most companies have the 
receiving department initiate a receiving report as evidence of the receipt and 
examination of goods. One copy is normally sent to the raw materials storeroom and 
another to the accounts payable department for their information needs. To prevent 
theft and misuse, the goods should be physically controlled from the time of their 
receipt until their use or disposal. The personnel in the receiving department should be 
independent of the storeroom personnel and the accounting department. Finally, the 
accounting records should transfer responsibility for the goods each time they are 
moved, from receiving to storage, from storage to manufacturing, etc. 


Timely Recording and Independent Review of Transactions In some companies, 
the recording of the liability for acquisitions is made on the basis of the receipt of 
goods and services. In others, recording is deferred until the vendor’s invoice is 
received. In either case, the accounts payable department typically has responsibility 
for verifying the appropriateness of acquisitions. This is done by comparing the details 
on the purchase order, the receiving report, and the vendor’s invoice to determine that 
the descriptions, prices, quantities, terms, and freight on the vendor’s invoice are 
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Determine Extent of 
Testing of Controls 


Design Tests 

of Controls and 
Substantive Tests 
of Transactions 
for Acquisitions 


correct. Typically, the accounts payable department also verifies extensions, footings, 
and account distributions. In some cases, computer software matches documents and 
verifies invoice accuracy automatically. The accounts payable department should also 
account for all receiving reports to assure that the completeness objective is satisfied. 

An important control in the accounts payable and information technology 
departments is the requirement that personnel who record acquisitions do not have 
access to cash, marketable securities, and other assets. Adequate documents and records, 
proper procedures for record keeping, and independent checks on performance are also 
necessary controls in the accounts payable function. 


Authorization of Payments The most important controls over cash disbursements 
include: 
* The signing of checks by an individual with proper authority 
* Separation of responsibilities for signing checks and performing the accounts 
payable function 
* Careful examination of supporting documents by the check signer at the time 
the check is signed 


The checks should be prenumbered to make it easier to account for all checks and 
printed on special paper that makes it difficult to alter the payee or amount. Companies 
should take care to provide physical control over blank, voided, and signed checks. 
They should also have a method of canceling supporting documents to prevent their 
reuse as support for another check at a later time. A common method is to document 
the check number on the supporting documents. 


After auditors identify key internal controls and deficiencies, they assess control risk. 
When auditors intend to rely on controls to support a preliminary control risk assessment 
below maximum, the auditor performs tests of controls to obtain evidence that controls are 
operating effectively. As the operating effectiveness of controls improves and is supported 
by add Pa GOof BDA, ih TAGE reduce substantive testing. Of course, 
if the client is an accelerated filer public company, the auditor must document and test 
controls sufficiently to issue an opinion on internal control over financial reporting. 


Table 18-2 summarizes key internal controls, common tests of controls, and common sub- 
stantive tests of transactions for each transaction-related audit objective. We assume the 
existence of a separate acquisitions journal or listing for recording all acquisitions. 

As you examine Table 18-2, you should: 

* Relate each of the internal controls to transaction-related audit objectives 

* Relate tests of controls to internal controls 

* Relate substantive tests of transactions to transaction-related audit objectives 

after considering controls and deficiencies in the system 


The audit evidence for an audit engagement will vary with the internal controls 
and other circumstances. Significant audit efficiencies can be achieved on many audits 
when controls are operating effectively. 





An Apple Computer manager was accused of countries in Asia to receive the kickbacks, and 
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APPLE MANAGER 
ACCUSED OF 
RECEIVING 
KICKBACKS 


RELATED 
TO iPHONE 
AND iPOD 


receiving over $1 million in kickbacks from Asian 
suppliers of iPhone and iPod accessories. The 
manager transmitted confidential information to 
the suppliers, which allowed them to negotiate 
favorable contracts with Apple. 

The alleged scheme involved a chain of U.S. 
and foreign bank accounts, as well as a front 
company to receive payments. The manager 
reportedly opened bank accounts in several 
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also received payments directly when traveling 
to Asia. The payments were referred to by code 
words such as “sample” to avoid detection by 
co-workers. 


Source: Adapted from Pete Carey, “Apple 
Manager Indicted in Kickback Scheme,” 
San Jose Mercury News, August 13, 2010 
(www.mercurynews.com). 








TABLE 18-2 





Summary of Transaction-Related Audit Objectives, Key Controls, Tests of Controls, and 
Substantive Tests of Transactions for Acquisitions 





Transaction-Related 
Audit Objectives 


Key Internal Controls 


Common Tests of Controls 


Common Substantive Tests 
of Transactions 





Recorded acquisitions are 
for goods and services 
received, consistent with 
the best interests of the 
client (occurrence). 


Purchase requisition, purchase 
order, receiving report, 
and vendor's invoice are 
attached to the voucher* 

Acquisitions are approved at 
the proper level. 

Computer accepts entry of 
purchases only from 
authorized vendors in the 
vendor master file. 

Documents are cancelled to 
prevent their reuse. 

Vendors’ invoices, receiving 
reports, purchase orders, 
and purchase requisitions 
are internally verified* 


Examine documents in 
voucher package for 
existence. 


Examine indication of 
approval. 

Attempt to input transactions 
with valid and invalid 
vendors. 


Examine indication of 
cancellation. 

Examine indication of internal 
verification. 


Review the acquisitions journal, 
general ledger, and accounts 
payable master file for large 
or unusual amounts.t 

Examine underlying documents 
for reasonableness 
and authenticity (vendors’ 
invoices, receiving reports, 
purchase orders, and 
purchase requisitions)* 

Examine vendor master file 
for unusual vendors. 

Trace inventory acquisitions 
to inventory master file. 

Examine fixed assets acquired. 





Existing acquisition 
transactions are recorded 
(completeness). 


Purchase orders are pre- 
numbered and accounted for. 

Receiving reports are pre- 
numbered and accounted for* 

Vouchers are prenumbered and 
accounted for. 


Account for a sequence of 
purchase orders. 

Account for a sequence of 
receiving reports. 

Account for a sequence of 
vouchers. 


Trace from a file of receiving 
reports to the acquisitions 
journal* 

Trace from a file of vendors’ 
invoices to the acquisitions 
journal. 





Recorded acquisition 
transactions are accurate 
(accuracy). 


Calculations and amounts are 
internally verified. 

Batch totals are compared with 
computer summary reports. 


Acquisitions are approved for 
prices and discounts. 


Examine indication of internal 
verification. 

Examine file of batch totals 
for initials of data control 
clerk; compare totals to 
summary reports. 


Examine indication of approval. 


Compare recorded transactions 
in the acquisitions journal 
with the vendor's invoice, 
receiving report, and other 
supporting documentation* 

Recompute the clerical 
accuracy on the vendor's 
invoice, including discounts 
and freight. 





Acquisition transactions are 
correctly included in 
the accounts payable 
and inventory master 
files and are correctly 
summarized (posting 
and summarization). 


Accounts payable master file 
contents are internally 
verified. 

Accounts payable master file 
or trial balance totals are 
compared with general 
ledger balances. 


Examine indication of internal 
verification. 


Examine initials on general 
ledger accounts indicating 
comparison. 


Test clerical accuracy by footing 
the journals and tracing 
postings to general ledger 
and accounts payable and 
inventory master files. 





Acquisition transactions are 
correctly classified 
(classification). 


An adequate chart of accounts 
is used. 

Account classifications are 
internally verified. 


Examine procedures manual 
and chart of accounts. 

Examine indication of internal 
verification. 


Compare classification with 
chart of accounts by referring 
to vendors’ invoices. 





Acquisition transactions are 
recorded on the correct 
dates (timing). 





Procedures require recording 
transactions as soon as 
possible after the goods 
and services have been 
received. 

Dates are internally verified. 


Examine procedures manual 
and observe whether 
unrecorded vendors’ 
invoices exist. 


Examine indication of internal 
verification. 


Compare dates of receiving 
reports and vendors’ invoices 
with dates in the acquisitions 
journal* 








*Receiving reports are used only for tangible goods and are therefore not used for services, such as utilities and repairs and maintenance. Often, vendors’ invoices 
are the only documentation available. 
tThis analytical procedure can also apply to other objectives, including completeness, accuracy, and timing. 
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Design Tests 

of Controls and 
Substantive Tests 

of Transactions for 
Cash Disbursements 


Four of the six transaction-related audit objectives for acquisitions deserve special 
attention and are therefore examined more closely. The correctness of many asset, 
liability, and expense accounts depends on the correct recording of transactions in the 
acquisitions journal, especially related to these four objectives. 


1. Recorded Acquisitions Are for Goods and Services Received, Consistent 
with the Best Interests of the Client (Occurrence) If the auditor is satisfied that 
the controls are adequate for this objective, tests for improper transactions and recorded 
transactions that did not occur can be greatly reduced. Adequate controls prevent the 
unintentional recording of acquisitions that did not occur, especially recording dupli- 
cate acquisitions. Adequate controls are also likely to prevent the client from including 
as a business expense or asset fraudulent transactions or those that primarily benefit 
management or other employees rather than the entity being audited. In some 
instances, improper transactions are obvious, such as the acquisition of unauthorized 
personal items by employees. In other instances, the appropriateness of a transaction is 
more difficult to evaluate, such as the payment of officers’ memberships to country 
clubs or expense-paid vacations to foreign countries for management and their families. 
If the controls over improper transactions or transactions that did not occur are 
inadequate, more extensive examination of supporting documentation is necessary. 


2. Existing Acquisitions Are Recorded (Completeness) Failure to record the 
acquisition of goods and services received understates accounts payable and may result 
in an overstatement of net income and owners’ equity. Therefore, auditors consider 
this an essential objective for acquisitions. It may be difficult in some audits to perform 
tests of details of balances to determine whether unrecorded transactions exist, so the 
auditor must rely on controls and substantive tests of transactions for this purpose. In 
addition, because the audit of accounts payable usually takes considerable time, 
effective internal controls, properly tested, can significantly reduce audit costs. 


3. Acipago: PDP irihanrcé sua) The extent of tests of details 


of many balance sheet and expense accounts depends on the auditor’s evaluation of the 
effectiveness of the internal controls over the accuracy of recorded acquisition trans- 
actions. For example, if the auditor believes that the fixed asset transactions are correctly 
recorded in the acquisitions journal, it is acceptable to vouch fewer current period 
acquisitions during tests of details of balances than if the controls are inadequate. 

When a client uses perpetual inventory records, tests of details of inventory can 
also be significantly reduced if the auditor believes the perpetual records are accurate. 
The controls over acquisitions included in the perpetual records are normally tested as 
a part of the tests of controls and substantive tests of transactions for acquisitions. 


4. Acquisitions Are Correctly Classified (Classification) Tests of details of certain 
individual accounts can be reduced if the auditor believes that internal controls are 
adequate to provide reasonable assurance of correct classification in the acquisitions 
journal. Although all accounts are affected to some degree by effective controls over 
classification, the two areas most affected are current period acquisitions of fixed assets, 
and all expense accounts, such as repairs and maintenance, utilities, and advertising. 

It is relatively time-consuming for auditors to perform documentation tests 
of current period fixed asset acquisitions and expense accounts for accuracy and 
classification. Therefore, time-savings can be significant when controls are effective. 


Table 18-3 for cash disbursements uses the same format as Table 18-2 (p. 609) for acqui- 
sitions. We assume for these controls and audit procedures that separate cash disburse- 
ments and acquisitions journals exist. Our comments about the methodology and process 
for developing audit procedures for acquisitions apply equally to cash disbursements. 
Auditors typically perform the acquisitions and cash disbursements tests at the 
same time. For a transaction selected for examination from the acquisitions journal, 
the vendor’s invoice, receiving report and other acquisition documentation are 
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TABLE 18-3 





Summary of Transaction-Related Audit Objectives, Key Controls, Tests of Controls, and 
Substantive Tests of Transactions for Cash Disbursements 





Transaction-Related 
Audit Objectives 


Key Internal Controls 


Common Tests of Controls 


Common Substantive Tests 
of Transactions 





Recorded cash disbursements 
are for goods and services 
actually received 
(occurrence). 


There is adequate segregation 
of duties between accounts 
payable and custody of 
signed checks or authority to 
disburse funds electronically. 

Supporting documentation 
is examined before signing 
of checks or electronic 
disbursement of funds by 
an authorized person. 

Approval of payment on 
supporting documents is 
given at the time checks 
are signed. 


Discuss with personnel and 
observe activities. 


Discuss with personnel and 
observe activities. 


Examine indication of 
approval. 


Review the cash disbursements 
journal, general ledger, and 
accounts payable master file 
for large or unusual amounts.** 

Trace the cancelled check or 
electronic bank records of 
disbursements to the related 
acquisitions journal entry and 
examine for payee name and 
amount. 

Examine cancelled check for 
authorized signature, proper 
endorsement, and cancellation 
by the bank or use bank records 
to verify payee for electronic 
payments. 

Examine supporting documents as 
part of the tests of acquisitions. 





Existing cash disbursement 
transactions are recorded 
(completeness). 


Checks are prenumbered 
and accounted for. 

The bank reconciliation is 
prepared monthly by an 
employee independent 
of recording cash 
disbursements or custody 
of assets. 


Account for a sequence of 
checks. 

Examine bank reconciliations 
and observe their 
preparation. 


Reconcile recorded cash 
disbursements with the 
cash disbursements on the 
bank statement (proof of 
cash disbursements). 





Recorded cash disbursement 
transactions are accurate 
(accuracy). 


Calculations and amounts 
are internally verified. 

The bank reconciliation is 
prepared monthly by an 
independent person. 


Examine indication of internal 
verification. 

Examine bank reconciliations 
and observe their 
preparation. 


Compare cancelled checks and 
electronic bank records of 
disbursements with the related 
acquisitions journal and cash 
disbursements journal entries. 

Recompute cash discounts. 

Prepare a proof of cash 
disbursements. 





Cash disbursement transactions 
are correctly included in the 
accounts payable master file 
and are correctly summarized 
(posting and summarization). 


Accounts payable master file 
contents are internally 
verified. 

Accounts payable master file 
or trial balance totals are 
compared with general 
ledger balances. 


Examine indication of internal 
verification. 

Examine initials on general 
ledger accounts indicating 
comparison. 


Test clerical accuracy by footing 
journals and tracing postings 
to general ledger and accounts 
payable master file. 





Cash disbursement 
transactions are correctly 
classified (classification). 


An adequate chart of 
accounts is used. 

Account classifications are 
internally verified. 


Examine procedures manual 
and chart of accounts. 

Examine indication of internal 
verification. 


Compare classification with 
chart of accounts by referring 
to vendors’ invoices and 
acquisitions journal. 





Cash disbursement 
transactions are recorded 
on the correct dates 
(timing). 





S 


Procedures require recording 
of transactions as soon as. 
possible after the check has 
been signed or electronically 
submitted for bank processing. 
Dates are internally verified. 


Examine procedures manual 
and observe whether 
unrecorded checks exist. 


Examine indication of internal 
verification. 


Compare dates on cancelled 
checks or electronic bank 
records with the cash 
disbursements journal. 

Compare dates on cancelled 
checks or electronic bank 
records with the bank 
cancellation date. 





*This analytical procedure can also apply to other objectives, including completeness, accuracy, and timing. 


Chapter 18 / AUDIT OF THE ACQUISITION AND PAYMENT CYCLE 


611 





Attributes Sampling 
for Tests of Controls 
and Substantive 
Tests of Transactions 


examined at the same time as the related cancelled check. Thus, the verification is done 
efficiently without reducing the effectiveness of the tests. 


Because of the importance of tests of controls and substantive tests of transactions for 
acquisitions and cash disbursements, the use of attributes sampling is common. The 
approach is similar to that used for the tests of controls and substantive tests of trans- 
actions for sales discussed in the “Statistical Audit Sampling” section on page 501 of 
Chapter 15. 

There are three important differences in acquisitions and payments compared to 
other cycles. 


1. As discussed in the beginning of the chapter, there are a larger number of accounts 
involved in this cycle, including both income statement and balance sheet accounts. 
The effect is an increased potential for classification misstatements, some of 
which are likely to affect income. An example is a misclassification between repair 
and maintenance expenses and fixed assets. As a result, auditors often reduce 
the tolerable exception rate, especially for the classification attribute. 

2. Itis more common in this cycle for transactions to require significant judgment, 
such as for leases and construction costs. These judgment requirements result in 
an increased likelihood of misstatements. As a result, auditors often reduce the 
tolerable exception rate for the accuracy attribute. 

3. The dollar amounts of individual transactions in the cycle cover a wide range. 
As a result, auditors commonly segregate large and unusual items and test 
them on a 100 percent basis. 


METHODOLOGY FOR DESIGNING TESTS OF 





DETAILS OF BALANCES FOR ACCOUNTS PAYABLE 


OBJECTIVE 18-4 





Describe the methodology 
for designing tests of details 
of balances for accounts 
payable using the audit risk 
model. 





Identify Client 
Business Risks 
Affecting Accounts 
Payable (Phase 1) 


Because all acquisition and payment cycle transactions typically flow through accounts 
payable, this account is critical to any audit of the acquisition and payment cycle. 
Accounts payable are unpaid obligations for goods and services received in the ordinary 
course of business. Accounts payable includes obligations for the acquisition of raw 
materials, equipment, utilities, repairs, and many other types of goods and services that 
were received before the end of the year. Most accounts payable can also be identified 
by the existence of vendors’ invoices for the obligation. 

Accounts payable should be distinguished from accrued liabilities and interest- 
bearing obligations. A liability is an account payable only if the total amount of the 
obligation is known and owed at the balance sheet date. If the obligation includes the 
payment of interest, it should be recorded as a note payable, contract payable, 
mortgage payable, or bond payable. 

Figure 18-3 summarizes the methodology for designing tests of details for accounts 
payable. This methodology is the same as that used for accounts receivable in Chapter 
16 (see Figure 16-1 on page 520). 

If tests of controls and related substantive tests of transactions show that controls 
are operating effectively, and if analytical procedures results are satisfactory, the auditor 
is likely to reduce tests of details of balances for accounts payable. However, because 
accounts payable tend to be material for most companies, auditors almost always 
perform some tests of details of balances. 


The recent focus by many companies on improving their supply-chain management 
activities has led to numerous changes in the design of systems used to initiate and 
record acquisition and payment activities. Efforts to streamline the purchasing of goods 
and services, including greater emphasis on just-in-time inventory purchasing, increased 
sharing of information with suppliers, and the use of technology and e-commerce to 
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transact business, are changing all aspects of the acquisition and payment cycle for 
many companies. These arrangements and systems can be complex. 

Significant client business risks may arise from these changes. For example, suppliers 
may have greater access to accounts payable records, allowing them to continually 
monitor the status of payable balances and to perform detailed reconciliations of 
transactions. Access by external parties, such as suppliers, to accounting records threatens 
the likelihood of misstatement if that access is not properly controlled. Also, increased 
focus on improving the logistics of physically moving inventory throughout a company’s 
distribution chain may increase the difficulty of establishing effective cutoff of accounts 
payable balances at year-end. The auditor needs to understand the nature of changes to 
these systems to identify whether client business risks and related management controls 
affect the likelihood of material misstatements in accounts payable. 


Like accounts receivable, a large number of transactions can affect accounts pay- 
able. The balance is often large and made up of a large number of vendor balances 
and it is relatively expensive to audit the account. For these reasons, auditors 
typically set tolerable misstatement for accounts payable relatively high. For the same 
reasons, auditors often assess inherent risk as medium or high. They are especially 


Set Tolerable 
Misstatement and 
Assess Inherent Risk 
(Phase I) 
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Assess Control Risk 
and Design 

and Perform Tests 
of Controls 

and Substantive 
Tests of Transactions 
(Phases I and I!) 


Design and Perform 
Analytical Procedures 
(Phase III) 


OBJECTIVE 18-5 





Design and perform 
analytical procedures for 
accounts payable. 





Design and Perform 
Tests of Details of 
Accounts Payable 
Balance (Phase III) 


concerned about the completeness and cutoff balance-related audit objectives because 
of the potential for understatements in the account balance. 


As shown in Figure 18-3 (p. 613), after auditors set tolerable misstatement and inherent 
risk for accounts payable, they assess control risk based on an understanding of 
internal control. The auditor’s ultimate substantive tests depend on the relative effec- 
tiveness of internal controls related to accounts payable. Therefore, auditors must have 
a thorough understanding of how these controls relate to accounts payable. 

The effects of the client’s internal controls on accounts payable tests can be 

illustrated by two examples: 

1. Assume that the client has highly effective internal controls over recording 
and paying for acquisitions. The receipt of goods is promptly documented by 
prenumbered receiving reports; prenumbered vouchers are promptly and 
efficiently prepared and recorded in the acquisition transactions file and the 
accounts payable master file. Cash disbursements are made promptly when 
due and immediately recorded in the cash disbursements transactions file 
and the accounts payable master file. Individual accounts payable balances in 
the master file are reconciled monthly with vendors’ statements, and the 
computer automatically reconciles the master file total to the general ledger. 
Under these circumstances, the verification of accounts payable should 
require little audit effort once the auditor concludes that internal controls are 
operating effectively. 

2. Assume that receiving reports are not used, the client defers recording acquisi- 
tions until cash disbursements are made, and because of cash shortages, bills 
are often paid several months after their due date. When an auditor faces such 
a situation, there is a high likelihood of an understatement of accounts 
payable; therefore, extensive tests of details of accounts payable are necessary 


t a rainy py peer ERB'SWEE ib. correctly stated on the balance sheet 


We discussed the most important controls over accounts payable and the related 
tests of controls and substantive tests of transactions earlier in this chapter. In addition 
to those controls, each month an independent person or computer program should 
reconcile vendors’ statements with recorded liabilities and the accounts payable master 
file with the general ledger. After assessing control risk, the auditor designs and 
performs tests of controls and substantive tests of transactions for acquisitions and 
cash disbursements. 


The use of analytical procedures is as important in the acquisition and payment cycle 
as it is in every other cycle, especially for uncovering misstatements in accounts 
payable. Table 18-4 illustrates analytical procedures for the balance sheet and income 
statement accounts in the acquisition and payment cycle that are useful for un- 
covering areas in which additional investigation is desirable. 

Auditors should compare current year expense totals with prior years to uncover 
misstatements of accounts payable as well as in the expense accounts. Because of 
double-entry accounting, a misstatement of an expense account usually also results 
in an equal misstatement of accounts payable. Therefore, comparing current 
expenses such as rent, utilities, and other regularly scheduled bills with prior years is 
an effective procedure for analyzing accounts payable when expenses from year to 
year are expected to be relatively stable. 


The overall objective in the audit of accounts payable is to determine whether the 
accounts payable balance is fairly stated and properly disclosed. Seven of the eight 
balance-related audit objectives discussed in Chapter 6 (pp. 158-160) are applicable 
to accounts payable: existence, completeness, accuracy, classification, cutoff, detail 
tie-in, and rights and obligations. Realizable value is not applicable to liabilities. 
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TABLE 18-4 Analytical Procedures for the Acquisition and Payment Cycle 

Analytical Procedure Possible Misstatement 

Compare acquisition-related expense account Misstatement of accounts payable 
balances with prior years. and expenses. 

Review list of accounts payable for unusual, Classification misstatement for nontrade 
nonvendor, and interest-bearing payables. liabilities. 

Compare individual accounts payable with Unrecorded or nonexistent accounts, 
previous years. or misstatements. 

Calculate ratios, such as purchases divided Unrecorded or nonexistent accounts, 
by accounts payable, and accounts payable or misstatements. 
divided by current liabilities. 











There is an important difference in emphasis in the audit of liabilities and assets. 
When auditors verify assets, they emphasize overstatements through verification by 
confirmation, physical examination, and examination of supporting documents. The 
opposite approach is taken in verifying liability balances; that is, the main focus is on 
understated or omitted liabilities. 

The difference in emphasis in auditing assets and liabilities results directly from the 
legal liability of CPAs. If equity investors, creditors, and other users determine subse- 
quent to the issuance of the audited financial statements that earnings and owners’ 
equity were materially overstated, a lawsuit against the CPA firm is fairly likely. Because 
an overstatement of owners’ equity can arise either from an overstatement of assets or 
an understatement of liabilities, it isfy CIPD Em Blah Ane pres of 
misstatements. Auditors should not ignore tfe possibility that assets are understated or 
liabilities are overstated, and should design tests to detect material understatements of 
earnings and owners’ equity, including those arising from material overstatements of 
accounts payable. 

We will use the same balance-related audit objectives from Chapter 16 that we 
applied to verifying accounts receivable, as they also apply to liabilities, with three 
minor modifications: 


1. The realizable value objective is not applicable to liabilities. Realizable value 
applies only to assets. 

2. The rights aspect of the rights and obligations objective is not applicable to 
liabilities. For assets, the auditor is concerned with the client’s rights to the 
use and disposal of the assets. For liabilities, the auditor is concerned with the 
client’s obligations for the payment of the liability. If the client has no obliga- 
tion to pay a liability, it should not be included as a liability. 

3. For liabilities, there is emphasis on the search for understatements rather than 
for overstatements, as we just discussed. 


Table 18-5 (p. 616) includes the balance-related audit objectives and common tests 
of details of balances procedures for accounts payable. The auditor’s actual audit 
procedures vary considerably depending on the nature of the entity, the materiality of 
accounts payable, the nature and effectiveness of internal controls, and inherent risk. 
As auditors perform test of details of balances for accounts payable and other liability 
accounts they may also gather evidence about the four presentation and disclosure 
objectives, especially when performing completeness objective tests. Other procedures 
related to presentation and disclosure objectives are done as part of procedures to 
complete the audit, which we will discuss in Chapter 24. 


OBJECTIVE 18-6 


Design and perform tests 


of details of balances for 
accounts payable, including 
out-of-period liability tests. 








Chapter 18 / AUDIT OF THE ACQUISITION AND PAYMENT CYCLE 615 


Out-of-Period Liability Tests Because of the emphasis on understatements in 
liability accounts, out-of-period liability tests are important for accounts payable. The 
extent of tests to uncover unrecorded accounts payable, often called the search for 
unrecorded accounts payable, depends heavily on assessed control risk and the 
materiality of the potential balance in the account. The same audit procedures used to 
uncover unrecorded payables are applicable to the accuracy objective. The following 
are typical audit procedures: 


Examine Underlying Documentation for Subsequent Cash Disbursements Auditors 
examine supporting documentation for cash disbursements subsequent to the balance 
sheet date to determine whether a cash disbursement was for a current period liability. If 
it is a current period liability, the auditor should trace it to the accounts payable trial 
balance to make sure it is included. The receiving report indicates the date inventory was 
received and is therefore an especially useful document. Similarly, the vendor’s invoice 
usually indicates the date services were provided. Auditors often examine documentation 
for cash disbursements made in the subsequent period for several weeks after the balance 
sheet date, especially when the client does not pay bills on a timely basis. 


Examine Underlying Documentation for Bills Not Paid Several Weeks After the Year- 
End Auditors carry out this procedure in the same manner as the preceding one and for 
the same purpose. This procedure differs in that it is done for unpaid obligations near 
the end of the audit rather than for obligations that have already been paid. 





TABLE 18-5 


Balance-Related Audit Objectives and Tests of Details of Balances for Accounts Payable 





Common Tests of Details 





Balance-Related Audit Objective 


of Balances Procedures 


Comments 





Accounts payable in the accounts 
payable list agree with related 
master file, and the total is 
correctly added and agrees with 
the general ledger (detail tie-in). 


Re-add or use the computer to total the 
accounts payable list. 

Trace the total to the general ledger. 

Trace individual vendors’ invoices to master 
file for names and amounts. 


All pages need not ordinarily be 
footed if footing manually. 


Unless controls are deficient, tracing 
to master file should be limited. 





Accounts payable in the accounts 
payable list exist (existence). 


Trace from accounts payable list to vendors’ 
invoices and statements. 

Confirm accounts payable, emphasizing 
large and unusual amounts. 


Ordinarily receives little attention 
because the primary concern is 
with understatements. 





Existing accounts payable are included 
in the accounts payable list 
(completeness). 


Perform out-of-period liability tests 
(see discussion). 


These are essential audit tests for 
accounts payable. 





Accounts payable in the accounts payable 
list are accurate (accuracy). 


Perform same procedures as those used 
for existence objective and out-of-period 
liability tests. 


Ordinarily, the emphasis in these 
procedures for accuracy is 
understatement rather than 
omission. 





Accounts payable in the accounts payable 
list are correctly classified (classification). 


Review the list and master file for related 
parties, notes or other interest-bearing 
liabilities, long-term payables, and debit 
balances. 


Knowledge of the client's business 
is essential for these tests. 





Transactions in the acquisition and payment 
cycle are recorded in the proper period 


(cutoff). 


Perform out-of-period liability tests 
(see discussion). 
Perform detailed tests as part of physical 


observation of inventory (see discussion). 
Test for inventory in transit (see discussion). 


These are essential audit tests for 
accounts payable. These are 
called cutoff tests. 





The company has an obligation to pay the 
liabilities included in accounts payable 
(obligations). 


Examine vendors’ statements and confirm 
accounts payable. 


Normally not a concern in the audit 
of accounts payable because all 
accounts payable are obligations. 





616 


Part 4 / APPLICATION OF THE AUDIT PROCESS TO OTHER CYCLES 





For example, in an audit with a March 31 year-end, assume the auditor examines 
the supporting documentation for checks paid through June 28. Bills that are still 
unpaid on June 28 should be examined to determine whether they are obligations at 
March 31. 


Trace Receiving Reports Issued Before Year-End to Related Vendors’ Invoices All 
merchandise received before the year-end of the accounting period should be included 
as accounts payable. By tracing receiving reports issued up to year-end to vendors’ 
invoices and making sure that they are included in accounts payable, the auditor is 
testing for unrecorded obligations. 


Trace Vendors’ Statements That Show a Balance Due to the Accounts Payable Trial 
Balance If the client maintains a file of vendors’ statements, auditors can trace any 
statement that has a balance due at the balance sheet date to the listing to make sure it 
is included as an account payable. 


Send Confirmations to Vendors with Which the Client Does Business Although the 
use of confirmations for accounts payable is less common than for accounts receivable, 
auditors use them occasionally to test for vendors omitted from the accounts payable 
list, omitted transactions, and misstated account balances. Sending confirmations to 
active vendors for which a balance has not been included in the accounts payable list is 
a useful means of searching for omitted amounts. This type of confirmation is 
commonly called a zero balance confirmation. Additional discussion of confirmation 
of accounts payable is deferred until the end of this chapter. 


Cutoff Tests Accounts payable cutoff tests are done to determine whether transactions 
recorded a few days before and after the balance sheet date are included in the correct 
period. The five out-of-period liability audit tests we just discussed are all cutoff tests for 
acquisitions, but they emphasize understatements. For the first three procedures, it is also 
appropriate to examine supporting documentation as a test of overstatement of accounts 
payable. For example, the third pApagotRDEdknhan Ge@rorded 
accounts payable) by tracing receiving reports issued before year-end to related vendors’ 
invoices. To test for overstatement cutoff amounts, the auditor should trace receiving 
reports issued after year-end to related invoices to make sure that they are not recorded as 
accounts payable (unless they are inventory in transit, which is discussed shortly). 

We’ve already discussed most cutoff tests in the preceding section, but we will focus 
on two aspects here: the relationship of cutoff to physical observation of inventory and 
the determination of the amount of inventory in transit. 


Relationship of Cutoff to Physical Observation of Inventory In determining that the 
accounts payable cutoff is correct, it is essential that the cutoff tests be coordinated with 
the physical observation of inventory. For example, assume that an inventory acquisition 
for $400,000 is received late in the afternoon of December 31, after the physical 
inventory is completed. If the acquisition is included in accounts payable and 
purchases but excluded from ending inventory, the result is an understatement of net 
earnings of $400,000. Conversely, if the acquisition is excluded from both inventory and 
accounts payable, there is a misstatement in the balance sheet, but the income statement 
is correct. The only way the auditor will know which type of misstatement has occurred 
is to coordinate cutoff tests with the observation of inventory. 

The cutoff information for acquisitions should be obtained during the physical 
observation of inventory. At that time, the auditor should review the procedures in the 
receiving department to determine that all inventory received was counted, and the 
auditor should record in the audit documentation the last receiving report number of 
inventory included in the physical count. Subsequent to the physical count date, the 
auditor should then test the accounting records for cutoff. The auditor should trace the 
previously documented receiving report numbers to the accounts payable records to 
verify that they are correctly included or excluded. For example, assume that the last 
receiving report number representing inventory included in the physical count was 
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Reliability of Evidence 


OBJECTIVE 18-7 





Distinguish the reliability 
of vendors’ invoices, 
vendors’ statements, and 
confirmations of accounts 
payable as audit evidence. 





3167. The auditor should record this document number and subsequently trace it and 
several preceding numbers to their related vendors’ invoices and to the accounts 
payable list or the accounts payable master file to determine that they are all included. 
Similarly, accounts payable for acquisitions recorded on receiving reports with 
numbers larger than 3167 should be excluded from accounts payable. 

When the client’s physical inventory takes place before the last day of the year, the 

auditor must still perform an accounts payable cutoff at the time of the physical count 
in the manner described in the preceding paragraph. In addition, the auditor must 
verify whether all acquisitions that took place between the physical count and the end of 
the year were added to the physical inventory and accounts payable. For example, if the 
client takes the physical count on December 27 for a December 31 year-end, the cutoff 
information is taken as of December 27. After the physical count date, the auditor must 
first test to determine whether the cutoff was accurate as of December 27. After deter- 
mining that the December 27 cutoff is accurate, the auditor must test whether all 
inventory received subsequent to the physical count, but on or before the balance sheet 
date, was added to inventory and accounts payable by the client. 
Inventory in Transit In accounts payable, auditors must distinguish between acquisi- 
tions of inventory that are on an FOB destination basis and those that are made FOB 
origin. For FOB destination, title passes to the buyer when the inventory is received, so 
only inventory received on or before the balance sheet date should be included in 
inventory and accounts payable at year-end. When an acquisition is FOB origin, the 
company must record the inventory and related accounts payable in the current period 
if shipment occurred on or before the balance sheet date. 

Auditors can determine whether inventory has been acquired FOB destination or 
origin by examining vendors’ invoices. Auditors should examine invoices for merchandise 
received shortly after year-end to determine whether they were on an FOB origin basis. 
For those that were, and when the shipment dates were on or before the balance sheet 


date, Apagey PDFatE@nhan cere must be recorded in the current 


period i amounts are material. 


Auditors need to understand the relative reliability of the three primary types of 
evidence ordinarily used for verifying accounts payable: vendors’ invoices, vendors’ 
statements, and confirmations. 


Distinction Between Vendors’ Invoices and Vendors’ Statements Auditors should 
distinguish between vendors’ invoices and vendors’ statements in verifying the amount 
due to a vendor. Auditors get highly reliable evidence about individual transactions when 
they examine vendors’ invoices and related supporting documents, such as receiving 
reports and purchase orders. A vendor’s statement is not as desirable as invoices for 
verifying individual transactions because a statement includes only the total amount of 
the transaction. The units acquired, price, freight, and other data are not included. 

Which of these two documents is better for verifying the correct balance in accounts 
payable? The vendor’s statement is superior for verifying accounts payable because it includes 
the ending balance. The auditor can compare existing vendors’ invoices with the client’s 
list and still not uncover missing ones, which is the primary concern in accounts payable. 

Which of these two documents is better for testing acquisitions in tests of controls 
and substantive tests of transactions? The vendor’s invoice is superior for verifying 
transactions because the auditor is verifying individual transactions and the invoice 
shows the details of the acquisitions. 


Difference Between Vendors’ Statements and Confirmations The most impor- 
tant distinction between a vendor’s statement and a confirmation of accounts payable 
is the source of the information. A vendor’s statement has been prepared by the vendor 
(an independent third party) but is in the hands of the client at the time the auditor 
examines it. This provides the client with an opportunity to alter a vendor’s statement 
or to withhold certain statements from the auditor. 
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A response to a confirmation request for accounts payable is normally an itemized 
statement sent directly to the CPA’s office by the vendor. It provides the same informa- 
tion as a vendor’s statement but is more reliable. In addition, confirmations of accounts 
payable often include a request for information about notes and acceptances payable as 
well as consigned inventory owned by the vendor but stored on the client’s premises. An 
illustration of a typical accounts payable confirmation request is given in Figure 18-4. 

Due to the availability of vendors’ statements and vendors’ invoices, which are both 
relatively reliable evidence because they originate from a third party, confirmation of 
accounts payable is less common than confirmation of accounts receivable. If the client 
has adequate internal controls and vendors’ statements are available for examination, 
confirmations are normally not sent. However, when the client’s internal controls are 
deficient, when statements are not available, or when the auditor questions the client’s 
integrity, it is desirable to send confirmation requests to vendors. Because of the emphasis 
on understatements of liability accounts, the accounts confirmed should include large, 
active, zero balance accounts and a representative sample of all others. 

In most instances when auditors confirm accounts payable, they do it shortly after 
the balance sheet date. However, if assessed control risk is low, it may be possible to 
confirm accounts payable at an interim date as a test of the effectiveness of internal 
controls. Then, if the confirmations indicate that the internal controls are ineffective, it 
is possible to design other audit procedures to test accounts payable at year-end. 

When auditors examine vendors’ statements or receive confirmations, there must 
be a reconciliation of the statement or confirmation with the accounts payable list. 
Differences are often caused by inventory in transit, checks mailed by the client but not 
received by the vendor at the statement date, and delays in processing accounting 
records. The reconciliation is of the same general nature as that discussed in Chapter 16 
for accounts receivable. The documents typically used to reconcile the balances on the 
accounts payable list with the confirmations or vendors’ statements include receiving 


reports, vendors’ invoices, and Canc APAGO PDF Enhancer 


" 
Accounts Payable Confirmation Request 


January 15, 2012 








ROGER MEAD, INC. 

Jones Sales, Inc. 

2116 Stewart Street 
Wayneville, Kentucky 36021 


To Whom It May Concern: 


Our auditors, Murray and Rogers, CPAs, are conducting an audit of our financial statements. 
For this purpose, please furnish them with the following information as of December 31, 
2011. 


(1) Itemized statements of our accounts payable to you showing all unpaid items; 

(2) Acomplete list of any notes and acceptances payable to you (including any which 
have been discounted) showing the original date, dates due, original amount, unpaid 
balance, collateral, and endorsers; and 

(3) An itemized list of your merchandise consigned to us. 


Your prompt attention to this request will be appreciated. An envelope is enclosed for 
your reply. 


Yours truly, 


Phil Gerisuini 


Phil Geriovini, President 
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Sample Size 


Our discussion of tests of details of the accounts payable balance has focused heavily 
on the typical audit procedures performed, the documents and records examined, and 
the timing of the tests. The auditor must also consider sample sizes in the audit of 
accounts payable. 

Sample sizes for accounts payable tests vary considerably, depending on such 
factors as the materiality of accounts payable, the number of accounts outstanding, 
assessed control risk, and the results of the prior year. When a client’s internal controls 
are deficient, which is not uncommon for accounts payable, almost all population 
items must be verified. In other situations, minimal testing may suffice. 

Statistical sampling is less commonly used for the audit of accounts payable than 
for accounts receivable. Defining the population and determining the population size 
is more difficult for accounts payable. Because the emphasis is on omitted accounts 
payable, auditors must try to ensure that the population includes all potential payables. 


SUMMARY 


Figure 18-5 summarizes how the four types of audit procedures are used to obtain audit 
assurance for transactions and accounts in the acquisition and payment cycle. After using 
procedures to obtain an understanding of internal control and tests of controls, auditors 
can evaluate whether controls over transactions in the cycle are operating effectively. When 
control risk is assessed as low the auditor can reduce substantive testing of ending balances 
in the related accounts. On the other hand, a higher assessed control risk results in the need 
for more substantive testing in related accounts. In this chapter, the ending balance we 
focused on was accounts payable. 


Types of Audit Tests for the Acquisition and Payment Cycle 
(see Figure 18-1 on page 602 for accounts) 


Cash in Bank Accounts Payable Acquisition Expenses 











<——- Payments ——» | <—— Expenses ———> 


Audited by Audited by 
TOC, STOT, and AP TOC, STOT, and AP 


Ending balance 
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Acquisition Assets 
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By combining all types of audit tests shown in Figure 18-5, the auditor can obtain a 
higher overall assurance for transactions and accounts in the acquisition and payment cycle 
than the assurance obtained from any one test. The auditor can increase the assurance 
obtained from any one of the tests, and thereby increase the overall assurance for the cycle. 


ESSENTIAL TERMS 


Accounts payable master file—a com- 
puter file for maintaining a record for 
each vendor of individual acquisitions, 
cash disbursements, acquisition returns 
and allowances, and vendor balances 


Accounts payable trial balance—a listing 
of the amount owed to each vendor at a 
point in time; prepared directly from the 
accounts payable master file 

Acquisition and payment cycle—the 
transaction cycle that includes the acquisi- 
tion of and payment for goods and services 
from suppliers outside the organization 


Acquisitions journal—a journal or listing 
generated from the acquisitions transaction 
file and typically includes information 
such as vendor name, date, amount, and 
account classification for each transaction 


Cutoff tests—tests to determine whether 
transactions recorded a few days beg 


Purchase order—a document prepared 
or electronically issued by the purchasing 
department indicating the description, 
quantity, and related information for 
goods and services that the company 
intends to purchase 


Purchase requisition—request by an 
authorized employee to the purchasing 
department to place an order for inven- 
tory and other items used by an entity 


Receiving report—a document prepared 
by the receiving department at the time 
tangible goods are received, indicating the 
description of the goods, the quantity 
received, the date received, and other rele- 
vant data; it is part of the documentation 
necessary for payment to be made 


Vendor’s invoice—a document or record 


that BAR the his of an acquisition 
and after the balance sheet date aré Xp ag@an JAR anks LGR owed 


cluded in the correct period 


Debit memo—a document indicating a 
reduction in the amount owed to a vendor 
because of returned goods or an allow- 
ance granted 


FOB destination—shipping contract in 
which title to the goods passes to the buyer 
when the goods are received 


FOB origin—shipping contract in which 
title to the goods passes to the buyer at the 
time that the goods are shipped 


REVIEW QUESTIONS 


to the vendor for an acquisition 


Vendor’s statement—a statement pre- 
pared monthly by the vendor, which 
indicates the customer’s beginning bal- 
ance, acquisitions, payments, and ending 
balance 


Voucher—a document used to establish a 
formal means of recording and control- 
ling acquisitions, primarily by enabling 
each acquisition transaction to be sequen- 
tially numbered 


18-1 (Objective 18-1) List five asset accounts, three liability accounts, and five expense 
accounts included in the acquisition and payment cycle for a typical manufacturing company. 


18-2 (Objective 18-3) List one possible internal control for each of the six transaction- 
related audit objectives for cash disbursements. For each control, list a test of control to test 
its effectiveness. 

18-3 (Objective 18-3) List one possible control for each of the six transaction-related audit 
objectives for acquisitions. For each control, list a test of control to test its effectiveness. 
18-4 (Objective 18-3) Evaluate the following statement by an auditor concerning tests of 
acquisitions and cash disbursements: “In selecting the acquisitions and cash disbursements 
sample for testing, the best approach is to select a random month and test every transaction 
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for the period. Using this approach enables me to thoroughly understand internal control 
because I have examined everything that happened during the period. As a part of the 
monthly test, I also test the beginning and ending bank reconciliations and prepare a proof 
of cash for the month. At the completion of these tests I feel I can evaluate the effectiveness 
of internal control.” 


18-5 (Objective 18-3) What is the importance of cash discounts to the client and how can 
the auditor verify whether they are being taken in accordance with company policy? 


18-6 (Objective 18-3) What are the similarities and differences in the objectives of the 
following two procedures? (1) Select a random sample of receiving reports and trace them 
to related vendors’ invoices and acquisitions journal entries, comparing the vendor’s name, 
type of material and quantity acquired, and total amount of the acquisition. (2) Select a 
random sample of acquisitions journal entries and trace them to related vendors’ invoices 
and receiving reports, comparing the vendor’s name, type of material and quantity 
acquired, and total amount of the acquisition. 


18-7 (Objectives 18-2, 18-3) If an audit client does not have prenumbered checks, what 
type of misstatement has a greater chance of occurring? Under the circumstances, what 
audit procedure can the auditor use to compensate for the deficiency? 


18-8 (Objective 18-2) What is meant by a voucher? Explain how its use can improve an 
organization’s internal controls. 


18-9 (Objective 18-2) Explain why most auditors consider the receipt of goods and 
services the most important point in the acquisition and payment cycle. 


18-10 (Objectives 18-3, 18-6) Explain the relationship between tests of the acquisition and 
payment cycle and tests of inventory. Give specific examples of how these two types of tests 
affect each other. 

18-11 (Objectives 18-3, 18-4) Explain the relationship between tests of the acquisition and 
payment cycle and tests of accounts payable. Give specific examples of how these two types 
ftestipagoliPDF Enhancer 

18-12 (Objective 18-6) The CPA examines all unrecorded invoices on hand as of February 
28, 2012, the last day of the audit. Which of the following misstatements is most likely to be 
uncovered by this procedure? Explain. 

a. Accounts payable are overstated at December 31, 2011. 

b. Accounts payable are understated at December 31, 2011. 

c. Operating expenses are overstated for the 12 months ended December 31, 2011. 

d. Operating expenses are overstated for the two months ended February 28, 2012.* 
18-13 (Objective 18-7) Explain why it is common for auditors to send confirmation 
requests to vendors with “zero balances” on the client’s accounts payable listing but 
uncommon to follow the same approach in verifying accounts receivable. 

18-14 (Objectives 18-2, 18-7) Distinguish between a vendor’s invoice and a vendor’s state- 
ment. Which document should ideally be used as evidence in auditing acquisition 
transactions and which for verifying accounts payable balances? Why? 

18-15 (Objective 18-7) It is less common to confirm accounts payable at an interim date 
than accounts receivable. Explain why. 

18-16 (Objective 18-6) In testing the cutoff of accounts payable at the balance sheet date, 
explain why it is important that auditors coordinate their tests with the physical obser- 
vation of inventory. What can the auditor do during the physical inventory to enhance the 
likelihood of an accurate cutoff? 

18-17 (Objective 18-6) Distinguish between FOB destination and FOB origin. What 
procedures should the auditor follow concerning acquisitions of inventory on an FOB 
origin basis near year-end? 


*AICPA adapted. 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


18-18 (Objective 18-3) The following questions concern internal controls in the acquisi- 
tion and payment cycle. Choose the best response. 


a. A client erroneously recorded a large purchase twice. Which of the following internal 
controls would be most likely to detect this error in a timely and efficient manner? 
(1) Footing the purchases journal. 

(2) Reconciling vendors’ monthly statements with subsidiary payable ledger accounts. 
(3) Tracing totals from the purchases journal to the ledger accounts. 
(4) Sending written quarterly confirmations to all vendors. 


b. Budd, the purchasing agent of Lake Hardware Wholesalers, has a relative who owns a 
retail hardware store. Budd arranged for hardware to be delivered by manufacturers to 
the relative’s retail store on a COD basis, thereby enabling his relative to buy at Lake’s 
wholesale prices. Budd was probably able to accomplish this because of Lake’s poor 
internal control over 
(1) purchase requisitions. (3) cash receipts. 

(2) purchase orders. (4) perpetual inventory records. 


c. Which of the following is an internal control that will prevent paid cash disbursement 

documents from being presented for payment a second time? 

(1) The date on cash disbursement documents must be within a few days of the date 
that the document is presented for payment. 

(2) The official signing the check compares the check with the documents and should 
deface the documents. 

(3) Unsigned checks are prepared by individuals who are responsible for signing checks. 

(4) Cash disbursement documents are approved by at least two responsible manage- 
ment officials. 


d. Which of the following We LApagS ‘PDE 'E narieero 


questionnaire concerning the compte s assertion for purchases? 

(1) Is an authorized purchase order required before the receiving department can 
accept a shipment or the vouchers payable department can record a voucher? 

(2) Are purchase requisitions prenumbered and independently matched with vendor 
invoices? 

(3) Is the unpaid voucher file periodically reconciled with inventory records by an 
employee who does not have access to purchase requisitions? 

(4) Are purchase orders, receiving reports, and vouchers prenumbered and periodi- 
cally accounted for? 


18-19 (Objectives 18-6, 18-7) The following questions concern accumulating evidence in 
the acquisition and payment cycle. Choose the best response. 


a. In auditing accounts payable, an auditor’s procedures most likely will focus primarily 
on management’s assertion of 
(1) existence. (3) completeness. 
(2) realizable value. (4) valuation and allocation. 


b. Which of the following audit procedures is best for identifying unrecorded trade 

accounts payable? 

(1) Examining unusual relationships between monthly accounts payable balances 
and recorded cash payments. 

(2) Reconciling vendors’ statements to the file of receiving reports to identify items 
received just prior to the balance sheet date. 

(3) Reviewing cash disbursements recorded subsequent to the balance sheet date to 
determine whether the related payables apply to the prior period. 

(4) Investigating payables recorded just prior to and just subsequent to the balance 
sheet date to determine whether they are supported by receiving reports. 
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Cc. 


An auditor traced a sample of purchase orders and the related receiving reports to the 
acquisitions journal and cash disbursements journal. The purpose of this substantive 
test of transactions most likely was to 

(1) identify unusually large purchases that should be investigated further. 

(2) verify that cash disbursements were for goods actually received. 

(3) determine that purchases were properly recorded. 

(4) test whether payments were for goods actually ordered. 


18-20 (Objective 18-3, 18-6) The following questions concern the audit of accounts 
payable. 


a. 


b. 


For effective internal control, the accounts payable department generally should 

(1) stamp, perforate, or otherwise cancel supporting documentation after payment is 
mailed. 

(2) ascertain that each requisition is approved as to price, quantity, and quality by an 
authorized employee. 

(3) omit information about the quantity ordered on the copy of the purchase order 

forwarded to the receiving department prior to receipt of goods. 

establish the agreement of the vendor’s invoice with the receiving report and 

purchase order. 


(4 


we 


When using confirmations to provide evidence about the completeness assertion for 
accounts payable, the appropriate population most likely is 

(1) vendors with whom the entity has previously done business. 

(2) amounts recorded in the accounts payable subsidiary ledger. 

(3) payees of checks drawn in the month after year-end. 

(4) invoices filed in the entity’s open invoice file. 


DISCUSSION QUESTIONS AND PROBLEMS 


18-21 (Objective 18-3) Questions 1 through 8 are typically found in questionnaires used 
by auditors to obtain an understanding of internal control in the acquisition and payment 
cycle. In using the questionnaire for a client, a “yes” response to a question indicates a possible 
internal control, whereas a “no” indicates a potential deficiency. 


Ls 


1S) 


wn 
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Required a. 


Is the purchasing function performed by personnel who are independent of the 

receiving and shipping functions and the payables and disbursing functions? 

. Are all vendors’ invoices routed directly to accounting from the mailroom? 

. Are all receiving reports prenumbered and the numerical sequence checked by a 
person independent of check preparation? 

. Are all extensions, footings, discounts, and freight terms on vendors’ invoices checked 
for accuracy? 

. Does a responsible employee review and approve the invoice account distribution 
before the transaction is entered in the computer? 

. Are checks automatically posted in the cash disbursements journal as they are prepared? 

. Are all supporting documents properly cancelled at the time the checks are signed? 

. Is the custody of checks after signature and before mailing handled by an employee 

independent of all payable, disbursing, cash, and general ledger functions? 


For each of the preceding questions, state the transaction-related audit objective(s) 
being fulfilled if the control is in effect. 


. For each internal control, list a test of control to test its effectiveness. 


. For each of the preceding questions, identify the nature of the potential financial 


misstatement(s) if the control is not in effect. 


. For each of the potential misstatements in part c, list a substantive audit procedure 


that can be used to determine whether a material misstatement exists. 
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18-22 (Objective 18-3) Following are some of the tests of controls and substantive tests of 
transactions procedures commonly performed in the acquisition and payment cycle. Each 
is to be done on a sample basis. 

1. Trace transactions recorded in the acquisitions journal to supporting documenta- 
tion, comparing the vendor’s name, total dollar amounts, and authorization for 
acquisition. 

2. Account for a sequence of receiving reports and trace selected ones to related vendors’ 
invoices and acquisitions journal entries. 

3. Review supporting documents for clerical accuracy, correctness of account distribution, 
and reasonableness of expenditure in relation to the nature of the client’s operations. 

4, Examine documents in support of acquisition transactions to make sure that each 
transaction has an approved vendor’s invoice, receiving report, and purchase order 
included. 

5. Foot the cash disbursements journal, trace postings of the total to the general ledger, 
and trace postings of individual cash disbursements to the accounts payable master 
file. 

6. Account for a numerical sequence of checks in the cash disbursements journal and 
examine all voided or spoiled checks for proper cancellation. 

7. Prepare a proof of cash disbursements for an interim month. 

8. Compare dates on cancelled checks with dates on the cash disbursements journal 
and the bank cancellation date. 


a. State whether each procedure above is primarily a test of control or substantive test of 
transactions. 


b. State the purpose(s) of each procedure. 


18-23 (Objective 18-3) Donnen Designs, Inc. is a small manufacturer of women’s casual- 
wear jewelry, including bracelets, necklaces, earrings, and other moderately priced accessory 
items. Most of their products are made from silver, various low-cost stones, beads, and other 
decorative jewelry pieces. Donnen vSRip' 6” ppRre PRA ane yeh-end 
jewelry items, such as those made of goldand stmiprecious or precious stones. 

Personnel responsible for purchasing raw material jewelry items for Donnen Designs 
would like to place orders directly with suppliers who offer their products for sale through 
Internet Web sites. Most suppliers provide pictures of all jewelry components on their Web 
sites, along with pricing and other sales-term information. Customers who have valid 
business licenses are able to purchase the products at wholesale, rather than retail prices. 
Customers can place orders online and pay for those goods immediately by using a valid 
credit card. Purchases made by credit card are shipped by the suppliers after the credit 
approval is received from the credit card agency, which usually occurs the same day. 
Customers can also place orders online with payment being later made by check. However, 
in that event, purchases are not shipped until the check is received and cashed by the 
supplier. Some of the suppliers allow a 30-day full-payment refund policy, whereas other 
suppliers accept returns but only grant credit toward future purchases from that supplier. 


a. Identify advantages for Donnen Designs if management allows purchasing personnel 
to order goods online through supplier Web sites. 


b. Identify potential risks associated with Donnen Designs’ purchase of jewelry pieces 
through supplier Internet Web sites. 


c. Describe advantages of allowing purchasing agents to purchase products online using 
a Donnen Designs credit card. 


d. Describe advantages of allowing purchasing agents to purchase products online with 
payment made only by check. 


e. What internal controls can be implemented to ensure that 
(1) purchasing agents do not use Donnen credit cards to purchase nonjewelry items 
for their own purposes, if Donnen allows purchasing agents to purchase jewelry 
using Donnen credit cards? 
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(2) purchasing agents do not order jewelry items from the suppliers and ship those 
items to addresses other than Donnen addresses? 

(3) Donnen does not end up with unused credits with jewelry suppliers as a result of 
returning unacceptable jewelry items to suppliers who only grant credit toward 
future purchases? 


18-24 (Objectives 18-3, 18-6) The following misstatements are included in the accounting 
records of Westgate Manufacturing Company. 


1. 


1S) 


5. 


6. 


Required a. 
b. 


Cc. 


The accounts payable clerk prepares a monthly check to Story Supply Company for 

the amount of an invoice owed and submits the unsigned check to the treasurer for 

payment along with related supporting documents that have already been approved. 

When she receives the signed check from the treasurer, she records it as a debit to 

accounts payable and deposits the check in a personal bank account for a company 

named Story Company. A few days later, she records the invoice in the acquisitions 
journal again, resubmits the documents and a new check to the treasurer, and sends 
the check to the vendor after it has been signed. 

. The amount of a check in the cash disbursements journal is recorded as $4,612.87 
instead of $6,412.87. 

. The accounts payable clerk intentionally excluded from the cash disbursements 
journal seven large checks written and mailed on December 26 to prevent cash in the 
bank from having a negative balance on the general ledger. They were recorded on 
January 2 of the subsequent year. 

. Each month, a fraudulent receiving report is submitted to accounting by an 

employee in the receiving department. A few days later, he sends Westgate an invoice 

for the quantity of goods ordered from a small company he owns and operates in the 
evening. A check is prepared, and the amount is paid when the receiving report and 
the vendor’s invoice are matched by the accounts payable clerk. 

Telephone expense (account 2112) was unintentionally charged to repairs and 


ABSES PDE Bahancezccorcea until several weeks after the 


goods are received because receiving personnel fail to forward receiving reports to 
accounting. When pressure from a vendor’s credit department is put on Westgate’s 
accounting department, it searches for the receiving report, records the transactions 
in the acquisitions journal, and pays the bill. 


For each misstatement, identify the transaction-related audit objective that was not met. 


For each misstatement, state a control that should have prevented it from occurring 
on a continuing basis. 


For each misstatement, state a substantive audit procedure that could uncover it. 


18-25 (Objectives 18-5, 18-6, 18-7) The following auditing procedures were performed in 
the audit of accounts payable: 


1. 
2. 


1S) 


wn 
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Obtain a list of accounts payable. Re-add and compare with the general ledger. 

Trace from the general ledger trial balance and supporting documentation to deter- 

mine whether accounts payable, related parties, and other related assets and 

liabilities are properly included on the financial statements. 

. For liabilities that are payable in a foreign currency, determine the exchange rate and 
check calculations. 

. Discuss with the bookkeeper whether any amounts included on the accounts 
payable list are due to related parties, debit balances, or notes payable. 

. Obtain vendors’ statements from the controller and reconcile them to the listing of 
accounts payable. 

. Obtain vendors’ statements directly from vendors and reconcile them to the listing 
of accounts payable. 

. Examine supporting documents for cash disbursements several days before and after 

year-end. 
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8. Examine the acquisitions and cash disbursements journals for the last few days of the 
current period and first few days of the succeeding period, looking for large or 
unusual transactions. 


a. For each procedure, identify the type of audit evidence used. 
b. For each procedure, identify which balance-related audit objective(s) were satisfied. 


c. Evaluate the need to have certain objectives satisfied by more than one audit procedure. 


18-26 (Objectives 18-3, 18-4) In testing cash disbursements for the Jay Klein Company, 
you obtained an understanding of internal control. The controls are reasonably good, and 
no unusual audit problems arose in previous years. 

Although there are not many individuals in the accounting department, there is a 
reasonable separation of duties in the organization. There is a separate purchasing agent 
who is responsible for ordering goods and a separate receiving department that counts the 
goods when they are received and prepares receiving reports. There is a separation of duties 
between recording acquisitions and cash disbursements, and all information is recorded in 
the two journals independently. The controller reviews all supporting documents before 
signing the checks, and he immediately mails the checks to the vendors. Check copies are 
used for subsequent recording. 

All aspects of internal control seem satisfactory to you, and you perform minimum tests 
of 25 transactions as a means of assessing control risk. In your tests, you discover the 
following exceptions: 


1. Two items in the acquisitions journal were misclassified. 

2. Three invoices were not initialed by the controller, but there were no dollar misstate- 
ments evident in the transactions. 

3. Five receiving reports were recorded in the acquisitions journal at least 2 weeks later 
than their date on the receiving report. 

4, One invoice was paid twice. The second payment was supported by a duplicate copy 
of the invoice. Both copies of thyyi age" pHPF ?inh nce 

5. One check amount in the cash dtsbursements journal was Hance nae the 
amount stated on the vendor’s invoice. 

6. One voided check was missing. 

7. Two receiving reports for vendors’ invoices were missing from the transaction 
packets. One vendor’s invoice had an extension error, and the invoice was initialed 
that the amount had been checked. 


a. Identify whether each of 1 through 7 is a control test deviation, a monetary mis- 
statement, or both. 


b. For each exception, identify which transaction-related audit objective was not met. 
c. What is the audit importance of each of these exceptions? 


d. What follow-up procedures would you use to determine more about the nature of 
each exception? 


e. How would each of these exceptions affect the rest of your audit? Be specific. 


f. Identify internal controls that should have prevented each misstatement. 


18-27 (Objective 18-3, 18-6) The Broughton Cap Company requires that prenumbered 
receiving reports be completed when purchased inventory items arrive in the receiving 
department. At the time of receipt, the receiving clerk writes the date of receipt on the 
receiving document. The last receipt in the fiscal year ended June 30, 2011 was recorded on 
receiving report 7279. The accounts payable department prepares prenumbered voucher 
packages as receiving reports are received from the receiving department. Entries in the 
acquisitions journal are prepared using information contained in the voucher package. 


For late June 2011 and early July 2011, receipts of goods are included in voucher packages 
as follows: 
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Receiving Report No. Voucher No. 





7276 2532 
7277 2526 
7278 2527 
7279 2530 
7280 2531 
7281 2528 
7282 2529 


The June 2011 and July 2011 acquisitions journals included the following information: 
ACQUISITIONS JOURNAL - JUNE 2011 














Day of Month Voucher No. Amount of Purchase 
29 2526 $7,256.22 
29 2528 $3,466.10 
30 2531 $8,221.89 
30 2532 $1,980.44 
ACQUISITIONS JOURNAL - JULY 2011 
Day of Month Voucher No. Amount of Purchase 
1 2527 $5,001.99 
1 2529 $4,888.33 
2 2530 $1,933.74 
Required a. Which voucher packages, if any, are recorded in the wrong accounting period? Prepare an 


adjusting entry to correct the financial statements for the year ended June 30, 2011. Assume 
Broughton uses a perpetual inventory system and all purchases are inventory items. 

b. Assume the receiving clerk accidentally wrote June 30 on receiving reports 7280 
through 7282. Explain how that will affect the correctness of the financial statements. 
How will you, as an auditor, discover that error? 


Cc. pei i nepitypms, Rnhancey would follow in making sure that 
cut ag GP is accurate at the balance sheet date. 


d. Identify internal controls that will reduce the likelihood of cutoff misstatements 
related to purchases. 


18-28 (Objective 18-6) You were in the final stages of your audit of the financial statements 
of Ozine Corporation for the year ended December 31, 2011, when you were consulted by 
the corporations president, who believes there is no point to your examining the year 2012 
acquisitions journal and testing data in support of year 2012 entries. He stated that (a) bills 
pertaining to 2011 that were received too late to be included in the December acquisitions 
journal were recorded as of the year-end by the corporation by journal entry, (b) the 
internal auditor made tests after the year-end, and (c) he will furnish you with a letter 
certifying that there were no unrecorded liabilities. 

Required a. Should a CPA’s test for unrecorded liabilities be affected by the fact that the client 

made a journal entry to record 2011 bills that were received late? Explain. 

b. Should a CPA's test for unrecorded liabilities be affected by the fact that a letter is 
obtained in which a responsible management official certifies that to the best of his or 
her knowledge all liabilities have been recorded? Explain. 

c. Should a CPA's test for unrecorded liabilities be eliminated or reduced because of the 
internal audit tests? Explain. 

d. Assume that the corporation, which handled some government contracts, had no 
internal auditor but that an auditor for a federal agency spent 3 weeks auditing the 
records and was just completing his work at this time. How will the CPA’s unrecorded 
liability test be affected by the work of the auditor for a federal agency? 

e. What sources in addition to the year 2012 acquisitions journal should the CPA con- 
sider to locate possible unrecorded liabilities?* 


*AICPA adapted. 
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18-29 (Objective 18-3) Even though Bergeron Wholesale Company is privately held, 
management has decided that it is worthwhile to have effective internal controls to the extent it is 
practical in a small company, as a way to reduce the likelihood of error and fraud. They have 
implemented the following system for acquisitions and payments. 

Prenumbered purchase orders are approved and initialed by the vice president of finance 
for all purchases, including both tangible and service acquisitions. When good are received the 
goods are counted and a prenumbered receiving report is prepared with a copy sent to 
accounting. The goods are stored in the warehouse under the control of the shipping manager. 
The receiving report is used to update the perpetual records, which include only quantities 
and are used to determine the need to reorder goods and for control over the physical 
quantities of inventory. When a vendor’s invoice is received, the chief accountant compares it 
to the purchase order, and for tangible goods the receiving report, for both accuracy and 
appropriateness of the expenditure, then staples the documents and initials each vendor’s 
invoice. She then records the transaction in the purchases journal and related records using 
small business accounting software. Password protection is used for all records to prevent 
unauthorized access. The chief accountant prepares the checks and updates the cash disburse- 
ments journal using the same accounting software and submits the checks to Bergeron’s 
president for signature along with all supporting documentation. The president reviews and 
initials all support before signing checks and mails them to vendors on his way home from 
work. The controller receives the monthly bank reconciliation directly from the bank and does 
a detailed reconciliation, including examining cancelled checks and supporting documentation 
for larger and unusual amounts. The controller also receives the monthly accounts payable 
listing from the chief accountant, compares the total to the general ledger, initials the listing 
and files it. Once each quarter the inventory is counted and compared to the perpetual 
records, both as a check on record keeping and to determine if there are inventory losses. 
Differences are listed, used for discussion with the controller and shipping manager, and filed. 


a. List at least ten internal controls in the Bergeron acquisition and payment cycle. Be as 
specific as possible. 


b. For each control, identify the Apago.)RDiMitknhancexnch the 


control relates. 


c. For each control, list one test of control that is useful to test the effectiveness of the 
control. Be as specific as possible. 


18-30 (Objective 18-7) As part of the June 30, 2011, audit of accounts payable of Milner 
Products Company, the auditor sent 22 confirmations of accounts payable to vendors in the 
form of requests for statements. Four of the statements were not returned by the vendors, and 
five vendors reported balances different from the amounts recorded in Milner’s accounts 
payable master file. The auditor made duplicate copies of the five vendors’ statements to 
maintain control of the independent information and turned the originals over to the client’s 
accounts payable clerk to reconcile the differences. Two days later, the clerk returned the five 
statements to the auditor with the information on the audit schedule following part c. 


a. Evaluate the acceptability of having the client perform the reconciliations, assuming 
that the auditor intends to perform adequate additional tests. 

b. Describe the additional tests that should be performed for each of the five statements 
that included differences. 


c. What audit procedures should be performed for the nonresponses to the confirma- 
tion requests? 





Statement 1 Balance per vendor's statement $ 6,618.01 
Payment by Milner on June 30, 2011 (4,601.01) 
Balance per master file $ 2,017.00 

Statement 2 Balance per vendor's statement $ 9,618.93 
Invoices not received by Milner (2,733.18) 
Payment by Milner on June 15, 2011 (1,000.00) 
Balance per master file $ 5,885.75 
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Statement 3 Balance per vendor's statement $26,251.80 


Balance per master file (20,516.11) 
Difference cannot be located because the vendor 
failed to provide details of its account balance $ 5,735.69 
Statement 4 Balance per vendor's statement $ 6,170.15 
Credit memo issued by vendor on July 15, 2011 (2,360.15) 
Balance per master file $ 3,810.00 
Statement 5 Balance per vendor's statement $ 8,619.21 
Payment by Milner on July 3, 2011 (3,000.00) 
Unlocated difference not followed up 
because of minor amount 215.06 
Balance per master file $ 5,834.27 





18-31 (Objective 18-6) The physical inventory for Ajak Manufacturing was taken on 
December 30, 2011, rather than December 31, because the client had to operate the plant 
for a special order the last day of the year. At the time of the client’s physical count, you 
observed that acquisitions represented by receiving report number 2631 and all preceding 
ones were included in the physical count, whereas inventory represented by succeeding 
numbers was excluded. On the evening of December 31, you stopped by the plant and 
noted that inventory represented by receiving report numbers 2632 through 2634 was 
received subsequent to the physical count but before the end of the year. You later noted 
that the final inventory on the financial statements contained only those items included in 
the physical count. In testing accounts payable at December 31, 2011, you obtain a 
schedule from the client to aid you in testing the adequacy of the cutoff. The following 
schedule includes the information that you have not yet resolved: 


INFORMATION ON THE VENDOR'S INVOICE 





Amount Presently 





Receiving Amount of Included in or FOB Origin 
R n E f or 
wpa gon PDF, ‘Bit aya acer. Date Shipping Date Destination 
2631 $4,256.40 Included 12-30-11 12-30-11 Origin 

2632 6,320.54 Excluded 12-26-11 12-15-11 Destination 
2633 3,761.22 Included 12-31-11 12-26-11 Origin 
2634 7,832.18 Excluded 12-16-11 12-27-11 Destination 
2635 6,847.77 Included 12-28-11 12-31-11 Origin 
2636 6,373.58 Excluded 01-03-12 12-31-11 Destination 
2637 5,878.36 Excluded 01-05-12 12-26-11 Origin 
2638 3,355.05 Excluded 12-31-11 01-03-12 Origin 





*All entries to record inventory acquisitions are recorded by the client as a debit to purchases and a credit to 
accounts payable. 


a. Explain the relationship between inventory and accounts payable cutoff. 


b. For each of the receiving reports, state the misstatement in inventory or accounts 
payable, if any exists, and prepare an adjusting entry to correct the financial state- 
ments, if a misstatement exists. 


c. Which of the misstatements in part b are most important? Explain. 


CASE 


18-32 (Objectives 18-2, 18-3, 18-4, 18-6) The following tests of controls and substantive 
tests of transactions audit procedures for acquisitions and cash disbursements are to be 
used in the audit of Ward Publishing Company. You concluded that internal control 
appears effective and a reduced assessed control risk is likely to be cost beneficial. Ward’s 
active involvement in the business, good separation of duties, and a competent controller 
and other employees are factors affecting your opinion. 
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Ward Publishing Company — Part | 
(See page 632 for Part II, and Case 19-28 on pages 655-656 for Part III) 


Tests of Controls and Substantive Tests of Transactions Audit Procedures 
for Acquisitions and Cash Disbursements 
1. Foot and cross-foot the acquisitions and cash disbursements journals for 2 months 
and trace totals to postings in the general ledger. 
2. Scan the acquisitions and cash disbursements journals for all months and investigate 
any unusual entries. 
3. Reconcile cash disbursements per books to cash disbursements per bank statement 
for 1 month. 
4, Examine evidence that the bank reconciliation is prepared by the controller. 
5. Inquire and observe whether the accounts payable master file balances are peri- 
odically reconciled to vendors’ statements by the controller. 
6. Examine the log book as evidence that the numerical sequence of checks is accounted 
for by someone independent of the preparation function. 
7. Inquire and observe that checks are mailed by D. Ward or someone under his 
supervision after he signs checks. 
8. Examine initials indicating that the controller balances the accounts payable master 
file to the general ledger monthly. 
9. Select a sample of entries in the cash disbursements journal, and 
a. obtain related cancelled checks and compare with entry for payee, date, and 
amount and examine signature endorsement. 
b. obtain vendors’ invoices, receiving reports, and purchase orders, and 
(1) determine that supporting documents are attached to vendors’ invoices. 
(2) determine that documents agree with the cash disbursements journal. 
(3) compare vendors’ names, amounts, and dates with entries. 
(4) determine whether a discount was taken when appropriate. 
(5) examine vendors’ invoices for initials indicating an independent review of 
chart of account codinkp ago PDF Enhancer 
(6) examine reasonableness of cash disbursements and account codings. 
(7) review invoices for approval of acquisitions by Ward. 
(8) review purchase orders and/or purchase requisitions for proper approval. 
(9) verify prices and recalculate footings and extensions on invoices. 

(10) compare quantities and descriptions on purchase orders, receiving reports, 
and vendors’ invoices to the extent applicable. 

(11) examine vendors’ invoices and receiving reports to determine that the check 
numbers are included and the documents are marked “paid” at the time of 
check signing. 

c. Trace postings to the accounts payable master file for name, amount, and date. 
10. Select a sample of receiving reports issued during the year and trace to vendors’ 
invoice and entries in the acquisitions journal. 
a. Compare type of merchandise, name of vendor, date received, quantities, and amounts. 
b. If the transaction is indicated in the acquisitions journal as paid, trace the check 
number to the entry in the cash disbursements journal. If unpaid, investigate reasons. 
c. Trace transactions to accounts payable master file, comparing name, amount, and date. 


Prepare all parts of a sampling data sheet (such as the one in Figure 15-2 on page 490) through + = Required 
the planned sample size for the preceding audit program, assuming that a line item in the 

cash disbursements journal is used for the sampling unit. Use either nonstatistical or 

attributes sampling. For all procedures for which the line item in the cash disbursements 

journal is not an appropriate sampling unit, assume that audit procedures were performed 

on a nonsampling basis. For all tests of controls, use a tolerable exception rate of 5%, and 

for all substantive tests of transactions, use a rate of 6%. Use an ARACR of 10%, which is 

considered medium. Plan for an estimated population exception rate of 1% for tests of con- 

trols and 0% for substantive tests of transactions. 

Prepare the data sheet using the computer (instructor option—also applies to Part II). 
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Part Il 

Assume a sample size of 50 for all procedures, regardless of your answers in Part I. For 
other procedures, assume that an adequate sample size for the circumstance was selected. 
The only exceptions in your audit tests for all tests of controls and substantive tests of 
transactions audit procedures are as follows: 

1. Procedure 2—Two large transactions were identified as being unusual. Investigation 
determined that they were authorized acquisitions of fixed assets. They were both 
correctly recorded. 

2. Procedure 9b(1)—A purchase order was not attached to a vendor’s invoice. The pur- 

chase order was found in a separate file and determined to be approved and appropriate. 

. Procedure 9b(5)—Six vendors’ invoices were not initialed as being internally 
verified. Three actual misclassifications existed. The controller explained that he 
often did not review codings because of the competence of the accounting clerk 
doing the coding and was surprised at the mistakes. 


Ow 


Required a. Complete the sampling data sheet from Part I using either nonstatistical or attributes 
sampling. 
b. Explain the effect of the exceptions on tests of details of accounts payable. Which 
balance-related audit objectives are affected, and how do those objectives, in turn, 
affect the audit of accounts payable? 


c. Given your tests of controls and substantive tests of transactions results, write an audit 
program for tests of details of balances for accounts payable. Assume: 
(1) The client provided a list of accounts payable, prepared from the master file. 
(2) Acceptable audit risk for accounts payable is high. 
(3) Inherent risk for accounts payable is low. 
(4) Analytical procedure results were excellent. 


INTERNET PROBLEM 18-1: 


IDENTIFYING ACCOUNTS PAYABLE FRAUD 





The embezzlement of funds from organizations is often orchestrated through fictitious 
accounts payable and related cash disbursement transactions. The AuditNet online 
resource center for auditors includes information about typical accounts payable fraud 
techniques. Visit www.auditnet.org and select the link for “Virtual Library” to search for a 
two-part series article “Ten Ways to Identify Accounts Payable Fraud.” Read both Part 1 and 
Part 2 of this article to answer the following questions. 
Required a. What contributes to the risk that entities fail to detect duplicate payments to vendors? 
b. What techniques might help detect duplicate payments? 
c. How can applying Benford’s law help detect fraudulent accounts payable transactions? 
d. What techniques can be used to identify fraudulent transactions that are just below 
amounts for required approvals? 


e. What techniques might help detect fictitious vendors in the vendor master file that 
might result in unauthorized payments being sent to employees? 
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COMPLETING THE TESTS 


IN THE ACQUISITION LEARNING OBJECTIVES 
AND PAYMENT CYCLE: 


you should be able to 


VE R| F| CAT| OC N QC) F 19-1 Recognize the many accounts 
in the acquisition and payment 
cycle. 
S F Ie EC] F D ACCO J N TS 19-2 Design and perform audit tests 
of property, plant, and equipment 
and related accounts. 


19-3 Design and perform audit tests 


Incorrect Classifications Hide A Greater Net Loss of prepaid expenses. 
TV Communications Network (TVCN), a Denver-based wireless cable oe poe aetna audit tests 
television company, materially understated losses in its financial statements poe ane 


by improperly recording $2.5 million of expenses as a direct decrease in 19-5 Design aaah audit ne of 
stockholders’ equity. The misstatement took the company from an actual alec alias rp ge aati 
net loss of $4.7 million to a reported loss of only $2.2 million. 








fa 
X 





According to the investigation by the SEC, the expenses charged to equity were from disbursements for the 
development and distribution of brochures promoting the company’s business prospects. The payments should have 
been expensed and reflected in the Ade GFRemEh RDF dee NESE 


The internal controls associated with the advertising expenses were clearly inadequate. TVCN typically did not have 
invoices or other documentation available when payments were made by the company’s president, who controlled 
the bank account. Because of the lack of adequate documentation, when the financial statements were prepared, 
TVCN employees responsible for recording the expenses did not have sufficient information to properly classify the 
disbursements. The SEC found that even when documentation was available, the accounts where the transactions 
were recorded conflicted with the supporting documentation. 


Unfortunately, TVCN’s auditor relied on inquiry of the company president as the primary evidence about the nature of 
the advertising payments. In his substantive testing of transactions exceeding $10,000, the auditor relied on the 
company controller to identify all transactions meeting the criteria for review. Needless to say, the controller did not 
present all transactions meeting the $10,000 scope. As you might expect, the SEC brought charges against the auditor 
for failing to comply with auditing standards. 


Source: Accounting and Auditing Enforcement Release No. 534, Commerce Clearing House, Inc., Chicago. 


L Chapter 18, we noted that transactions in the acquisition and payment cycle affect several asset accounts: 
supplies, property, plant and equipment, and prepaid expenses accounts, to name a few. Payments made for 
services also affect many expense accounts. To continue our discussion of the acquisition and payment cycle, this 
chapter examines audit issues related to other accounts commonly found in the acquisition and payment cycles of 
most businesses. 

The story about TVCN highlights the importance of understanding the nature of acquisition and payment cycle 
transactions. Because transactions in this cycle affect numerous accounts in both the balance sheet and the income 
statement, incorrectly classified transactions may significantly affect reported results, as they did for TVCN. Auditors 
need to understand the nature of transactions flowing through the acquisition and payment cycle so that they can 
effectively assess the risk of material misstatement and perform further audit procedures to evaluate accounts in the 
cycle. 


TYPES OF OTHER ACCOUNTS IN 


THE ACQUISITION AND PAYMENT CYCLE 





OBJECTIVE 19-1 Table 19-1 highlights many of the typical accounts associated with transactions in the 
acquisition and payment cycle. The types of assets, expenses, and liabilities will differ for 
many companies, especially those in industries other than retail, wholesale and manu- 





Recognize the many 
accounts in the acquisition : 
and payment cycle. facturing. 


The methodology associated with auditing these accounts is similar to the audits of 
other accounts discussed in earlier chapters. The methodology is the same as Figure 
18-3 on page 613 for accounts payable, except for the name of the account being audited. 

The last chapter presented an overview of typical tests of controls and substantive 
tests of transactions for acquisition and payment cycle transactions, as well as 
commonly used analytical procedures and tests of details of balances for accounts 
payab . In this ga. es S oy some of the other key accounts in this cycle are 
examf AIR iY th #29) ancer 





* Property, plant, and equipment * Other liabilities 
* Prepaid expenses * Income and expense accounts 


AUDIT OF PROPERTY, PLANT, AND EQUIPMENT 


OBJECTIVE 19-2 Property, plant, and equipment are assets that have expected lives of more than one 
year, are used in the business, and are not acquired for resale. The intent to use the assets 
as part of the operation of the client’s business and their expected lives of more than 





Design and perform audit 


tests of property, plant, and fae hae ore ; ; 
equipment and related one year are the significant characteristics that distinguish these assets from inventory, 


accounts. prepaid expenses, and investments. Table 19-2 shows examples of some of the typical 

















TABLE 19-1 Accounts Typically Associated with Acquisition and Payment 
Cycle Transactions 

Assets Expenses Liabilities 
Cash Cost of goods sold Accounts payable 
Inventory Rent expense Rent payable 
Supplies Property taxes Accrued professional fees 
Property, plant, and equipment Income tax expense Accrued property taxes 
Patents, trademarks, and copyrights Insurance expense Other accrued expenses 
Prepaid rent Professional fees Income taxes payable 
Prepaid taxes Retirement benefits 
Prepaid insurance Utilities 

= o 
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Classifications of Property, Plant, and Equipment Accounts ) 


Land and land improvements 
Buildings and building improvements 
Equipment 

Furniture and fixtures 

Autos and trucks 

Leasehold improvements 


Construction-in-process for property, plant, and equipment 
be 7 














classifications of property, plant, and equipment accounts. The acquisition of property, 
plant, and equipment occurs through the acquisition and payment cycle. 

Because the audits of property, plant, and equipment accounts are similar, one 
example (equipment) is used to illustrate an approach to auditing all three types of 
accounts. Significant differences in the verification of other types of accounts are 
discussed as they arise. 


The accounts commonly used for equipment are illustrated in Figure 19-1. Notice that 
the debits to equipment arise from the acquisition and payment cycle. Because the 
source of debits in the asset account is the acquisitions journal, the accounting system 
has normally already been tested for recording current period additions to equipment 
as part of the tests of the acquisition and payment cycle (which we studied in the last 
chapter). However, because equipment additions are infrequent, often for large amounts, 
and subject to special controls, such as board of directors’ approval, the auditor may 
decide not to rely heavily on these tests as evidence supporting fixed asset additions. 

The primary accounting record for equipment and other property, plant, and 
equipment accounts is generally a ApayonPDE- ih HeiniGergudes a 
detailed record for each piece of equipmenfand other types of property owned. Each 
record in the file includes a description of the asset, date of acquisition, original cost, 
current year depreciation, and accumulated depreciation for the property. 

The totals for all records in the master file equal the general ledger balances for the 
related accounts: equipment, depreciation expense, and accumulated depreciation. The 
master file also contains information about property acquired and disposed of during 
the year. 


ener Equipment and Related Accounts ) 








Accumulated 





Equipment depreciation 
Beginning Beginning 
balance balance 


(1) Acquisitions | Disposals Disposals] Current period 


depreciation 







Ending balance Ending balance 


Gain or loss 
on disposals 


ae 


(1) Acquisitions of equipment arise from the acquisition and payment cycle. 
See Figure 18-1 (p. 602). 


Depreciation 
expense 











Overview of 
Equipment-Related 
Accounts 
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Perform 
Analytical Procedures 


Verify Current Year 
Acquisitions 


Auditors verify equipment differently from current asset accounts for three reasons: 


1. There are usually fewer current period acquisitions of equipment, especially 
large equipment used in manufacturing. 

2. The amount of any given acquisition is often material. 

3. The equipment is likely to be kept and maintained in the accounting records 
for several years. 


Because of these differences, the auditing of equipment emphasizes the verification 
of current period acquisitions rather than the balance in the account carried forward 
from the preceding year. In addition, the expected life of assets over one year requires 
depreciation expense and accumulated depreciation accounts, as shown in Figure 19-1 
(p. 635), which are verified as part of the audit of the assets. Finally, equipment may be 
sold or disposed of, triggering a gain or loss entry that the auditor may need to verify. 

Although the approach to verifying equipment differs from that used for current 
assets, several other asset accounts are verified in much the same manner. These include 
patents, copyrights, catalog costs, and all property, plant, and equipment accounts. 

In the audit of equipment and related accounts, it is helpful to separate the tests 
into the following categories: 


* Perform analytical procedures 

* Verify current year acquisitions 

* Verify current year disposals 

* Verify the ending balance in the asset account 

* Verify depreciation expense 

* Verify the ending balance in accumulated depreciation 


Next, let’s examine the use of these categories of tests in the audit of equipment, 
depreciation expense, accumulated depreciation, and gain or loss on disposal accounts. 


As in i “BP e EAR ical aie depends on the nature of the 
client’s Bags" ab dF lus lane Tcal procedures often performed for 
equipment. 

As you can see, most of the typical analytical procedures assess the likelihood of 


material misstatements in depreciation expense and accumulated depreciation. Later in 
the chapter, the substantive tests auditors often focus on for these accounts are discussed. 


Companies must correctly record current year additions because the assets have long- 
term effects on the financial statements. The failure to capitalize a fixed asset, or the 
recording of an acquisition at the incorrect amount, affects the balance sheet until the 
company disposes of the asset. The income statement is affected until the asset is fully 
depreciated. 


Analytical Procedures for Equipment ) 


























Analytical Procedure Possible Misstatement 

Compare depreciation expense divided by gross Misstatement in depreciation expense 
equipment cost with previous years. and accumulated depreciation. 

Compare accumulated depreciation divided by gross Misstatement in accumulated 
equipment cost with previous years. depreciation. 

Compare monthly or annual repairs and maintenance, Expensing amounts that should be 
supplies expense, small tools expense, and similar capitalized. 
accounts with previous years. 

Compare gross manufacturing cost divided by some Idle equipment or equipment that was 
measure of production with previous years. disposed of but not written off. 

x _ 
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Because of the importance of current period acquisitions in the audit of equipment, 
auditors use seven of the eight balance-related audit objectives as a frame of reference 
for tests of details of balances: existence, completeness, accuracy, classification, cutoff, 
detail tie-in, and rights and obligations. (Realizable value is discussed in connection 
with verifying ending balances.) The balance-related audit objectives and common 
audit tests are shown in Table 19-4. Existence, completeness, accuracy, classification, 
and rights are usually the major objectives for this part of the audit. 

As in all other audit areas, the actual audit tests and sample size depend heavily on 
tolerable misstatement, inherent risk, and assessed control risk. Tolerable misstatement is 
important for verifying current year additions because these transactions vary from 
immaterial amounts in some years to a large number of significant acquisitions in others. 





TABLE 19-4 





Balance-Related Audit Objectives and Tests of Details of Balances for Equipment Additions 





Balance-Related 
Audit Objective 


Common Tests of Details 
of Balances Procedures 


Comments 





Current year acquisitions in the 
acquisitions schedule agree with 
related master file amounts, and 
the total agrees with the general 
ledger (detail tie-in). 


Foot the acquisitions schedule. 

Trace the individual acquisitions to 
the master file for amounts and 
descriptions. 


Trace the total to the general ledger. 


Footing the acquisitions schedule and 
tracing individual acquisitions should 
be limited unless controls are deficient. 


All increases in the general ledger 
balance for the year should reconcile 
to the schedule. 





Current year acquisitions as listed 
exist (existence). 


Examine vendors’ invoices and receiving 
reports. 
Physically examine assets. 


It is uncommon to physically examine 
assets acquired unless controls are 
deficient or amounts are material. 





Existing acquisitions are recorded 
(completeness). 


Examine vendors’ invoices of closely related 
accounts such as repairs and maintenance 
to uncover items that should be recorded 
as equipment. 

Review lease and rental agreements. 


This objective is one of the most 
important for equipment. 





Current year acquisitions as listed are 
accurate (accuracy). 


Examine vendors’ invoices. 


Extent depends on inherent risk and 
effectiveness of internal controls. 





Current year acquisitions as listed are 
correctly classified (classification). 


Examine vendors’ invoices in various 
equipment accounts to uncover items that 
should be classified as manufacturing or 
office equipment, part of the buildings, 
or repairs. 

Examine vendors’ invoices of closely related 
accounts such as repairs to uncover items 
that should be recorded as equipment. 

Examine rent and lease expense for 
capitalizable leases. 


The objective is closely related to 
tests for completeness. It is done 
in conjunction with that objective 
and tests for accuracy. 





Current year acquisitions are recorded 
in the correct period (cutoff). 


Review transactions near the balance sheet 
date for correct period. 


Usually done as part of accounts 
payable cutoff tests. 





The client has rights to current year 
acquisitions (rights). 





Examine vendors’ invoices. 


Ordinarily the main concern is 
whether equipment is owned or 
leased. Purchase or lease contracts 
are examined for equipment and 
property deeds, abstracts, and tax 
bills are frequently examined for 
land or major buildings. 
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Verify Current 
Year Disposals 


The starting point for the verification of current year acquisitions is normally a 
schedule obtained from the client of all acquisitions recorded in the general ledger 
property, plant, and equipment accounts during the year. The client obtains this 
information from the property master file. A typical schedule lists each addition 
separately and includes the date of the acquisition, vendor, description, notation of 
whether it is new or used, life of the asset for depreciation purposes, depreciation 
method, and cost. 

As you study Table 19-4 (p. 637), notice that the most common audit test to verify 
additions is to examine vendors’ invoices. Additional testing, beyond that which is 
done as part of the tests of controls and substantive tests of transactions, is often 
necessary because of the complexity of many equipment transactions and the materiality 
of the amounts. It is normal for auditors to verify large and unusual transactions for 
the entire year as well as a representative sample of typical additions. The extent of 
testing depends on the auditor’s assessed control risk for acquisitions and the materiality 
of the additions. 

In testing acquisitions, the auditor must understand accounting standards to make 
certain the client follows the related requirements. For example, the auditor needs to 
be alert for the possibility of the client’s failure to include material transportation and 
installation costs as part of the asset’s acquisition cost and the failure to properly 
record the trade-in of existing equipment. The auditor also needs to know the client’s 
capitalization policies to determine whether acquisitions are treated consistently with 
those of the preceding year. For example, if the client’s policy is to automatically 
expense acquisitions that are less than a certain amount, such as $1,000, the auditor 
should verify that the policy is followed in the current year. 

Auditors should also verify recorded transactions for correct classification among 
various equipment accounts. In some cases, amounts recorded as manufacturing 
equipment should be classified as office equipment or as a part of the building. It is also 
poss ADAG (PPE Enhancers rents, or similar expenses. Poor 
internal Controfs over document preparation, as illustrated by the chapter-opening story 
about TVCN, can result in significant misclassifications of disbursement transactions. 

Clients commonly include transactions that should be recorded as assets in repairs 
and maintenance expense, lease expense, supplies, small tools, and similar accounts. 
The misstatement may result from a lack of understanding accounting standards or 
from clients’ desires to avoid income taxes. If auditors conclude this type of material 
misstatement is likely, they may need to vouch larger amounts debited to the expense 
accounts. It isa common practice to do so as part of the audit of the property, plant, and 
equipment accounts. 

Auditors also need to examine whether the client has a right to record equipment 
as an asset. Some large manufacturing equipment and other types of machinery, such 
as sophisticated medical equipment or computer data center equipment, may be under 
an operating lease. Auditors frequently examine purchase or lease contracts to determine 
whether capitalization of the equipment is appropriate. 


Transactions involving the disposal of equipment are often misstated when company 
internal controls lack a formal method to inform management of the sale, trade-in, 
abandonment, or theft of recorded machinery and equipment. If the client fails to 
record disposals, the original cost of the equipment account will be overstated 
indefinitely, and net book value will be overstated until the asset is fully depreciated. 
Formal methods of tracking disposals and provisions for proper authorization of the 
sale or other disposal of equipment help reduce the risk of misstatement. There should 
also be adequate internal verification of recorded disposals to make sure that assets are 
correctly removed from the accounting records. 

The auditor’s main objectives in the verification of the sale, trade-in, or abandon- 
ment of equipment are to gather sufficient appropriate evidence that all disposals are 
recorded and at the correct amounts. The starting point for verifying disposals is the 
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client’s schedule of recorded disposals. The schedule typically includes the date when 
the asset was disposed of, name of the person or firm acquiring the asset, selling price, 
original cost, acquisition date, and accumulated depreciation. 

Detail tie-in tests of the recorded disposals schedule are necessary, including 
footing the schedule, tracing the totals on the schedule to the recorded disposals in the 
general ledger, and tracing the cost and accumulated depreciation of the disposals to 
the property master file. 

Because the failure to record disposals of equipment no longer used in the business 
can significantly affect the financial statements, the search for unrecorded disposals is 
essential. The nature and adequacy of the controls over disposals affect the extent of the 
search. The following procedures are often used for verifying disposals: 

* Review whether newly acquired assets replace existing assets 

* Analyze gains and losses on the disposal of assets and miscellaneous income for 

receipts from the disposal of assets 

* Review plant modifications and changes in product line, changes in major costly 

computer-related equipment, property taxes, or insurance coverage for indica- 
tions of deletions of equipment 

* Make inquiries of management and production personnel about the possibility 

of the disposal of assets 


When an asset is sold or disposed of without having been traded in for a replace- 
ment asset, the accuracy of the transaction can be verified by examining the related 
sales invoice and property master file. The auditor should compare the cost and 
accumulated depreciation in the master file with the recorded entry in the general 
journal and recompute the gain or loss on the disposal of the asset for comparison with 
the accounting records. When trade-in of an asset for a replacement occurs, the auditor 
should be sure that the new asset is capitalized and the replaced asset correctly elimi- 


nated from the records, considering the book value of the a ioac in and the 
additional cost of the new asset. pago PDF Enhancer 


Two of the auditor’s objectives when auditing the ending balance in the equipment 
accounts include determining that: 
1. All recorded equipment physically exists on the balance sheet date (existence) 
2. All equipment owned is recorded (completeness) 


When designing audit tests to meet these objectives, auditors first consider the 
nature of internal controls over equipment. Ideally, auditors are able to conclude that 
controls are sufficiently strong to allow them to rely on balances carried forward from 
the prior year. Important controls include the use of a master file for individual fixed 
assets, adequate physical controls over assets that are easily movable (such as 
computers, tools, and vehicles), assignment of identification numbers to each plant 
asset, and periodic physical count of fixed assets and their reconciliation by accounting 
personnel. A formal method of informing the accounting department of all disposals 
of fixed assets is also an important control over the balance of assets carried forward 
into the current year. 

Typically, the first audit step concerns the detail tie-in objective: Equipment, as 
listed in the master file, agrees with the general ledger. Examining a printout of the 
master file that totals to the general ledger balance is ordinarily sufficient. The auditor 
may choose to use audit software to foot an electronic version of the master file or 
manually test-foot a few pages. 

After assessing control risk for the existence objective, the auditor decides whether 
it is necessary to verify the existence of individual items of equipment included in the 
master file. If there is a high likelihood of a material amount of missing fixed assets still 
included in the master file, the auditor can select a sample from the master file and 
examine the actual assets. Similarly, based on the auditor’s assessment of control risk 
for the completeness objective, the auditor may physically examine a sample of major 


Verify Ending Balance 
of Asset Account 
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Verify 
Depreciation Expense 


equipment items and trace them to the master file. In rare cases, the auditor may decide 
it is necessary for the client to take a complete physical inventory of fixed assets to make 
sure they all exist, and the fixed asset records are complete. If a physical inventory is taken, 
the auditor normally observes the count. 

The auditor normally does not need to test the accuracy or classification of fixed 
assets recorded in prior periods because, presumably, they were verified in previous 
audits at the time they were acquired. But the auditor should be aware that companies 
may occasionally have equipment on hand that is no longer used in operations. If the 
amounts are material, the auditor should evaluate whether they should be written 
down to net realizable value (realizable value objective) or at least classified separately 
as “nonoperating equipment.” 

In addition to performing procedures to obtain evidence related to balance-related 
audit objectives for fixed assets, auditors also perform audit procedures related to the four 
presentation and disclosure objectives for fixed assets. A major consideration in verifying 
disclosures related to fixed assets is the possibility of legal encumbrances. Auditors may 
use several methods to determine whether equipment is encumbered, including: 


* Read the terms of loan and credit agreements 
* Mail loan confirmation requests to banks and other lending institutions 
* Have discussions with the client or send letters to legal counsel 


The proper presentation and disclosure of equipment in the financial statements 
must be evaluated carefully to make sure that accounting standards are followed. 
Equipment should include the gross cost and should ordinarily be separated from 
other fixed assets. Leased property should also be disclosed separately, and all liens on 
property must be included in the footnotes. Auditors must perform sufficient tests to 
verify that all four presentation and disclosure objectives are met. 


Depreciation expense is one of the few expense accounts not verified as part of tests of 


contr ipa go" PDEs F ndhercrresel pe recorded amounts are determined 
by internal allocations rather than by exchange transactions with outside parties. When 
depreciation expense is material, more tests of details of depreciation expense are 
required than for an account that has already been verified through tests of controls 
and substantive tests of transactions. 

The most important balance-related audit objective for depreciation expense is 
accuracy. Auditors focus on determining whether the client followed a consistent 
depreciation policy from period to period, and the client’s calculations are correct. 

In determining the former, auditors must weigh four considerations: 

1. The useful life of current period acquisitions 

2. The method of depreciation 

3. The estimated salvage value 

4. The policy of depreciating assets in the year of acquisition and disposition 


The client’s policies can be determined by discussions with appropriate personnel 
and comparing their responses with information in the auditor’s permanent files. In 
deciding on the reasonableness of the useful lives assigned to newly acquired assets, the 
auditor must consider the physical life of the asset, the expected life (taking into 
account obsolescence or the company’s normal policy of upgrading equipment), and 
established company policies on trading in equipment. 

Occasionally, changing circumstances may necessitate a company to reevaluate the 
useful life of an asset. When this occurs, the revaluation should involve a change in 
accounting estimate rather than a change in accounting principle. The effect of this on 
depreciation must be evaluated. 

A useful method of auditing depreciation is an analytical procedures test of 
reasonableness made by multiplying undepreciated fixed assets by the depreciation rate 
for the year. In making these calculations, the auditor must make adjustments for 
current year additions and disposals, assets with different lengths of life, and assets 
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with different methods of depreciation. Many CPA firms maintain an electronic 
spreadsheet in their permanent file that includes a breakdown of the fixed assets by 
method of depreciation and length of life. If the software calculations are reasonably 
close to the client’s totals and if assessed control risk for depreciation expense is low, 
tests of details for depreciation can be eliminated. 

When an overall reasonableness test cannot be accomplished, more detailed tests 
are usually needed. To do this, auditors recompute depreciation expense for selected 
assets to determine whether the client is following a proper and consistent depreciation 
policy. To be relevant, the detailed calculations should be tied in to the total depreciation 
calculations by footing the depreciation expense on the property master file and recon- 
ciling the total with the general ledger. Because accounting standards require footnote 
disclosures related to fixed asset depreciation, including disclosure of depreciation 
methods and related useful lives by asset class, auditors perform procedures to obtain 
evidence that the four presentation and disclosure-related audit objectives for 
depreciation are satisfied. For example, auditors compare information obtained through 
audit tests of the depreciation expense accounts to information disclosed in footnotes 
to ensure the information presented is consistent with the actual method and assump- 
tions used to calculate and record depreciation. 


The debits to accumulated depreciation are normally tested as a part of the audit of | Verify Ending Balance 
disposals of assets, while the credits are verified as a part of depreciation expense. If the in Accumulated 
auditor traces selected transactions to the accumulated depreciation records in the Depreciation 
property master file as a part of these tests, then little additional testing should be 
required for the ending balance in accumulated depreciation. 

Two objectives are usually emphasized in the audit of the ending balance in 
accumulated depreciation: 


1. Accumulated depreciation as stated in the property master file agrees with the 
general ledger. This objectiva go" RRA ar cepted 
depreciation in the property master fre and tracing the Total to the general ledger. 

2. Accumulated depreciation in the master file is accurate. 

In some cases, the life of equipment may be significantly reduced because of 

reductions in customer demands for products, unexpected physical deterioration, a 
modification in operations, or other changes. Because of these possibilities, auditors 


must evaluate the adequacy of the allowances for accumulated depreciation each year 
to make sure that the net book value does not exceed the realizable value of the assets. 


AUDIT OF PREPAID EXPENSES 


Prepaid expenses, deferred charges, and intangibles are assets that vary in life from OBJECTIVE 19-3 
several months to several years. These include: 


Design and perform audit 
* Prepaid rent * Patents * Deferred charges tests of prepaid expenses. 








* Organization costs * Prepaid insurance * Copyrights 
* Prepaid taxes * Trademarks 


In some cases, these accounts are highly material. However, in a typical audit, the 
company does not have many of the accounts listed or they are immaterial. 

Analytical procedures are often sufficient for prepaid expenses, deferred charges, 
and intangibles. In certain audits, some of these assets can be significant. In this section, 
we examine some of the typical internal controls and related audit tests commonly 
associated with prepaid expenses. In the following discussion, an example of the audit of 
prepaid insurance is used as an account representative of this group because: 

1. Prepaid insurance is found in most audits—virtually every company has some 

type of insurance. 
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Overview of 
Prepaid Insurance 


Internal Controls 


Audit Tests 





a Prepaid Insurance and Related Accounts ) 








Prepaid insurance Insurance expense 
Beginning balance Current period 
insurance expense —— 


(1) — Acquisitions 
(insurance premiums) 


Ending balance 
(1) Acquisitions of insurance premiums arise from the acquisition and payment cycle. 


This can be observed by examining Figure 18-1 (p. 602). 


XM J 











2. Problems commonly encountered in the audit of prepaid insurance are typical 
of this class of accounts. 

3. The auditor’s responsibility for the review of insurance coverage is an addi- 
tional consideration not found in the other accounts in this category. 


Figure 19-2 illustrates the accounts typically used for prepaid insurance and the 
relationship between prepaid insurance and the acquisition and payment cycle through 
the debits to the prepaid insurance account. Because the source of the debits in the 
asset account is the acquisitions journal, the payments of insurance premiums have 
already been partially tested by means of the tests of controls and substantive tests of 
acquisition and cash disbursement transactions. 


InterrPARAGP ro BREia Enhaneekrance expense can be conveniently 


divided into three categories: controls over the acquisition and recording of insurance, 
controls over the insurance register, and controls over the charge-off of insurance 
expense. Controls over the acquisition and recording of insurance are a part of the 
acquisition and payment cycle. Consistent with the procedures discussed in that cycle, 
proper authorization for new insurance policies and payment of insurance premiums 
are important controls. 

An insurance register is a record of insurance policies in force and the expiration 
date of each policy. Auditors use insurance registers to identify policies in force related 
to prepaid insurance accounts. Payment terms and amounts for the policies in force are 
contained in the register. Because the terms and amounts provide the basis for deter- 
mining prepaid insurance amounts, the auditor independently verifies these terms and 
amounts to the underlying insurance policies or contracts. 

Companies often have a standard monthly journal entry to reclassify prepaid 
insurance as insurance expense. If a significant entry is required to adjust the balance in 
prepaid insurance at the end of the year, it indicates a potential misstatement in the 
recording of the acquisition of insurance throughout the year or in the calculation of 
the year-end balance in prepaid insurance. 


In the audit of prepaid insurance, the auditor obtains a schedule from the client that lists 
for each policy in force: 

* Policy information, including policy number, amount of coverage and annual 

premium 

* Beginning prepaid insurance balance 

* Payment of policy premiums 

» Amount charged to insurance expense 

* Ending prepaid insurance balance 
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Throughout the audit of prepaid insurance and insurance expense, the auditor 
should keep in mind that the amount in insurance expense is a residual. The only tests 
of the balance in the expense account that are ordinarily necessary include analytical 
procedures and a test to be sure that all charges to insurance expense arose from credits 
to prepaid insurance. Because the payments of premiums are tested as part of the tests 
of controls and substantive tests of transactions and analytical procedures, the 
emphasis in the tests of details of balances is on prepaid insurance. 

The beginning and ending balances in prepaid insurance are frequently immaterial 
and often there are few transactions debited and credited to the balance during the 
year, most of which are small and simple to understand. Therefore, the auditor can 
generally spend little time verifying the balance or the transactions. If the auditor 
decides not to verify the balance in detail, analytical procedures become increasingly 
important to identify potentially significant misstatements. Auditors commonly per- 
form the following analytical procedures for prepaid insurance and insurance expense: 


* Compare total prepaid insurance and insurance expense with previous years. 

* Compute the ratio of prepaid insurance to insurance expense and compare it 
with previous years. 

* Compare the individual insurance policy coverage on the schedule of insurance 
obtained from the client with the preceding year’s schedule as a test of the elimi- 
nation of certain policies or a change in insurance coverage. 

* Compare the computed prepaid insurance balance for the current year on a policy- 
by-policy basis with that of the preceding year as a test of an error in calculation. 

* Review the insurance coverage listed on the prepaid insurance schedule with an 
appropriate client official or insurance broker for adequacy of coverage. The 
auditor cannot be an expert on insurance matters, but the auditor’s understanding 
of accounting and the valuation of assets is necessary to make sure that a 
company is not underinsured. 


For many audits, no additional ARADO pda Res Enhance Ksessed 


control risk is high or the tests indicate a high likelihood of a significant misstatement. 
The remaining audit procedures, which are examined next, should be performed only 
when there is a special reason for doing so. Our discussion of these tests uses the 
balance-related audit objectives for performing tests of details of asset balances. 
(Realizable value is not applicable.) 


Insurance Policies in the Prepaid Insurance Schedule Exist and Existing 
Policies Are Listed (Existence and Completeness) Tests for existence and omis- 
sions of insurance policies in force can be performed on the client’s prepaid insurance 
schedule in one of two ways: 


1. Examine a sample of insurance invoices and policies in force for comparison 
to the schedule. 

2. Obtain a confirmation of insurance information from the company’s insurance 
agent. Auditors typically prefer to send a confirmation to the client’s insurance 
agent, because this approach is usually less time-consuming than vouching 
tests and it provides 100 percent verification. 


The Client Has Rights to All Insurance Policies in the Prepaid Insurance 
Schedule (Rights) The party who will receive the benefit if an insurance claim is filed 
has the rights. Ordinarily, the recipient named in the policy is the client, but when there 
are mortgages or other liens, the insurance claim may be payable to a creditor. The 
review of insurance policies for claimants other than the client is an excellent test of 
unrecorded liabilities and pledged assets. 


Prepaid Amounts on the Schedule Are Accurate and the Total Is Correctly 
Added and Agrees with the General Ledger (Accuracy and Detail Tie-in) Audit 
tests to verify the accuracy of prepaid insurance involve verifying the amount of the 
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insurance premium, the length of the policy period, and the allocation of the premium to 
unexpired insurance. The amount of the premium for a given policy and its time period can 
be verified at the same time by examining the premium invoice or the confirmation from 
an insurance agent. After these two have been verified, the client’s calculations of unex- 
pired insurance can be tested by recalculation. The schedule of prepaid insurance can 
then be footed and the totals traced to the general ledger to complete the detail tie-in tests. 


The Insurance Expense Related to Prepaid Insurance Is Correctly Classified 
(Classification) The correct classification of debits to different insurance expense 
accounts should be reviewed as a test of the income statement. In some cases, the 
appropriate expense account is obvious because of the type of insurance, such as a policy 
insuring a piece of equipment. In other cases, allocations are necessary. For example, 
fire insurance on a building may require allocation to several accounts, including 
manufacturing overhead. Charging the correct accounts and consistency with previous 
years are the major considerations in evaluating classification. 


Insurance Transactions Are Recorded in the Correct Period (Cutoff) Cutoff 
for acquisitions of insurance is normally not a significant problem because of the small 
number of policies and the immateriality of the amount. If auditors check cutoff of 
insurance acquisitions, they do so as part of accounts payable cutoff tests. 


AUDIT OF ACCRUED LIABILITIES 


OBJECTIVE 19-4 





Design and perform audit 
tests of accrued liabilities. 





Auditing Accrued 
Property Taxes 


A third major category of accounts in the acquisition and payment cycle is accrued 
liabilities, which are the estimated unpaid obligations for services or benefits that 
have been received before the balance sheet date. Many accrued liabilities represent 
future.obli dO. fo s resulting from the passage of time but are not 
payabAP PBR d nhance Me benefits of property rental accrue 
throughout the sg fa Theretote at the balance sheet date, a certain portion of the total 
rent cost that has not been paid should be accrued. Other similar liabilities include: 


* Accrued payroll * Accrued professional fees 
» Accrued payroll taxes * Accrued rent 
» Accrued officers’ bonuses * Accrued interest 


« Accrued commissions 


A second type of accrual involves estimates where the amount of the obligation due 
is uncertain, such as the obligation for federal income taxes when there is a reasonable 
likelihood that the amount reported on the tax return will be changed after the Internal 
Revenue Service audits the return. Accrued warranty costs and accrued pension costs 
are similar accruals. 

The verification of accrued expenses varies depending on the nature of the accrual 
and the circumstances of the client. For most audits, accruals take little audit time. In 
other instances, certain accounts, such as accrued income taxes, warranty costs, and 
pension costs, are often material and require considerable audit effort. The following 
discussion of the audit of accrued property taxes is used as an example of the audit of 
an accrued liability account. 


Figure 19-3 illustrates the accounts typically used by companies for accrued property 
taxes, showing the relationship between accrued property taxes and the acquisition and 
payment cycle through the debits to the liability account. Because the source of the debits 
is the cash disbursements journal, the payments of property taxes should have already 
been partially tested by the tests of the acquisition and payment cycle transactions. 

As with insurance expense, the balance in property tax expense is a residual 
amount that results from the beginning and ending balances in accrued property taxes 
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femiooee Accrued Property Taxes and Related Accounts 


Accrued property taxes Property tax expense 








Beginning balance 


(1) Payments Current period +> 
(property taxes) property tax 
expense 


Ending balance 


(1) Payments of property taxes arise from the acquisition and payment cycle. This can be 
observed by examining Figure 18-1 (p. 602). 











and the payments of property taxes. Therefore, the emphasis in the tests should be on 
the ending property tax liability and payments. When auditors verify accrued property 
taxes, all eight balance-related audit objectives except realizable value are relevant. Two 
are especially significant: 

1. Existing properties for which accrual of taxes is appropriate are on the accrual 
schedule. The failure to include properties for which taxes should be accrued 
will understate the property tax liability (completeness). A material misstate- 
ment can occur, for example, if taxes on property were not paid before the 
balance sheet date and not included as accrued property taxes. 

2. Accrued property taxes are accurately recorded. The auditor’s concern is the 
consistent treatment of the accrual from year to year (accuracy). 


The auditor uses two primary ‘Ata galPDpt abrrhenicieos verify 


the accruals at the same time as the audit Of current year property tax payments. In 
most audits, there are few property tax payments, but each payment is often material, 
and therefore it is common to verify each one. Auditors also compare the accruals with 
those of previous years. 

The auditor often begins by obtaining a schedule of property tax payments from 
the client and comparing each payment with the preceding year’s schedule to deter- 
mine whether all payments have been included in the client-prepared schedule. The 
fixed asset audit schedules also must be examined for major additions and disposals of 
assets that may affect the property taxes accrual. All property affected by local property 
tax regulations should be included in the schedule, even if the first tax payment has not 
yet been made. 

After auditors are satisfied that all taxable property has been included in the client- 
prepared schedule, they evaluate the reasonableness of property taxes on each 
property used by the client to estimate the accrual. In some instances, the total has 
already been set by the taxing authority and sent to the client so it is possible to verify 
the amount by comparing the amount on the schedule with the tax bill. In other cases, 
the preceding year’s total payments must be adjusted for the expected increase in 
property tax rates. 

The auditor can verify the accrued property tax by recalculating the portion of the 
total tax applicable to the current year for each piece of property. The most important 
consideration is to use the same portion of each tax payment for the accrual that was used 
in the preceding year, unless there are justifiable conditions for a change. After the accrual 
and property tax expense for each piece of property have been recalculated, the totals 
should be added and compared with the general ledger. In many cases, property taxes are 
charged to more than one expense account. In that case, the auditor should test for correct 
classification by evaluating whether the correct amount was charged to each account. 
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AUDIT OF INCOME AND EXPENSE ACCOUNTS 


OBJECTIVE 19-5 





Design and perform audit 
tests of income and expense 
accounts. 





Approach to 
Auditing Income and 
Expense Accounts 


To complete our discussion of key accounts in the acquisition and payment cycle, an 
overview is provided of procedures auditors typically use to determine whether the 
income and expense accounts in the financial statements are fairly presented in 
accordance with accounting standards. The auditor must be satisfied that each of the 
income and expense totals included in the income statement, as well as net earnings, 
are not materially misstated. 

The auditor needs to be aware that most users of financial statements rely more 
heavily on the income statement than on the balance sheet for making decisions. Equity 
investors, long-term creditors, union representatives, and even short-term creditors are 
more interested in the ability of a firm to generate profit than in the historical cost or 
book value of the individual assets. 

The following two concepts in the audit of income and expense accounts are 
essential when considering the purposes of the income statement: 


1. The matching of periodic income and expense is necessary for a correct deter- 
mination of operating results. 

2. The consistent application of accounting principles for different periods is 
necessary for comparability. 


Both of these concepts must be applied to the recording of individual transactions 
and to the combining of accounts in the general ledger for statement presentation. 


The audit of income and expense accounts is directly related to the balance sheet and is not 
a separate part of the audit process. A misstatement of an income statement account 
almost always equally affects a balance sheet account, and vice versa. As we have discussed 
in preceding chapter. 3) “en income and expense accounts is intertwined with 
the ARADO: uP Fi NHANGEE description of these tests here as a 
review of material covered in earlier chapters. This review shows the interrelated 


nature of different parts of the audit with income and expense account testing. The 
parts of the audit directly affecting these accounts are: 





UNDERSTATEMENT 
OF EXPENSES AT 
DOLLAR GENERAL 
STORES 
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Dollar General Corporation is a Tennessee-based 
retailer of general merchandise. In 2005, the 
Securities and Exchange Commission (SEC) 
settled enforcement actions against the 
company's former CEO, President, CFO, and 
Controller for engaging in accounting fraud. 
In December 1999, employees discovered that 
the company had not recorded $13.4 million 
in expenses related to import freight costs 
associated with transporting products from 
foreign countries to Dollar General. 
Management, including the president, CFO, 
and controller discussed this finding on 
January 27, 2000 and determined that the 
expenses should have been recorded in 1999 
and prior years. They ultimately decided that the 
company would charge approximately $4 million 
of the freight expenses in 1999 and recognize the 
remaining $9.4 million in fiscal 2000 by amortizing 
the expenses on a monthly basis over that fiscal 
year, despite the fact the expenses were incurred 
in prior years and had no relation to fiscal year 
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2000. In an attempt to hide a portion of the 
fraudulently recorded amounts in fiscal 2000 
from their auditors, the controller directed a 
senior accounting manager to move $1.3 million 
of the $9.4 million to the miscellaneous accrued 
liabilities account widely known at the company 
as the “Rainy Day Fund” and $2.7 million to 
corporate bank clearing accounts. The auditors 
were unaware of this fraud when they signed the 
audit report on the 1999 financial statements in 
April 2000. 

The president allegedly supported the 
approach given the company had already 
announced expected fiscal year 1999 earnings 
per share and he did not want to revise the 
previously announced figure. They also knew 
that recording the entire expense in 1999 would 
negatively impact year-end bonus payments to 
Dollar General employees. 

Source: Securities and Exchange Commission 

Accounting and Auditing Enforcement Release No. 

2226, April 6, 2005 (www.sec.gov). 


* Analytical procedures 
* Tests of controls and substantive tests of transactions 
* Tests of details of account balances 


Our emphasis here is on income and expense accounts directly related to the 
acquisition and payment cycle, but the same concepts apply to the income statement 
accounts in all other cycles. 


Chapter 8 addressed analytical procedures. Subsequent chapters refer back to those 
procedures as part of specific audit areas. Analytical procedures should be thought of 
as part of the test of the fairness of the presentation of both balance sheet and income 
statement accounts. Table 19-5 shows a few analytical procedures and the possible 
misstatements they may uncover in the audit of income and expense accounts. 


Both tests of controls and substantive tests of transactions have the effect of simulta- 
neously verifying balance sheet and income statement accounts. For example, assume an 
auditor concludes that internal controls are adequate to provide reasonable assurance 
that transactions in the acquisitions journal occurred, are accurately recorded, correctly 
classified, and recorded in a timely manner. By doing so, the auditor obtains evidence 
about the correctness of individual balance sheet accounts, such as accounts payable 
and fixed assets, and income statement accounts, such as advertising and repairs. 
Conversely, inadequate controls and misstatements discovered through tests of 
controls and substantive tests of transactions indicate the likelihood of misstatements 
in both the income statement and the balance sheet. 

The most important means of verifying many of the income statement accounts in 
each transaction cycle are understanding internal control and the related tests of 
controls and substantive tests of transactions. For example, if the auditor concludes after 
adequate tests that control risk can be appropriately assessed as low for transactions in 
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TABLE 19-5 Analytical Procedures for Income and Expense Accounts 














Analytical Procedure Possible Misstatement 

Compare individual expenses with previous Overstatement or understatement of a balance 
years. in an expense account. 

Compare individual asset and liability Overstatement or understatement of a balance 
balances with previous years. sheet account that will also affect an 


income statement account (for example, 
a misstatement of inventory affects cost 


























of goods sold). 
Compare individual expenses with budgets. Misstatement of expenses and related balance 
sheet accounts. 
Compare gross margin percentage with Misstatement of cost of goods sold and 
previous years. inventory 
Compare inventory turnover ratio with Misstatement of cost of goods sold and 
previous years. inventory 
Compare prepaid insurance expense with Misstatement of insurance expense and 
previous years. prepaid insurance. 
Compare commission expense divided by Misstatement of commission expense and 
sales with previous years. accrued commissions. 
Compare individual manufacturing expenses Misstatement of individual manufacturing 
divided by total manufacturing expenses expenses and related balance sheet 
with previous years. accounts. 
= 4 





Analytical Procedures 


Tests of Controls 
and Substantive Tests 
of Transactions 
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Tests of Details of 
Account Balances— 
Expense Analysis 


Tests of Details of 
Account Balances— 
Allocation 


the acquisition and payment cycle, the only additional verification of related income 
statement accounts, such as utilities, advertising, and purchases, will occur through the 
performance of analytical procedures and cutoff tests. However, certain income and 
expense accounts are not verified at all by tests of controls and substantive tests of 
transactions, and others must be tested more extensively by other substantive testing. 
These are discussed next. 


Auditors must analyze the amounts included in certain income statement accounts 
even though the previously mentioned tests have been performed. Next, we examine 
the meaning and methodology of analysis of accounts before moving on to a discus- 
sion of when expense account analysis is appropriate. 

Expense account analysis involves auditor examination of underlying documenta- 
tion of individual transactions and amounts making up the detail of the total of an 
expense account. The documents are the same type as those used for examining 
transactions as part of tests of acquisition transactions, including invoices, receiving 
reports, purchase orders, and contracts. Figure 19-4 illustrates a typical audit schedule 
showing expense analysis for legal expenses. 

Although the focus of expense account analysis is on transactions, these tests differ 
from tests of controls and substantive tests of transactions. The tests of controls and 
substantive tests of transactions are meant to assess control risk. As such, they are tests 
of classes of transactions, such as acquisitions, and therefore include many different 
accounts. In the analysis of expense and other income statement accounts, the auditor 
verifies transactions in specific accounts to determine whether the transactions are 
appropriate for the client, properly classified, and accurately recorded. 

Assuming satisfactory results are found in tests of controls and substantive tests of 
transactions, auditors normally restrict expense analysis to those accounts with a rela- 
| high likelihood of material misstatement. As examples, auditors often analyze: 


Apa ad and ee) ense en. to determine whether they erro- 
B ote an ment transactions 


* Rent AbauP oe expenses to aa the need to capitalize leases 
* Legal expense to determine whether there are potential contingent liabilities, 
disputes, illegal acts, or other legal issues that may affect the financial statements 


Utilities, travel expense, and advertising accounts are rarely analyzed unless 
analytical procedures indicate high potential for material misstatement. 

Auditors often analyze expense account transactions as part of the verification of a re- 
lated asset. It is common, for example, for auditors to analyze repairs and maintenance as 
part of verifying fixed assets, and insurance expense as part of testing prepaid insurance. 


Several expense accounts result from the allocation of accounting data rather than 
discrete transactions. Such expenses include depreciation, depletion, and the amorti- 
zation of copyrights and catalog costs. The allocation of manufacturing overhead 
between inventory and cost of goods sold is an example of a different type of allocation 
that affects expenses. 

Allocations are important because they determine whether an expenditure is an asset 
or a current period expense. If the client fails to follow accounting standards or fails to 
calculate the allocation correctly, the financial statements can be materially misstated. 
The allocation of expenses such as depreciation of fixed assets and amortization of 
copyrights is required because the life of the asset is greater than one year. The original 
cost of the asset is verified at the time of acquisition, but the charge-off takes place over 
several years. 

Other types of allocations directly affecting the financial statements arise because 
the life of a short-lived asset does not expire on the balance sheet date. These may 
include prepaid rent and insurance. Finally, accounting standards require the alloca- 
tion of costs between current period manufacturing expenses and inventory as a means 
of reflecting all costs of making a product. 
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Legal Expenses 














12/31/11 Approved by sw 1/28/12 
A/C 913—Legal Expense 
Paid to For Date Amount 
@ Alexander J. Schweppe Retainer—12 months @ $1,000 Monthly (% $12,000 ¥ 
ABC v. Carson—patent Apr. 14 9,800 ¥ 
infringement suit Aug. 9 7,109 ¥ 
Q Smith, Tom Consultation re: inquiry from June 6 1,000 ¥ 
Consumer Protection Bureau, July 10 750 4 
State Attorney Generals 0 ffice 
@® L. Marvin Hall Assistance in collecting overdue Nov. 10 505 ¥ 
receivable from Star Mfg. 
$31,164 G/L 
G 


QD Per minster of meeting of Board of Directors 1110/11. Schueppe reappointed general counsel with retainer. 
@ Attorney's letter requested, Received 1/23/12. AUL matters listed are covered therein. Letters filed in General Section of audit file 


@ Aborney's letter not requested, Per phone conversation with Mr. Hall 1/21/12, he rarely represents the company, and his services haue been 
limited to collection protlems. The Star Mfg. matter wat cloted in October 2011, and he has not been inuclued in any other matters related to 
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In auditing the allocation of expenditures such as prepaid insurance and manufac- 
turing overhead, the two most important considerations are adherence to accounting 
standards and consistency with the preceding period. The two most important audit 
procedures for auditing allocations are tests for overall reasonableness using analytical 
procedures and recalculation of the client’s results. 

Auditors commonly perform these tests as part of the audit of the related asset or 
liability accounts. This may include verifying depreciation expense as part of the audit 
of property, plant, and equipment, testing amortization of patents as part of verifying 
new patents or the disposal of existing ones and verifying allocations between 
inventory and cost of goods sold as part of the audit of inventory. 


SUMMARY 


This chapter concludes our discussion of accounts and transactions in the acquisition and 
payment cycle. To adequately audit the numerous accounts associated with this cycle, 
auditors need an understanding of key accounts, classes of transactions, business functions, 
documents, and records related to acquisition and payment cycle transactions. Many of 
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these accounts, such as accounts payable, property, plant, and equipment, depreciation 
expense, and prepaid expenses, have unique characteristics that affect how the auditor 
gathers sufficient appropriate evidence about related account balances. And, finally, 
interrelationships between different audit tests in the acquisition and payment cycle can 


provide a basis for the auditor’s verification of many financial statement accounts. 


ESSENTIAL TERMS 


Accrued liabilities—estimated unpaid 
obligations for services or benefits that 
have been received prior to the balance 
sheet date; common accrued liabilities 
include accrued commissions, accrued 
income taxes, accrued payroll, and accrued 
rent 

Allocation—the division of certain 
expenses, such as depreciation and manu- 
facturing overhead, among several expense 
accounts 

Expense account analysis—the exami- 
nation of underlying documentation of 


individual transactions and amounts 
making up the total of an expense account 


Fixed asset master file—a computer file 
containing records for each piece of 
equipment and other types of property 
owned; the primary accounting record 
for manufacturing equipment and other 
property, plant, and equipment accounts 


Insurance register—a record of insurance 
policies in force, the expiration date of 
each policy, premium amount and terms, 
and other policy specifics 


REVIEW QUESTIONS 


19-1 (Objective 19-2) Explain the relationship between substantive tests of transactions for 
the acquisition and payment cycle and tests of details of balances for the verification of 


proped@ 4 PAG A ec DE. (@:Bperty, plant, and equipment are directly 


affected by the tests of controls and substantive tests of transactions and which are not? 


19-2 (Objective 19-2) Explain why the emphasis in auditing property, plant, and equip- 
ment is on the current period acquisitions and disposals rather than on the balances in the 
account carried forward from the preceding year. Under what circumstances will the 
emphasis be on the balances carried forward? 


19-3 (Objective 19-2) What is the relationship between the audit of property, plant, and 
equipment accounts and the audit of repair and maintenance accounts? Explain how the 
auditor organizes the audit to take this relationship into consideration. 


19-4 (Objective 19-2) List and briefly state the purpose of all audit procedures that might 
reasonably be applied by an auditor to determine that all property, plant, and equipment 
retirements have been recorded in the accounting system. 


19-5 (Objective 19-2) In auditing depreciation expense, what major considerations should 
the auditor keep in mind? Explain how each can be verified. 


19-6 (Objective 19-3) Explain the relationship between substantive tests of transactions 
for the acquisition and payment cycle and tests of details of balances for the verification of 
prepaid insurance. 


19-7 (Objective 19-3) Explain why the audit of prepaid insurance should ordinarily take a 
relatively small amount of audit time if the client’s assessed control risk for acquisitions is 
low. 


19-8 (Objective 19-3) Distinguish between the evaluation of the adequacy of insurance 
coverage and the verification of prepaid insurance. Explain which is more important in a 
typical audit. 


19-9 (Objective 19-3) What are the major differences between the audit of prepaid expenses 
and other asset accounts such as accounts receivable or property, plant, and equipment? 
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19-10 (Objective 19-4) Explain the relationship between accrued rent and substantive tests 
of transactions for the acquisition and payment cycle. Which aspects of accrued rent are 
not verified as part of the substantive tests of transactions? 


19-11 (Objective 19-4) In verifying accounts payable, it is common to restrict the audit 
sample to a small portion of the population items, whereas in auditing accrued property taxes, 
it is common to verify all transactions for the year. Explain the reason for the difference. 


19-12 (Objective 19-4) Which documents will be used to verify accrued property taxes and 
the related expense accounts? 


19-13 (Objective 19-5) List three expense accounts that are tested as part of the acquisition 
and payment cycle or the payroll and personnel cycle. List three expense accounts that are 
not directly verified as part of the cycle. 


19-14 (Objective 19-5) What is meant by the analysis of expense accounts? Explain how 
expense account analysis relates to the tests of controls and substantive tests of transactions 
that the auditor has already completed for the acquisition and payment cycle. 


19-15 (Objectives 19-2, 19-5) How will the approach for verifying repair expense differ 
from that used to audit depreciation expense? Why will the approach be different? 


19-16 (Objective 19-5) List the factors that should affect the auditor’s decision whether to 
analyze an account balance. Considering these factors, list four expense accounts that are 
commonly analyzed in audits. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 





19-17 (Objective 19-2) The following questions concern internal controls in the acquisi- 
tion and payment cycle. Choose the best response. 


a. Which of the following controls will most likely justify a reduced assessed level of 
control risk for the existence asseqtign for equip 

(1) Internal auditors rerio Ra PRUE. PRRARGE Keer file 
and locate the related equipment on company premises. 

Department heads are asked to provide information to the accounting depart- 
ment each quarter about any equipment no longer in use or somewhat damaged. 
(3) All contracts of equipment purchases are reviewed by both the controller and 
attorney to verify that legal title transfers to the client and that none represent 
operating leases. 

As part of quarterly and annual inventory physical counts, factory equipment is 
listed and subsequently reconciled to the fixed asset master file. 


oe 


(2 


Ya 


(4 
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b. Which of the following is not an internal control deficiency related to factory equipment? 

(1) Checks issued in payment of acquisitions of equipment are not signed by the 
controller. 

(2) All acquisitions of factory equipment are required to be made by the department 
in need of the equipment. 

(3) Factory equipment replacements are generally made when estimated useful lives, 
as indicated in depreciation schedules, have expired. 

(4) Proceeds from sales of fully depreciated equipment are credited to other income. 


c. Which of the following controls will most likely justify a reduced assessed level of 

control risk for the existence assertion related to the equipment account? 

(1) As purchases of equipment are recorded in the purchases journal, the system 
automatically posts the item to the equipment master file. 

(2) Internal auditors physically examines equipment on a periodic basis and verify 
that the equipment is included in the equipment master file. 

(3) All additions to the equipment account must be supported by a valid receiving 
report. 

(4) Assignment of general ledger account coding is reviewed by the accounts payable 
supervisor as purchases are recorded in the purchases journal. 
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19-18 (Objectives 19-2, 19-5) The following questions concern analytical procedures in 
the acquisition and payment cycle. Choose the best response. 


a. Which of the following comparisons will be most useful to an auditor in auditing an 


entity’s income and expense accounts? 

(1) Prior year accounts payable to current year accounts payable. 

(2) Prior year payroll expense to budgeted current year payroll expense. 
(3) Current year revenue to budgeted current year revenue. 

(4) Current year warranty expense to current year contingent liabilities. 


. The controller of Excello Manufacturing, Inc., wants to use analytical procedures to 


identify the possible existence of idle equipment or the possibility that equipment has 
been disposed of without having been written off. Which of the following ratios will 
best accomplish this objective? 

(1) Depreciation expense/book value of manufacturing equipment. 

(2) Accumulated depreciation/book value of manufacturing equipment. 

(3) Repairs and maintenance cost/direct labor costs. 

(4) Gross manufacturing equipment cost/units produced. 


c. Which of the following analytical procedures might suggest that certain repairs and 


maintenance expenses have been inappropriately capitalized? 

(1) The ratio of additions to equipment divided by the beginning balance in the equip- 
ment account is significantly lower than the same ratio from the prior three years. 

(2) The balance in the repairs and maintenance expense account is noticeably lower 
than amounts recorded in the past several years. 

(3) The balance in the gross equipment account has decreased this year compared to 
the prior year. 

(4) The ratio of depreciation expense divided by gross equipment is higher in the 
current year compared to prior years. 


19-19 ec alee 19- " The oe questions concern the audit of asset accounts in the 


“aA an gop ha best response. 
a. If RR unréc f a nhan Stent, an auditor most likely will 


(1) select items of Spee cat aa the accounting records and then locate them 
during the plant tour. 

(2) compare depreciation journal entries with similar prior-year entries in search of 
fully depreciated equipment. 

(3) inspect items of equipment observed during the plant tour and then trace them to 
the equipment master file. 

(4) scan the general journal for unusual equipment additions and excessive debits to 
repairs and maintenance expense. 


. Analysis of which account is least likely to reveal evidence related to unrecorded 


retirement of equipment? 
(1) Accumulated depreciation. (3) Property, plant, and equipment. 
(2) Insurance expense. (4) Purchase returns and allowances. 


. In connection with the audit of the prepaid insurance account, which of the following 


procedures is usually not performed by the auditor? 

(1) Recompute the portion of the premium that expired during the year. 
(2) Prepare excerpts of the insurance policies for audit documentation. 
(3) Confirm premium rates with an independent insurance broker. 

(4) Examine support for premium payments. 


19-20 (Objectives 19-2, 19-4, 19-5) The following questions concern the audit of liabilities 
or income and expense accounts. Choose the best response. 


a. The auditor may note that annual depreciation expense is too low for a class of assets 


by noting 

(1) insured values greatly in excess of carrying amounts. 
(2) large numbers of fully depreciated assets are still in use. 
(3) continuous trade-ins of relatively new assets. 

(4) excessive recurring losses on assets retired. 
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b. Which of the following best describes the independent auditor’s approach to obtain- 

ing satisfaction concerning depreciation expense in the income statement? 

(1) Verify the mathematical accuracy of the amounts charged to income as a result of 
depreciation expense. 

(2) Determine the method for computing depreciation expense and ascertain that it 
is in accordance with accounting standards. 

(3) Reconcile the amount of depreciation expense to those amounts credited to 
accumulated depreciation accounts. 

(4) Establish the basis for depreciable assets and verify the depreciation expense. 


c. Before expressing an opinion concerning the audit of income and expenses, the auditor 

will best proceed with the audit of the income statement by 

(1) applying a rigid measurement standard designed to test for understatement of net 
income. 

(2) analyzing the beginning and ending balance sheet inventory amounts. 

(3) making net income comparisons to published industry trends and ratios. 

(4) auditing income statement accounts concurrently with the related balance sheet 
accounts. 


DISCUSSION QUESTIONS AND PROBLEMS 


19-21 (Objective 19-2) For each of the following misstatements in property, plant, and 
equipment accounts, state an internal control that the client can implement to prevent the 
misstatement from occurring and a substantive audit procedure that the auditor can use to 
discover the misstatement: 


1. The asset lives used to depreciate equipment are less than reasonable, expected useful 
lives. 

2. Capitalizable assets are routinely expensed as repairs and majntenance, perishable 
ae or supplies expense. Apago PDE ‘enhanc r 

. Acquisitions of property are recorded at incorrect amounts. 

4. A loan against existing equipment is not recorded in the accounting records. The 
cash receipts from the loan never reached the company because they were used for 
the down payment on a piece of equipment now being used as an operating asset. The 
equipment is also not recorded in the records. 

5. Computer equipment that is abandoned or traded for replacement equipment is not 
removed from the accounting records. 

6. Depreciation expense for manufacturing operations is charged to administrative 
expenses. 

7. Tools necessary for the maintenance of equipment are stolen by company employees 
for their personal use. 


iss) 


19-22 (Objective 19-2) The following types of internal controls are commonly used by 
organizations for property, plant, and equipment: 


1. A fixed asset master file is maintained with a separate record for each fixed asset. 

2. Written policies exist and are known by accounting personnel to differentiate between 
capitalizable additions, freight, installation costs, replacements, and maintenance 
expenditures. 

3. Depreciation charges for individual assets are calculated for each asset; recorded in a 
fixed asset master file that includes cost, depreciation, and accumulated depreciation 
for each asset; and verified periodically by an independent clerk. 

4. Acquisitions of fixed assets in excess of $20,000 are approved by the board of directors. 

5. When practical, equipment is labeled with metal tags and is inventoried on a syste- 
matic basis. 

a. State the purpose of each of the internal controls just listed. Your answer should bein Required 
the form of the type of misstatement that is likely to be reduced because of the control. 
b. For each internal control, list one test of control the auditor can use to test for its existence. 
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Cc. 


List one substantive procedure for testing whether the control is actually preventing 
misstatements in property, plant, and equipment. 


19-23 (Objectives 19-1, 19-2, 19-3, 19-5) The following audit procedures were planned by 
Linda King, CPA, in the audit of the acquisition and payment cycle for Cooley Products, Inc.: 


1 
De 


10. 


11. 


12. 


Required 


fe) 


Review the acquisitions journal for large and unusual transactions. 

Send letters to several vendors, including a few for which the recorded accounts 

payable balance is zero, requesting them to inform us of their balance due from 

Cooley. Ask the controller to sign the letter. 

. Examine a sample of receiving report numbers and determine whether each one has 
an initial indicating that it was recorded as an account payable. 

. Select a sample of equipment listed on fixed asset master files and inspect the asset to 
determine that it exists and to determine its condition. 

. Refoot the acquisitions journal for 1 month and trace all totals to the general ledger. 

. Calculate the ratio of equipment repairs and maintenance to total equipment and 
compare with previous years. 

. Obtain from the client a written statement that all mortgages payable have been 
included in the current period financial statements and have been accurately recorded 
and that the collateral for each is included in the footnotes. 

. Select a sample of cancelled checks and trace each one to the cash disbursements 
journal, comparing the name, date, and amount. 

. For 20 nontangible acquisitions, select a sample of line items from the acquisitions 

journal and trace each to related vendors’ invoices. Examine whether each transaction 

appears to be a legitimate expenditure for the client and that each was approved and 
recorded at the correct amount and date in the journal and charged to the correct 
account per the chart of accounts. 

Examine invoices and related shipping documents included in the client’s unpaid 

invoice file at the audit report date to determine whether they were recorded in the 

oprjate ac i Bel 4 the correct amounts. 

Reago SOF f hh peer on the client’s prepaid insurance 

schedule that is applicable to future periods. 

When the check signer’s assistant writes “paid” on supporting documents, watch 

whether she does it after the documents are reviewed and the checks are signed. 


. For each procedure, identify the type of evidence being used. 


. For each procedure, identify whether it is an analytical procedure, a test of control, a 


substantive test of transactions, or a test of details of balances. 


. For each test of control or substantive test of transactions, identify the transaction- 


related audit objective(s) being met. 


. For each test of details of balances, identify the balance-related audit objective(s) 


being met. 


19-24 (Objective 19-2) Your client, Edgartown Corporation, prepared the following 
schedule of land, buildings and equipment for the audit of financial statements for the year 
ended December 31, 2011: 


Required ais 


1/1/11 


Beginning Balance 


12/31/11 
Ending Balance 


Account 


Description Additions Disposals 





Land $ 7,500,000 - - 
Building-Office 27,000,000 $250,000 - 
Production Equipment 2,345,000 178,223 $ 34,779 
Office Equipment 1,765,881 72,517 55,339 
IT Hardware 216,542 - 19,098 


Total $38,827,423 $500,740 $109,216 


$ 7,500,000 
27,250,000 
2,488,444 
1,783,059 
197,444 


$39,218,947 











What type of evidence would you examine to support the beginning balances in the 
accounts? 
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b. What types of evidence would you use to support the additions to each account? How 
might the sources of evidence differ for additions to the building account and the 
equipment accounts? 


. What types of evidence would you examine to support equipment disposals? 


ana 


. What procedures would you perform related to the ending balances in the accounts? 

e. In the audit of property, plant, and equipment accounts, auditors should consider 

whether there are any implications to other accounts in the audit. 

(1) What other accounts might be impacted by the additions of buildings and equip- 
ment? 

(2) What other accounts might be impacted by disposals of equipment? 


19-25 (Objective 19-4) The following program has been prepared for the audit of accrued 
real estate taxes of a client that pays taxes on 25 different pieces of property, some of which 
have been acquired in the current year: 
1. Obtain a schedule of accrued taxes from the client and tie the total to the general 
ledger. 
2. Compare the charges for annual tax payments with property tax assessment bills. 
3. Recompute accrued/prepaid amounts for all bills on the basis of the portion of the 
year expired. 
a. State the purpose of each procedure. 
b. Evaluate the adequacy of the audit program. 


19-26 (Objective 19-4) As part of the audit of different audit areas, auditors should be alert 
for the possibility of unrecorded liabilities. For each of the following audit areas or accounts, 
describe a liability that can be uncovered and the audit procedures that can uncover it: 

a. Minutes of the board of directors meetings 


b. Land and buildings 

. ae ie Apago PDF Enhancer 
. Interest expense 

e. Cash surrender value of life insurance 

f. Cash in the bank 

g. Officers’ travel and entertainment expenses 


19-27 (Objective 19-5) While you are having lunch with a banker friend, you become 
involved in explaining to him how your firm conducts a typical audit. Much to your 
surprise, your friend is interested and is able to converse intelligently in discussing your 
philosophy of emphasizing the importance of internal control, analytical procedures, tests 
of controls, substantive tests of transactions, and tests of details of balance sheet accounts. 
At the completion of your discussion, he says, “That all sounds great except for a couple of 
things. The point of view we take these days at our bank is the importance of a continuous 
earnings stream. You seem to be emphasizing fraud detection and a fairly stated balance 
sheet. We would rather see you put more emphasis than you apparently do on the income 
statement.” 


How would you respond to your friend’s comments? 


Ward Publishing Company — Part III (See Case 18-32 for Parts | and II) 

19-28 (Objectives 19-1, 19-2, 19-5) Examine the tests of controls and substantive tests of 
transactions results, including the sampling application in Case 18-32 (pp. 630-632), for 
Ward Publishing Company. Assume that you have already reached several conclusions. 


1. Your tests of details of balances for accounts payable are completed, and you found 
no exceptions. 
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2. Acceptable audit risk for property, plant, and equipment and all expenses is high. 

3. Inherent risk for property, plant, and equipment is high because in the current year, the 
client has acquired a material amount of new and used printing equipment and has 
traded in older equipment. Some of the new equipment was ineffective and returned; 
an allowance was received on others. Inherent risk for expense accounts is low. 

4, New computer equipment and some printing equipment are being leased. The client 
has never leased equipment before. 

5. Analytical procedures for property, plant, and equipment are inconclusive because of 
the large increases in acquisition and disposal activity. 

6. Analytical procedures show that repairs, maintenance, and small tools expenses have 
increased materially, both in absolute terms and as a percentage of sales. Two other 
expenses have also materially increased, and one has materially decreased. 

7. In examining the sample for tests of controls and substantive tests of transactions, 
you observe that no sample items included any property, plant, and equipment or 
lease transactions. 

Required a. Explain the relationship between the tests of controls and substantive tests of trans- 
actions results in Case 18-32 and the audit of property, plant, and equipment and leases. 
b. How will the tests of controls and substantive tests of transactions results and your 
conclusions (1 through 7) affect your planned tests of details for property, plant, and 
equipment and leases? State your conclusions for each balance-related audit objective. 
Do not write an audit program. 


c. Explain the relationship between the tests of controls and substantive tests of trans- 
actions results in Case 18-32 and the audit of expenses. 

d. How will the tests of controls and substantive tests of transactions results and your 
conclusions (1 through 7) affect your planned tests of details of balances for expenses? 
Do not write an audit program. 


19-29 Awa 1 wie are Ge a audit of the UTE Corporation, for the year ended 
pe ADS atiGe property, plant, and equipment and 
relat ‘par ce Fone DE En alt as been prepared by the client. You have 
compared the opening balances with your prior year’s audit documentation. 

UTE Corporation Analysis of Property, Plant, and Equipment 


and Related Allowance for Depreciation Accounts 
Year Ended December 31, 2011 











Final Per Books 
Description 12/31/10 Additions Retirements 12/31/11 
Assets 
Land $ 225,000 $ 50,000 $ 275,000 
Buildings 1,200,000 175,000 1,375,000 
Machinery and equipment 3,850,000 404,000 260,000 3,994,000 
$ 5,275,000 $629,000 $ 260,000 $5,644,000 
Allowance for Depreciation 
Building $ 600,000 $ 51,500 $ 651,500 
Machinery and equipment 1,732,500 392,200 2,124,700 
$ 2,332,500 $ 443,700 $ 2,776,200 





The following information is found during your audit: 

1. All equipment is depreciated on the straight-line basis (no salvage value taken into 
consideration) based on the following estimated lives: buildings, 25 years; all other 
items, 10 years. The corporation’s policy is to take one-half year’s depreciation on all 
asset acquisitions and disposals during the year. 

2. On April 1, the corporation entered into a 10-year lease contract for a die-casting 
machine with annual rentals of $50,000, payable in advance every April 1. The lease 
is cancelable by either party (60 days’ written notice is required), and there is no 
option to renew the lease or buy the equipment at the end of the lease. The estimated 
useful life of the machine is 10 years with no salvage value. The corporation recorded 
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the die-casting machine in the machinery and equipment account at $404,000, the 
present value at the date of the lease, and $20,200, applicable to the machine, has 
been included in depreciation expense for the year. 

3. The corporation completed the construction of a wing on the plant building on June 
30. The useful life of the building was not extended by this addition. The lowest 
construction bid received was $175,000, the amount recorded in the buildings 
account. Company personnel were used to construct the addition at a cost of 
$160,000 (materials, $75,000; labor, $55,000; and overhead, $30,000). 

4. On August 18, $50,000 was paid for paving and fencing a portion of land owned by 
the corporation and used as a parking lot for employees. The expenditure was 
charged to the land account. 

5. The amount shown in the machinery and equipment asset retirement column 
represents cash received on September 5, upon disposal of a machine acquired in 
July 2007 for $480,000. The bookkeeper recorded depreciation expense of $35,000 
on this machine in 2011. 

6. Crux City donated land and building appraised at $100,000 and $400,000, 
respectively, to the UTE Corporation for a plant. On September 1, the corporation 
began operating the plant. Because no costs were involved, the bookkeeper made no 
entry for the foregoing transaction. 

a. In addition to inquiry of the client, explain how you would have found each of these Required 
six items during the audit. 

b. Prepare the adjusting journal entries with supporting computations that you would 
suggest at December 31, 2011, to adjust the accounts for the preceding transactions. 
Disregard income tax implications.* 


19-30 (Objective 19-5) You are the manager in the audit of Vernal Manufacturing Company 
and are turning your attention to the income statement accounts. The in-charge auditor 
assessed control risk for all cycles as low, se aaa by tests of controls. There are no major 
inherent risks affecting income AR ag accou me eve you ee rt the 
major emphasis in auditing the i inco#A RR Ore SW. nhanc Kal pro- 
cedures. The client prepared a schedule of the se income statement accounts none compares 
the prior-year totals with the current year totals. The in-charge auditor completed the last 
column of the audit schedule, which includes explanations of variances obtained from 
discussions with client personnel. The audit schedule is included on page 658. 

a. Examine the schedule prepared by the client and your staff and writea memorandum __ Required 
to the in-charge that includes criticisms and concerns about the audit procedures 
performed and questions for the in-charge auditor to resolve. 

b. Evaluate the explanations for variances provided by client personnel. List any 
alternative explanation to those given. 

c. Indicate which variances are of special significance to the audit and how you believe 
they should be responded to in terms of additional audit procedures. 


INTERNET PROBLEM 19-1: CENTERPULSE LTD. 





The Securities and Exchange Commission (SEC) found that Centerpulse Ltd., a publicly- 
traded company based in Switzerland, fraudulently misstated its 2002 third and fourth 
quarter financial statements filed with the SEC. Visit the SEC’s website (www.sec.gov) and 
search the link to “Litigation Releases” to locate Litigation Release 20336 issued on October 
17, 2007 against selected members of the Centerpulse management team. View the SEC 
Complaint in this matter to learn more about this fraud. 


a. What members of management were allegedly involved in the accounting fraud? Required 


b. What were the primary incentives that allegedly pressured management to engage in 
the fraud? 


*AICPA adapted. 
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Vernal Manufacturing Co. 
Income Statement Accounts 
12/31/11 
Per G/L Per G/L Change 
Account 12/31/10 12/31/11 Amount Percent Explanations by Client 
Sales $8,467,312 $9,845,231 $1,377,919 16.3. Sales increase due to two new customers who 
Sales returns and allowances (64,895) (243,561) (178,666) 275.3 account for 20% of volume. Larger returns due 
Gain on sale of assets 43,222 (143,200) (186,422) -431.3 to need to cement relations with these 
Interest income 243 223 (20) -8.2 customers. 
Miscellaneous income 6,365 25,478 19,113. 300.3 Trade-in of several sales cars that needed 
8,452,247 9,484,171 1,031,924 122 replacement. 
Cost of goods sold: 
Beginning inventory 1,487,666 1,389,034 (98,632) -6.6 
Purchases 2,564,451 3,430,865 866,414 33.8 Increase in these accounts due to increased 
Freight in 45,332 65,782 20,450 45.1 volume with new customers as indicated above. 
Purchase returns (76,310) (57,643) 18,667 —-24.5 
Factory wages 986,755 1,145,467 158,712 16.1 
Factory benefits 197,652 201,343 3,691 1.9 
Factory overhead 478,659 490,765 12,106 25 
Factory depreciation 344,112 314,553 (29,559) -8.6 
Ending inventory (1,389,034) (2,156,003) (766,969) 55.2 Inventory being held for new customers. 
4,639,283 4,824,163 184,880 4.0 
Selling, general and administrative: 
Executive salaries 167,459 174,562 7,103 4.2 Normal salary increases. 
Executive benefits 32,321 34,488 2,167 6.7 
Office salaries 95,675 98,540 2,865 3.0 
Office benefits 19,888 21,778 1,890 9.5 
Travel and entertainment 56,845 75,583 18,738 33.0 Sales and promotional expenses increased in an 
Advertising 130,878 156,680 25,802 19.7 attempt to obtain new major customers. Two 
Other sales expense 34,880 42,334 7,454 21.4 obtained and program will continue. 
Stationery and supplies 38,221 21,554 (16,667) -43.6 Probably a misclassification; will investigate. 
Postage 14,657 18,756 4,099 28.0 Normal increase. 
Telephone 36,551 67,822 31,271 85.6 Normal increase. 
Dues and memberships 3,644 4,522 878 24.1 Normal increase. 
Rent 15,607 15,607 (0) 0.0 
Legal fees 14,154 35,460 21,306 150.5 Timing of billing for fees. 
Accounting fees 16,700 18,650 1,950 11.7. Normal increase. 
Depreciation, SG&A 73,450 69,500 (3,950) -5.4 Normal change. 
Bad debt expense 166,454 143,871 (22,583) -13.6 Haven't reviewed yet for the current year. 
Insurance 44,321 45,702 1,381 3.1. Normal change. 
Interest expense 120,432 137,922 17,490 14.5 Normal change. 
Other expense 5,455 28,762 23,307 427.3 Amount not material. 
1,087,592 1,212,093 124,501 11.4 
5,726,875 6,036,256 309,381 5.4 
Income before taxes 2525,372 3,447,915 722,543 26.5 
Income taxes 926,626 1,020,600 93,974 10.1 Increase due to increased income before tax. 
Net income $1,798,746 $2,427,315 $ 628,569 34.9 
. 4 











c. What was the nature of the expense that management inappropriately delayed? 


d. The complaint also notes that management failed to write-off an impaired asset. What 
were the circumstances resulting in the impairment? 


e. By what percentage amount did these actions overstate Centerpulse’s 2002 pretax 
income? 
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AUDIT OF THE PAYROLL 
AND PERSONNEL CYCLE 





The Staff Auditor Must Never “Simply Follow Orders” Pacis sie ea 
Leslie Scott graduated with a Masters of Accounting degree from a major 20-1 Identify the accounts and 
university before joining the audit staff of a CPA firm. During her first “busy transactions in the payroll and 
season,” she worked on the audit of Sysco, Inc., a software development personnel cycle. 

company. Her immediate supervisor on the Sysco audit was Bob Stith. Bob 20-2 Describe the business functions 
had been with the firm 3 years longer than Leslie and worked on the Sysco and the related documents and 
audit the previous year. He supervised Leslie’s work on capitalized software records in the payroll and 


development costs. Peer 

20-3 Understand internal control and 

To prepare, Leslie read applicable accounting standards and had a good design and perform tests of 

understanding of the accounting rules for the capitalization of such costs. col relsiand Subse ie Tess 
ae ; transactions for the payroll and 

She understood, for example, that costs can not be capitalized until tech- =seaandlod 

nological feasibility has been established, either through detail program ; 

design or product design and the completion of a working model, con- pose Desens Denon nahi) 

xeolp pro} 8 P 8 : procedures for the payroll and 

firmed by testing. personnel cycle. 


Bob drafted an audit program for capitalized software development costs. ca Oe ME SM Se 
details of balances for accounts in 


He told Leslie to verify the payroll “Ripergs’: PHPiak PAadhAcer the payroll and personnel cycle. 
development cost and to talk to JacR Smart, Sysco’s controller, about ye 
whether the projects with capitalized costs had reached the technological 

feasibility stage. Leslie tested the payroll costs and found no misstate- 

ments. She also made inquiries of Smart and was told that the appropriate stage was reached. Leslie documented 
Smart's representation in the audit files and went on to the next area assigned to her. 











Later, Leslie began to have second thoughts. Because management's representations are a weak form of audit evi- 
dence, she doubted whether Jack Smart was the most knowledgeable person about the technical status of software 
projects. To resolve her concerns and to verify Smart's representations, she decided to talk to the responsible software 
engineers about one of the projects. She intended to clear this with Bob, but he was at another client's office that 
morning, so she proceeded on her own initiative. The engineer she talked to on the first project told her that he was 
almost finished with a working model but had not tested it yet. She decided to inquire about another project and dis- 
covered the same thing. Leslie documented these findings on an audit schedule and planned to discuss the situation 
with Stith as soon as he returned to the job. When Leslie told Bob of her findings and showed him the schedule, he 
told her the following: 


“Listen, Leslie, | told you to just talk to Jack. You shouldn't do procedures that you're not instructed to do. | want 
you to destroy this schedule and don’t record the wasted time. We're under a lot of time pressure and we can’t 
bill Sysco for procedures that aren’t necessary. There’s nothing wrong with the capitalized software development 
costs. The fact that they have working products that they're selling indicates technological feasibility was reached” 


Leslie was extremely distressed with this reaction from Bob but followed his instructions. The following fall, the SEC 
conducted an investigation of Sysco and found, among other things, that they had overstated capitalized software 
development costs. The SEC brought an action against both the management of Sysco and its auditors. 


he payroll and personnel cycle involves the employment and payment of all employees. Labor is an important 

consideration in the valuation of inventory in manufacturing, construction, and other industries. As the story 
involving Leslie Scott and the audit of Sysco, Inc. demonstrates, improper valuation and allocation of labor can result 
in a material misstatement of net income. Payroll is also an area in which company resources can be wasted because 
of inefficiency or stolen through fraud. 

As with the sales and collection and acquisition and payment cycles, the audit of the payroll and personnel 
cycle includes obtaining an understanding of internal control, assessing control risk, tests of controls and 
substantive tests of transactions, analytical procedures, and tests of details of balances. In a typical audit, the main 
differences between the payroll and personnel cycle and other cycles include: 

* There is only one class of transactions for payroll. Most cycles include at least two classes of transactions. For 
example, the sales and collection cycle includes both sales and cash receipts transactions, and often includes sales 
returns and charge-off of uncollectible accounts. Payroll has only one class because the receipt of services from 
employees and the payment for those services through payroll usually occur within a short time period. 

* Transactions are generally far more significant than related balance sheet accounts. Payroll-related accounts such as 
accrued payroll and withheld taxes are usually small compared to the total amount of transactions for the year. 

* Internal controls over payroll are effective for almost all companies, even small ones. Strict federal and state 
regulations encourage effective controls for withholding and paying payroll taxes. Also, employee morale 
problems can occur if employees are not paid or are underpaid. 


Because of these three characteristics, auditors typically emphasize tests of controls, substantive tests of 
transactions, and analytical procedures in the audit of payroll. Tests of details of balances take only a few minutes 
for most payroll-related accounts. Before we discuss the tests in the cycle, let’s review the transactions and account 
balances, as well as the documents and records used in the payroll and personnel cycle for a typical company. 





ACCOUNTS AND TRANSACTIONS 
IN THE PAYROLL AND PERSONNEL CYCLE 


page. : nnancer : 

OBJECTIVE 20-1 The ovefall objective in the audit of the payroll and personnel cycle is, of course, to 
evaluate whether the account balances affected by the cycle are fairly stated in accor- 
transactions in the payroll dance with applicable accounting standards. —— 

and personnel cycle. Typical accounts in the payroll and personnel cycle are shown in Figure 20-1. 
T accounts are used to illustrate the way in which accounting information flows 
through the various accounts in the payroll and personnel cycle. In most systems, the 
accrued wages and salaries account is used only at the end of an accounting period. 
Throughout the period, expenses are charged when the employees are actually paid 
rather than when the labor costs are incurred. Accruals for labor are recorded by 
adjusting entries at the end of the period for any earned but unpaid labor costs. 





Identify the accounts and 





BUSINESS FUNCTIONS IN THE CYCLE 
AND RELATED DOCUMENTS AND RECORDS 





OBJECTIVE 20-2 The payroll and personnel cycle begins with hiring employees and ends with paying 
ee ' them for the services they performed and the government and other institutions for 
escribe the business : : 

Ainetlonevand the related withheld and accrued payroll taxes and benefits. In between, the cycle involves 
documents and records in obtaining services from employees consistent with company objectives, and properly 
the payroll and personnel accounting for the services. 

cycle. Turn to Table 20-1 on page 662. The third column identifies the four business 
functions in a typical payroll and personnel cycle and illustrates the relationships 
among the business functions, classes of transactions, accounts, and documents and 
records. Auditors must understand the business functions and documents and records 
before they can assess control risk and design tests of controls and substantive tests of 
transactions. 
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fener Accounts in the Payroll and Personnel Cycle ) 


Accrued wages, 
salaries, bonuses, 
and commissions 








Beginning balance 
Payment 


Eachin bank Earned wages, salaries, etc. Direct labor 


parmentice pe Ending balance 
salaries 
Payment for 
payroll taxes Withheld income taxes 
__and other deductions _ 
Beginning balance 


Payment | Payroll withholding 


Ending balance 


Accrued payroll 
tax expense 





Beginning balance 
Payment P lt 
ayroll tax expense Payroll tax 


Ending balance expense 


= 


*Separate operating accounts for payroll also normally include officers’ salaries and bonuses, office 
salaries, sales salaries and commissions, and indirect manufacturing labor. These accounts have the same 
relationship to accrued wages and withheld taxes and other deductions that is shown for direct labor. 











The human resources department provides an independent source for interviewing 
and hiring qualified personnel. The department is also an independent source of 
records for the internal verification of wage information, including additions and 
deletions from the payroll and changes in wages and deductions. 


Human Resource Records Human resource records include such data as the date of 
employment, personnel investigations, rates of pay, authorized deductions, perfor- 
mance evaluations, and termination of employment. 


Deduction Authorization Form This form is used to authorize payroll deductions, 
including the number of exemptions for withholding income taxes, 401(K) and other 
retirement savings plans, health insurance, and union dues. 


Rate Authorization Form This form is used to authorize the rate of pay. The source 
of the information is a labor contract, authorization by management, or in the case of 
officers, authorization from the board of directors. 


Timekeeping and payroll preparation are important in the audit of payroll because 
they directly affect payroll expense for each period. Adequate controls are necessary to 
prevent misstatements in the following four activities: 


* Prepare time records by employees 

* Summarize and calculate gross pay, deductions, and net pay 
* Payment of payroll 

* Prepare payroll records 


Human Resources 


Timekeeping and 
Payroll Preparation 
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TABLE 20-1 Classes of Transactions, Accounts, Business Functions, and Related ) 
Documents and Records for the Payroll and Personnel Cycle 











Class of Business Documents 
Transactions Accounts Functions and Records 
Payroll Payroll cash Human resources and Human resource records 
All payroll expense accounts employment Deduction authorization 
All payroll withholding accounts form 
All payroll accrual accounts Rate authorization form 
Timekeeping and payroll Time record 
preparation Job time ticket 


Payroll transaction file 
Payroll journal or listing 
Payroll master file 


Payment of payroll Payroll direct deposit 
or check 
Payroll bank account 
reconciliation 








Preparation of payroll tax W-2 form 
returns and payment Payroll tax returns 
of taxes 
= y 





Time Record The time record is a document indicating the time the hourly employee 
started and stopped working each day and the number of hours the employee worked. 
Time records may be in paper or electronic form, and they may be prepared automati- 
cally by time clocks or identification card readers. Time records are usually submitted 


KI 
_ sARAGQuoP DR RARARG A Ceomplete time records. They may be 


required to complete time reports to be compensated for overtime, vacation, or sick days. 


Job Time Ticket The job time ticket is a form indicating which jobs an employee 
worked on during a given time period. This form is used only when an employee works 
on different jobs or in different departments. Job time tickets are often done electroni- 
cally by a time and expense reporting system. 


Payroll Transaction File This computer-generated file includes all payroll trans- 
actions processed by the accounting system for a period, such as a day, week, or month. 
The file contains all information entered into the system and information for each 
transaction, such as employee name and identification number, date, gross and net pay, 
various withholding amounts, and account classification or classifications. Depending 
on the company’s needs, the information on the payroll transaction file is used for a 
variety of records, listings, and reports, such as the payroll journal, payroll master file, 
and payroll bank reconciliation. 


Payroll Journal or Listing This report is generated from the payroll transaction file 
and typically includes the employee name, date, gross and net payroll amounts, 
withholding amounts, and account classification or classifications for each transaction. 
The same transactions included in the journal or listing are also posted simultaneously 
to the general ledger and to the payroll master file. 


Payroll Master File The payroll master file is a computer file used for recording 
payroll transactions for each employee and maintaining total employee wages paid for 
the year to date. The record for each employee includes gross pay for each payroll 
period, deductions from gross pay, net pay, check number, and date. This master file is 
updated from payroll transaction files. The total of the individual employee earnings in 
the master file equals the total balance of gross payroll in various general ledger accounts. 
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GHOSTS ON 
THE PAYROLL 


Melvin Turner was extremely ill and needed 
expensive medicines to treat his condition. He 
was responsible for recording payroll hours and 
preparing payroll records at the not-for-profit 
organization where he was employed. A separate 
employee was responsible for adding and deleting 
employees to the payroll system. However, Turner 
circumvented this control by looking over her 
shoulder to steal her user ID and password, allow- 
ing him to add fictitious employees to the payroll. 

After adding the “ghost” employees to the 
payroll, Turner entered wage and other relevant 
information and arranged for direct deposit of the 
fictitious employees’ pay to his own bank account. 
He also created fictitious documentation for the 
ghost employees’ work, as well as file copies of 
the paychecks. 

The fraud was detected by the organization's 
external auditor who noted that the file copies of 


the fictitious checks were white, but the file 
copies of legitimate checks were green. Several 
additional clues indicated the presence of the 
fraud: 


® Multiple direct deposits were made to the 
same bank account but under different 
employees’ names. 

@ None of the fake employees had a personnel 
file or amounts withheld. 

Employee numbers for the ghost employees 
were higher than those of other employees. 


Confronted with the evidence, Turner pleaded 
guilty to the charges. Under a plea bargain agree- 
ment, he was ordered to make restitution and 
was sentenced to 15 years of probation. 


Source: Joseph T. Wells, “Keep Ghosts Off the 
Payroll,” Journal of Accountancy (December 2002), 
pp. 77-82. 





The approval and distribution of payroll must be carefully controlled to prevent theft. Payment of Payroll 
To increase control, payroll disbursements are generally processed separately from 


other disbursements. 


Payment of Payroll Payments are issued to employees in exchange for services 
performed. Payments may be made by check, but are usually deposited directly into 
employees’ individual bank accounts. The amount paid is the gross pay less taxes and 
other deductions withheld. 


Payroll Bank Account ReconciAPaAGa irPDBdeHnhanGeNion is 
important for all cash accounts, including payroll, for finding errors and fraud. An 
imprest payroll account is a separate payroll account in which a small balance is main- 
tained. The exact amount of each net payroll is transferred by check or electronic funds 
transfer from the general account to the imprest account immediately before 
distribution of the payroll. The imprest account limits the client’s exposure to payroll 
fraud and separates routine payroll expenditures from other expenditures. It also 
simplifies reconciliation of the payroll bank account. 


Preparation of 
Payroll Tax Returns 
and Payment of Taxes 


Federal and state payroll laws require the timely preparation and submission of payroll 
tax returns. Most computerized payroll systems prepare payroll tax returns using 
information on the payroll transaction and master files. To prevent misstatements and 
potential liability for taxes and penalties, a competent individual must independently 
verify the output. 


W-2 Form This is a form sent to each employee that summarizes the employee’s 
earning for the calendar year, including gross pay, income taxes withheld, and FICA 
(Social Security) withheld. The same information is also submitted to the Internal 
Revenue Service and state and local tax commissions when applicable. This information 
is prepared from the payroll master file and is normally computer generated. 


Payroll Tax Returns These are forms submitted to local, state, and federal units of 
government to show payment of withheld taxes and the employer’s tax. The nature 
and due dates of the forms vary depending on the type of taxes. These forms are 
prepared from information on the payroll master file and are usually computer 
generated. Federal withholding and Social Security payments are due semiweekly or 
monthly, depending on the amount of withholding. Most state unemployment taxes 
are due quarterly. 


Chapter 20 / AUDIT OF THE PAYROLL AND PERSONNEL CYCLE 663 


METHODOLOGY FOR DESIGNING TESTS OF CONTROLS 


AND SUBSTANTIVE TESTS OF TRANSACTIONS 





OBJECTIVE 20-3 Now that you are familiar with the business functions and related documents and records 
in the payroll and personnel cycle, we will discuss assessing control risk and the design of 
tests of controls and substantive tests of transactions for the cycle. The methodology for 





Understand internal control 
and design and perform tests 


of controls and substantive designing tests of controls and substantive tests of transactions for the payroll and 
tests of transactions for the personnel cycle is the same as that used in Chapter 14 for the sales and collection cycle and 
payroll and personnel cycle. in Chapter 18 for the acquisition and payment cycle: understand internal control, assess 





planned control risk, determine the extent of testing of controls, and design tests of 
controls and substantive tests of transactions to meet transaction-related audit objectives. 

Internal control for payroll is normally highly structured and well controlled to 
manage cash disbursed, to minimize employee complaints and dissatisfaction and to 
minimize payroll fraud. Because of relatively common payroll concerns from company 
to company, high-quality computerized payroll accounting programs are available. 

Because processing payroll is similar for most organizations, and programs need to 
be modified annually for changes in withholding schedules, companies commonly 
use an outside payroll service for processing payroll. The auditor can often rely on 
the internal controls of the service organization if the service organization’s auditor 
issues a report on the service organization’s internal control, discussed in Chapter 12 
(pp. 389-390). 

It is usually not difficult for companies to establish good control in the payroll and 
personnel cycle. For factory and office employees, there are usually a large number of 
relatively homogeneous, small-amount transactions. For executives, there are usually 
fewer payroll transactions, but they are ordinarily consistent in timing and amount. 
Consequently, auditors seldom expect to find exceptions in testing payroll transactions. 
OcsApago' POF Enhangerns monetary misstatements are 
corrected by internal verification controls or in response to employee complaints. Even 
when there are misstatements, they are rarely material. 

Tests of controls and substantive tests of transactions procedures are the most 
important means of verifying account balances in the payroll and personnel cycle. 
These tests are emphasized because of the lack of independent third-party evidence, 
such as confirmation, for verifying accrued wages, withheld income taxes, accrued 
payroll taxes, and other balance sheet accounts. Furthermore, in most audits, the 
amounts in the balance sheet accounts are small and can be verified with relative ease if 
the auditor is confident that payroll transactions are correctly entered into the 
computer and payroll tax returns are correctly prepared. 

Even though tests of controls and substantive tests of transactions are the most 
important parts of testing payroll, tests in this area are usually not extensive. Many 
audits have a minimal risk of material misstatements, even though payroll is often a 
significant part of total expenses. There are three reasons for this: 


1. Employees are likely to complain to management if they are underpaid. 

2. All payroll transactions are typically uniform and uncomplicated. 

3. Payroll transactions are subject to audit by federal and state governments for 
income tax withholding, Social Security, and unemployment taxes. 


Understand Internal Following the same approach used in Chapter 14 for tests of sales and cash receipts 
Control — Payroll and transactions, the internal controls, tests of controls, and substantive tests of trans- 
Personnel Cycle actions for each transaction-related audit objective are summarized in Table 20-2 


(p. 666). Again, you should recognize the following: 


* Internal controls vary from company to company; therefore, the auditor must 
identify the controls, significant deficiencies, and material weaknesses for each 
organization. 
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* Controls the auditor intends to rely on to reduce assessed control risk must be 
tested with tests of controls. 

* If the auditor is reporting on the effectiveness of internal control over financial 
reporting, the level of understanding controls and extent of tests of controls 
must be sufficient to issue an opinion on the effectiveness of internal control 
over financial reporting. 

* Substantive tests of transactions vary depending on the assessed control risk and 
the other considerations of the audit, such as the effect of payroll on inventory. 

* ‘Tests are not actually performed in the order given in Table 20-2. The tests of 
controls and substantive tests of transactions are combined when appropriate 
and are performed in as convenient a manner as possible, using a performance 
format audit program. 


The purposes of many internal controls and the nature of the tests of controls and 
substantive tests of transactions are apparent for most tests from their descriptions in 
Table 20-2. Next, the key controls for the payroll and personnel cycle for assessing 
control risk are discussed. 


Adequate Separation of Duties Separation of duties is important in the payroll and 
personnel cycle, especially to prevent overpayments and payments to nonexistent 
employees. The payroll function should be kept independent of the human resources 
department, which controls key payroll activities, such as adding and deleting employees. 
Payroll processing should also be separate from the issuance of payroll disbursements. 


Proper Authorization As already noted, only the human resources department 
should be authorized to add and delete employees from the payroll or change pay rates 
and deductions. The number of hours worked by each employee, especially overtime, 
should be authorized by the employee’s supervisor. Approval may be noted on all time 
records or done on an exception basis only for overtime hours. 


Adequate Documents and ReAPAGOapPD Pte Enhan Ge Eecords 
depend on the nature of the payroll system. Time records are necessary for hourly 
employees but not for salaried employees. For employees compensated based on piece 
rate or other incentive systems, different records are required. For many companies, 
time records must be adequate to accumulate payroll costs by job or assignment. 
Prenumbered documents for recording time are less of a concern for payroll because 
the completeness objective is normally not a concern. 


Physical Control Over Assets and Records Access to unsigned payroll checks 
should be restricted. Checks should be signed by a responsible employee, and payroll 
should be distributed by someone independent of the payroll and timekeeping 
functions. Any unclaimed checks should be returned for redeposit. If checks are signed 
by a signature machine, access to the machine should be restricted. Similarly, when pay- 
ment occurs through direct deposit, access to systems used to authorize payments 
should be restricted. 


Independent Checks on Performance Payroll computations should be indepen- 
dently verified, including comparison of batch totals to summary reports. A member of 
management or other responsible employee should review the payroll output for any 
obvious misstatements or unusual amounts. When manufacturing labor affects inven- 
tory valuation or when it is necessary to accumulate costs by job, adequate controls are 
necessary to verify the proper assignment of costs. 


Payroll taxes and other withholdings are important in many companies, both because 
the amounts are often material and because the potential liability for failure to timely 
file tax forms can be severe. 


Preparation of Payroll Tax Forms Asa part of understanding internal control, the 
auditor should review the preparation of at least one of each type of payroll tax form 


Payroll Tax Forms 
and Payments 
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TABLE 20-2 





Summary of Transaction-Related Audit Objectives, Key Controls, Tests of Controls, and 
Substantive Tests of Transactions for Payroll 





Transaction-Related 
Audit Objectives 


Key Internal 
Controls 


Common Test 
of Controls 


Common Substantive 
Tests of Transactions 





Recorded payroll 


actually performed 


payments are for work 


by existing employees 


Time records are approved by 
supervisor. 


Time clock is used to record time. 


Adequate human resource files 


Examine time records for 
indication of approvals. 

Examine time records. 

Review human resource 


Review the payroll journal, 
general ledger, and payroll 
earnings records for large or 
unusual amounts** 





transactions 
are recorded 
(completeness). 


and accounted for. 
Bank accounts are independently 
reconciled. 


payroll checks. 
Discuss with employees and 
observe reconciliation. 


(occurrence). are maintained. policies. Compare cancelled check or 

Employment is authorized. Examine human resource files. direct deposit information 

There is separation of duties Review organization chart, with human resource records. 
among human resources, discuss with employees, Compare cancelled checks with 
timekeeping, and payroll and observe duties being payroll journal for name, 
disbursements. performed. amount, and date. 

Only employees existing in the Examine printouts of Examine cancelled checks for 
computer data files are transactions rejected by the proper endorsement. 
accepted when they are computer as having non- 
entered. existent employee numbers. 

Disbursements are authorized Examine payroll records for 
before issuance. indication of approval. 

Existing payroll Payroll checks are prenumbered Account for a sequence of Reconcile the disbursements in 


the payroll journal with the 
disbursements on the payroll 
bank statement. 

Prove the bank reconciliation. 





Recorded payroll 
transactions are for 
the amount of time 
actually worked and 
are at the proper pay 


correctly calculated 
(accuracy). 


rates; withholdings are 


Calculations and amounts are 
internally verified. 

Batch totals are compared with 
computer summary reports. 


Wage rate, salary, or commission 
rate is properly authorized. 
Withholdings, including amounts 
for insurance and payroll 

savings, are properly 
authorized. 


Examine indication of internal 
verification. 

Examine file of batch totals for 
initials of data control clerk; 


compare totals to summary reports. 


Examine payroll records 
for indication of authorization. 
Examine authorizations in 
human resource file. 


Recompute hours worked from 
time records. 

Compare pay rates with union 
contract, approval by board of 
directors, or other source. 

Recompute gross pay. 

Check withholdings by referring 
to tax tables and authorization 
forms in human resource file. 

Recompute net pay. 

Compare cancelled check or 
direct deposit with payroll 
journal for amount. 





Payroll transactions are 
correctly included in 


and are correctly 
summarized (posting 
and summarization). 


the payroll master file 


Payroll master file contents are 
internally verified. 

Payroll master file totals are 
compared with general ledger 
totals. 


Examine indication of internal 
verification. 

Examine initialed summary 
total reports indicating that 
comparisons have been made. 


Test clerical accuracy by footing 
the payroll journal and tracing 
postings to the general ledger 
and the payroll master file. 





Payroll transactions are 
correctly classified 
(classification). 


An adequate chart of accounts 
is used. 

Account classifications are 
internally verified. 


Review chart of accounts. 


Examine indication of internal 
verification. 


Compare classification with chart 
of accounts or procedures 
manual. 

Review time record for employee 
department and job ticket for 
job assignment and trace 
through to labor distribution. 





Payroll transactions are 


dates (timing). 





\ 


recorded on the correct 


Procedures require recording 
transactions as soon as 
possible after the payroll 
is paid. 

Dates are internally verified. 


Examine procedures manual and 
observe when recording takes 
place. 


Examine indication of internal 
verification. 


Compare date of recorded 
payment in the payroll journal 
with date on cancelled check 
or direct deposit and time 
record. 

Compare date on check with date 
the check cleared the bank. 





*This analytical procedure can also apply to other objectives, including completeness, accuracy, and timing. 
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that the client is responsible for filing. The potential for liability for unpaid taxes, 
penalty, and interest arises if the client fails to prepare the tax forms correctly. The 
payroll tax forms are for such taxes as federal income and FICA withholding, state and 
city income withholding, and federal and state unemployment. 

A detailed reconciliation of the information on the tax forms and the payroll 
records may be necessary when the auditor believes the tax returns may be incorrectly 
prepared. Indications of potential misstatements in the returns include the payment of 
penalties and interest in the past for improper payments, new personnel in the payroll 
department who are responsible for the preparation of the returns, the lack of internal 
verification of the information, and cash flow problems for the client. 


Timely Payment of the Payroll Taxes Withheld and Other Withholdings It is 
desirable to test whether the client has fulfilled its legal obligation in submitting 
payments for all payroll withholdings as a part of the payroll tests even though the 
payments are usually made from general cash disbursements. The withholdings of 
concern in these tests include taxes, 401(K) and other retirement savings, union dues, 
insurance, and payroll savings. 

Auditors must first determine the client’s requirements for submitting the payments, 
which can be determined by referencing such sources as tax laws, union contracts, and 
agreements with employees. Once auditors know the requirements, they can easily deter- 
mine whether the client has made timely payments at correct amounts by comparing the 
subsequent cash disbursement with the payroll records. 


Auditors often extend their payroll audit procedures if payroll significantly affects the 
valuation of inventory, or when the auditor is concerned about the possibility of 
material fraudulent payroll transactions, such as nonexistent employees or fraudu- 
lent hours. 


Relationship Between Payroll and Inv od ti en payroll is a sig- 
nificant portion of inventory, whic RA, fe F ennan CSetruction 
companies, the improper account classification of payroll can materially affect asset 
valuation for accounts such as work in process, finished goods, or construction in 
process. For example, the overhead charged to inventory at the balance sheet date can 
be overstated if the salaries of administrative personnel are inadvertently or inten- 
tionally charged to indirect manufacturing overhead. Similarly, the valuation of 
inventory is affected if the direct labor cost of individual employees is incorrectly 
charged to the wrong job or process. When jobs are billed on a cost-plus basis, revenue 
and the valuation of inventory are both affected by charging labor to incorrect jobs. 

When labor is a material part of inventory valuation, auditors should emphasize 
testing internal controls over proper classification of payroll transactions. Consistency 
from period to period is essential for classification and can be tested by tracing job tickets 
or other evidence of an employee having worked on a job or process to the accounting 
records that affect inventory valuation. For example, if employees must account for all 
of their time each week by assigning it to individual jobs, a useful test is to trace the 
recorded hours of several employees to the related job-cost records to make sure each 
has been correctly recorded. It may also be desirable to trace from the job-cost records to 
time cards as a test for nonexistent payroll charges being included in inventory. 


Tests for Nonexistent Employees Issuing payroll disbursements to individuals who 
do not work for the company (nonexistent employees) often results from the con- 
tinuance of an employee on payroll after employment was terminated. Usually, the 
person committing this type of embezzlement is a payroll clerk, foreman, fellow 
employee, or perhaps the former employee. Under some systems, a foreman can clock 
in daily for an employee and approve the time card at the end of the time period. If the 
foreman also distributes paychecks or if payroll is deposited directly into employees’ 
accounts, considerable opportunity exists for embezzlement. 


Inventory and 
Fraudulent Payroll 
Considerations 
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To detect embezzlement, auditors may compare the names on cancelled checks or 
the account into which payroll has been deposited with time cards and other records 
for authorized signatures and reasonableness of the endorsements. It is also common to 
scan endorsements on cancelled checks for unusual or recurring second endorsements 
as an indication of a possible fraudulent check. Examining checks that are recorded as 
voided is also desirable to make sure that they have not been fraudulently used. 

To test for nonexistent employees, auditors can trace selected transactions recorded 
in the payroll journal to the human resources department to determine whether the 
employees were actually employed during the payroll period. If paid by check, the 
endorsement on the cancelled check written out to an employee can be compared with 
the authorized signature on the employee’s withholding authorization forms. 

A procedure that tests for proper handling of terminated employees is to select 
several files from the human resource records for employees who were terminated in 
the current year to determine whether each received termination pay consistent with 
company policy. Continuing payments to terminated employees can be tested by 
examining payroll records in the subsequent period to verify that the employee is no 
longer being paid. Naturally, this procedure is not effective if the human resources 
department is not informed of terminations. 

In some cases, the auditor may request a surprise payroll payoff. This is a pro- 
cedure in which all employees must pick up and sign their check or direct deposit 
payroll record in the presence of a supervisor and the auditor. Any checks that have not 
been claimed must be subject to an extensive investigation to determine whether an 
unclaimed check is fraudulent. Surprise payoff is often expensive but it may be the only 
likely means of detecting an embezzlement. 


Tests for Fraudulent Hours Fraudulent hours occur when an employee reports 
more time than was actually worked. Because of the lack of available evidence, it 
is usually difficult for an auditor to discover fraudulent hours. One procedure is to 
recon GO! hRDRidEnhanCe Kayroll records with an independent 
record of the hours worked, such as those often maintained by production control. 
Similarly, it may be possible to observe an employee clocking in more than one time 
card under a buddy approach. However, it is ordinarily easier for the client to prevent 
this type of embezzlement by adequate controls than for the auditor to detect it. 


METHODOLOGY FOR DESIGNING TESTS OF DETAILS OF BALANCES 


Identify Client 
Business Risks 
Affecting Payroll 
(Phase I) 


During the first two phases of the audit, auditors assess control risk and perform tests of 
controls and substantive tests of transactions. After completing these tests and assessing 
the likelihood of misstatement in financial statement accounts in the payroll and per- 
sonnel cycle, the auditor follows the methodology for designing tests of details of balances. 

The methodology for deciding the appropriate tests of details of balances for 
payroll liability accounts is the same as that followed in Chapter 16 for accounts 
receivable and Chapters 18 and 19 for acquisition and payment balance sheet accounts. 
See Figure 16-1 on page 520 for the accounts receivable methodology.) 


Significant client business risks affecting payroll are unlikely for most companies. 
However, client business risk may exist for complex compensation arrangements, 
including bonus and stock option plans and other deferred compensation arrange- 
ments. For example, many technology and other companies provide extensive stock 
options as part of their compensation packages for key employees that significantly 
impact compensation expense and shareholders’ equity. Examples of other risks 
include events such as renegotiation of union contracts and discrimination claims. The 
auditor should understand the likelihood of these events and determine their potential 
effects on the financial statements, including footnote disclosures. 
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ONE IN 
300 BILLION 





Option backdating is the issuance of a stock option 
at a date later than the date indicated in the 
option contract. Many companies, including such 
well-respected companies as Microsoft and Apple 
Computer, issued options that were backdated, 
allowing executives to profit by retroactively locking 
in low stock prices that preceded a run-up in the 
company’s stock. 

If options are granted on random dates, there 
should be no discernible pattern in the company’s 
stock price performance following an option grant. 
A pattern of stock price increases following stock 
option grants suggests backdating. Based on the 
stock price performance of Affiliated Computer 
Services, The Wall Street Journal calculated the 
odds of the favorable timing of then-president 
Jeffrey Rich’s options at one in 300 billion. Several 


other companies demonstrated similar favorable 
patterns in the timing of stock option grants. 

Not surprisingly, option backdating led to the 
question, “Where were the auditors?” However, 
others wonder whether auditors should have been 
questioning legal documents showing the grant 
date of an option. “I don’t blame the auditors for 
this,” said Nell Minow, editor for The Corporate 
Library, a governance research company. “My 
question is, ‘Where were the compensation 
committees?” 


Sources: Adapted from 1. Charles Forelle, “How the 
Journal Analyzed Stock-Option Grants,” The Wall 
Street Journal (March 18, 2006) p. A5; 2. David 
Reilly, “Backdating Woes Beg the Question Of 
Auditors’ Role,” The Wall Street Journal (June 23, 
2006) p. C1. 





Most companies have a large number of transactions involving payroll, often with large 
total amounts. However, balance sheet accounts are normally insignificant, except for 
labor charged to inventory. 

Aside from the potential for fraud, inherent risk is typically low for all balance-related 
audit objectives. There is inherent risk of payroll fraud because most transactions involve 
cash. Therefore, auditors often consider the occurrence transaction-related objective 
important. Also, for manufacturing companies with significant labor charged to inventory, 
the potential exists for misclassification between payroll expense and inventory or among 
categories of inventory. As a part of gaining an understanding of the client, the auditor may 


identify complex payroll-related issuegys goo Ppr Enhance tpat may 
isc Oo 


increase inherent risks related to the accBuntiffg and osure ose arrangements. 


Earlier in this chapter, we discussed assessing control risk and the related tests of 
controls and substantive tests of transactions. Refer to Table 20-2 (p. 666) for a review 
of these topics. 


The use of analytical procedures is as important in the payroll and personnel cycle as it 
is in every other cycle. Table 20-3 illustrates analytical procedures for the balance sheet 
and income statement accounts in the payroll and personnel cycle. Most of the 
relationships in the first column are predictable and are therefore useful for identifying 
areas in which additional investigation is desirable. 


Analytical Procedures for the Payroll and Personnel Cycle ) 


Analytical Procedure 








Possible Misstatement 





Compare payroll expense account balance with 
previous years (adjusted for pay rate increases 
and increases in volume). 


Misstatement of payroll expense accounts 





Compare direct labor as a percentage of sales with 
previous years. 


Misstatement of direct labor and inventory 





Compare commission expense as a percentage of 
sales with previous years. 


Misstatement of commission expense and 
commission liability 





(continued on following page) 
S = 











Set Tolerable 
Misstatement and 
Assess Inherent Risk 
(Phase I) 


Assess Control Risk 
and Perform Related 
Tests (Phases I and II) 


Perform Analytical 
Procedures (Phase III) 


OBJECTIVE 20-4 


Design and perform 


analytical procedures for the 
payroll and personnel cycle. 








Chapter 20 / AUDIT OF THE PAYROLL AND PERSONNEL CYCLE 669 


Design and Perform 
Tests of Details of 
Balances for Liability 
and Expense Accounts 
(Phase III) 


OBJECTIVE 20-5 


Design and perform tests 


of details of balances for 
accounts in the payroll and 
personnel cycle. 








Analytical Procedures for the Payroll and Personnel Cycle (Cont.) 














Analytical Procedure Possible Misstatement 
Compare payroll tax expense as a percentage of Misstatement of payroll tax expense and 
salaries and wages with previous years payroll tax liability 
(adjusted for changes in the tax rates). 
Compare accrued payroll tax accounts with Misstatement of accrued payroll taxes and 
previous years. payroll tax expense 
bs 4 





The verification of the liability accounts associated with payroll, often termed accrued 
payroll expenses, is ordinarily straightforward if internal controls are operating effec- 
tively. When the auditor is satisfied that payroll transactions are being correctly 
recorded in the payroll journal and the related payroll tax forms are being accurately 
prepared and taxes promptly paid, the tests of details of balances should not be time 
consuming. 

The two major balance-related audit objectives in testing payroll liabilities are: 

1. Accruals in the trial balance are stated at the correct amounts (accuracy). 

2. Transactions in the payroll and personnel cycle are recorded in the proper 

period (cutoff). 


The primary concern in both objectives is to make sure that there are no under- 
stated or omitted accruals. Next, we examine the major liability accounts in the payroll 
and personnel cycle. 


Amounts Withheld from spn Pay Payroll taxes withheld but not yet paid to 
the g eee with the payroll journal, the 
payroh age. POE m ny Hale ae and the subsequent period cash dis- 
bursements. Other withheld items such as retirement savings, union dues, savings bonds, 


and insurance can be verified in the same manner. If internal controls are operating 
effectively, cutoff and accuracy can easily be tested at the same time by these procedures. 


Accrued Salaries and Wages The accrual for salaries and wages arises whenever 
employees are not paid for the last few days or hours of earned wages until the subse- 
quent period. Salaried personnel usually receive all of their pay except overtime on the 
last day of the month, but often, several days of wages for hourly employees are unpaid 
at the end of the year. 

The correct cutoff and accuracy of accrued salaries and wages depend on company 
policy, which should be followed consistently from year to year. Some companies 
calculate the exact hours of pay that were earned in the current period and paid in the 
subsequent period, whereas others compute an approximate proportion. For example, 
if the subsequent payroll results from 3 days of employment during the current year 
and 2 days of employment during the subsequent year, the use of 60 percent of the 
subsequent period’s gross pay as the accrual is an example of an approximation. 

After the auditor has determined the company’s policy for accruing wages and 
knows that it is consistent with that of previous years, the appropriate audit procedure 
to test for cutoff and accuracy is to recalculate the client’s accrual. The most likely 
misstatement of any significance in the balance is the failure to include the proper 
number of days of earned but unpaid wages. 


Accrued Commissions The same concepts used in verifying accrued salaries and 
wages are applicable to accrued commissions, but the accrual is often more difficult to 
verify because companies often have several different types of agreements with sales- 
people and other commission employees. For example, some salespeople might be paid 
a commission every month and earn no salary, whereas others will get a monthly salary 
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plus a commission paid quarterly. In verifying accrued commissions, it is necessary 
first to determine the nature of the commission agreement and then test the calcula- 
tions based on the agreement. The auditor should compare the method of accruing 
commissions with that of previous years for purposes of consistency. 


Accrued Bonuses In many companies, the year-end unpaid bonuses to officers 
and employees are such a major item that the failure to record them will result in 
a material misstatement. The verification of the recorded accrual can usually be 
accomplished by comparing it with the amount authorized in the board minutes. 


Accrued Vacation Pay, Sick Pay, or Other Benefits The consistent accrual of these 
liabilities relative to those of the preceding year is the most important consideration in 
evaluating the fairness of the amounts. The company policy for recording the liability 
must first be determined, and then the recorded amounts must be recalculated. The 
company policy should be in accordance with accounting standards for compensated 
absences. 


Accrued Payroll Taxes Payroll taxes, such as FICA and state and federal unem- 
ployment taxes, can be verified by examining tax forms prepared in the subsequent 
period to determine the amount that should have been recorded as a liability at the 
balance sheet date. 


Tests of Details of Balances for Expense Accounts Several accounts on the 
income statement are affected by payroll transactions. The most important are officers’ 
salaries and bonuses, office salaries, sales salaries and commissions, and direct manu- 
facturing labor. Often, costs may be broken down further by division, product, or 
branch. Fringe benefits such as medical insurance may also be included in the expenses. 

Auditors should need to do relatively little additional testing of the income 
statement accounts in most audits beyond analytical procedures, tests of controls, 
substantive tests of transactions, AD: d tests “6 ility aggounts already discussed. 
Extensive additional testing shoul JQ... DR enhan Sar signi- 
ficant deficiencies or material weaknesses in internal control, significant misstatements 
in the liability tests, or major unexplained variances in the analytical procedures. 
Nevertheless, some income statement accounts are often tested in the payroll and 
personnel cycle. These include officers’ compensation, commissions, payroll tax expense, 
total payroll, and contract labor. 


Officers’ Compensation It is common to verify whether the total compensation of 
officers is the amount authorized by the board of directors, because their salaries and 
bonuses must be included in the company’s Form 10-K filed with the SEC and federal 
income tax return. Verification of officers’ compensation is also warranted because some 
individuals may be in a position to pay themselves more than the authorized amount. 
The usual audit test is to obtain the authorized salary of each officer from the minutes 
of the board of directors meetings and compare it with the related earnings record. 


Commissions Auditors can verify commission expense with relative ease if the 
commission rate is the same for each type of sale and the necessary sales information 
is available in the accounting records. The total commission expense can be verified by 
multiplying the commission rate for each type of sale by the amount of sales in that 
category. If the desired information is not available, it may be necessary to test the 
annual or monthly commission payments for selected salespeople and trace those to 
the total commission payments. 


Payroll Tax Expense Payroll tax expense for the year can be tested by first reconciling 
the total payroll on each payroll tax form with the total payroll for the entire year. Total 
payroll taxes can then be recomputed by multiplying the appropriate rate by the taxable 
payroll. The calculation is often time-consuming because the tax is usually applicable 
on only a portion of the payroll and the rate may change partway through the year if 
the taxpayer’s financial statements are not on a calendar-year basis. On most audits, the 
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calculation is costly and is not necessary unless analytical procedures indicate a problem 
that cannot be resolved through other procedures. When necessary, the test is ordi- 
narily done in conjunction with tests of payroll tax accruals. 


Total Payroll A closely related test to the one for payroll taxes is the reconciliation of 
total payroll expense in the general ledger with the payroll tax returns and the W-2 
forms. The objectives of the test are to determine whether payroll transactions were 
charged to a non-payroll account or not recorded in the payroll journal at all. Because 
the payroll tax records and the payroll are both usually prepared directly from the 
payroll master file, the misstatements, if any, are likely to be in both records. Tests of 
controls and substantive tests of transactions are a better means of uncovering these 
two types of misstatements in most audits. 


Contract Labor To reduce payroll costs, many organizations contract with outside 
organizations to provide staffing. The individuals providing the services are employed by 
the outside organization. For example, companies frequently contract with information 
technology services firms to handle the company’s IT management and staffing func- 
tions. The fees paid to the outside organization are tested by comparing the amounts with 
the signed contract arrangement between the company and the outside services firm. 


Presentation and Disclosure Objectives Required disclosures for payroll and 
personnel cycle transactions and balances are not extensive. However, some complex 
transactions, such as stock options and other executive officer compensation plans 
may require footnote disclosure. Auditors may combine audit procedures related to 
the four presentation and disclosure objectives with tests of details of balances for 
liability and expense accounts. Other procedures related to presentation and disclosure 
objectives are further discussed in Chapter 24. 


This chapter described the audit of the payroll and personnel cycle. Figure 20-2 illustrates 
the major accounts in the payroll and personnel cycle and the types of audit tests used to 
audit these accounts. Tests of controls and substantive tests of transactions are emphasized 
because of the significance of transactions and the high quality of internal controls in most 
companies. Tests of details of balances are normally limited to analytical procedures and 
verification of accrued liabilities related to payroll. 


Types of Audit Tests for the Payroll and Personnel Cycle 
(see Figure 20-1 on p. 661 for accounts) 


Direct Labor and 
Cash in Bank Payroll Liabilities Payroll Expenses 





<_——Payments——_> | <+——Expenses ———_> 


Audited by Audited by 
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ESSENTIAL TERMS 


Accrued payroll expenses—the liability 
accounts associated with payroll; these 
include accounts for accrued salaries and 
wages, accrued commissions, accrued 
bonuses, accrued benefits, and accrued 
payroll taxes 


Human resource records—records that 
include such data as the date of employ- 
ment, personnel investigations, rates of 
pay, authorized deductions, performance 
evaluations, and termination of employ- 
ment 


Imprest payroll account—a bank account 
to which the exact amount of payroll for 
the pay period is transferred by check or 
wire transfer from the employer’s general 
cash account 


Payroll and personnel cycle—the trans- 
action cycle that begins with the hiring 
of personnel, includes obtaining and 
accounting for services from the employees, 
and ends with payment to the employees for 
the services performed and to the govern- 
ment and other institutions for withheld 
and accrued payroll taxes and benefits 


Payroll master file—a computer file for 
recording each payroll transaction for 
each employee and maintaining total 
employee wages paid and related data for 
the year to date 


Time record—a document indicating the 
time that the employee started and stopped 
working each day and the number of hours 
worked 


REVIEW QUESTIONS 


20-1 (Objective 20-1) Identify five general ledger accounts that are likely to be affected by 
the payroll and personnel cycle in most audits. 


20-2 (Objectives 20-1, 20-3) Exphint page PRE Enhancer! 


cycle and inventory valuation. 


20-3 (Objective 20-3) List five tests of controls that can be performed for the payroll and 
personnel cycle and state the purpose of each control tested. 


20-4 (Objective 20-3) Explain why the percentage of total audit time in the cycle devoted 
to performing tests of controls and substantive tests of transactions is usually far greater for 
the payroll and personnel cycle than for the sales and collection cycle. 


20-5 (Objectives 20-2, 20-3) Evaluate the following comment by an auditor: “My job is to 
determine whether the payroll records are fairly stated in accordance with accounting 
standards, not to find out whether they are following proper hiring and termination 
procedures. When I conduct an audit of payroll, I keep out of the human resources 
department and stick to the time cards, journals, and payroll checks. I don’t care whom 
they hire and whom they fire, as long as they properly pay the ones they have.” 


20-6 (Objective 20-3) Distinguish between the following payroll audit procedures and 
state the purpose of each: (1) trace a random sample of prenumbered time cards to the 
related payments in the payroll register and compare the hours worked with the hours 
paid, and (2) trace a random sample of payments from the payroll register to the related 
time cards and compare the hours worked with the hours paid. Which of these two 
procedures is typically more important in the audit of payroll? Why? 


20-7 (Objective 20-5) In auditing payroll withholding and payroll tax expense, explain 
why emphasis should normally be on evaluating the adequacy of the payroll tax return 
preparation procedures rather than the payroll tax liability. If the preparation procedures 
are inadequate, explain the effect this will have on the remainder of the audit. 


20-8 (Objective 20-4) List several analytical procedures for the payroll and personnel cycle 
and explain the type of misstatement that might be indicated when there is a significant dif- 
ference in the comparison of the current year with previous years’ results for each of the tests. 
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20-9 (Objective 20-3) Explain the circumstances under which an auditor should perform 
audit tests primarily designed to uncover fraud in the payroll and personnel cycle. List 
three audit procedures that are primarily for the detection of fraud and state the type of 
fraud the procedure is meant to uncover. 


20-10 (Objective 20-2) Distinguish among a payroll master file, a W-2 form, and a payroll 
tax return. Explain the purpose of each. 


20-11 (Objectives 20-2, 20-3) List the supporting documents and records the auditor will 
examine in a typical payroll audit in which the primary objective is to detect fraud. 


20-12 (Objective 20-3) List five types of authorizations in the payroll and personnel cycle 
and state the type of misstatement that is likely to occur when each authorization is lacking. 


20-13 (Objective 20-5) Explain why it is common to verify total officers’ compensation 
even when the tests of controls and substantive tests of transactions results in payroll are 
excellent. What audit procedures can be used to verify officers’ compensation? 


20-14 (Objective 20-2) Explain what is meant by an imprest payroll account. What is its 
purpose as a control over payroll? 


20-15 (Objective 20-3) List several audit procedures that the auditor can use to determine 
whether payroll transactions are recorded at the proper amounts. 


20-16 (Objective 20-3) Explain how audit sampling can be used to test the payroll and 
personnel cycle. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


20-17 (Objective 20-3) The following questions concern internal controls in the payroll 
and personnel cycle. Choose the best response. 


a. A factory foreman at Steblecki Corporation discharged an hourly worker but did not 
notify the human DE: a artment. The foreman then forged the worker’s 
ApPagonPkDE: FAQ Khen giving out the checks, diverted the 
payroll checks drawn cea the re worker to his own use. The most effective 
procedure for preventing this activity is to 
(1) require written authorization for all employees added to or removed from the 

payroll. 
(2) have a paymaster who has no other payroll responsibility distribute the payroll checks. 
(3) have someone other than persons who prepare or distribute the payroll obtain 
custody of unclaimed payroll checks. 
(4) from time to time, rotate persons distributing the payroll. 


b. An auditor found that employee time records in one department are not properly 
approved by the supervisor. Which of the following could result? 
(1) Duplicate paychecks might be issued. 
(2) The wrong hourly rate could be used to calculate gross pay. 
(3) Employees might be paid for hours they did not work. 
(4) Payroll checks might not be distributed to the appropriate employees. 


c. The purpose of segregating the duties of hiring personnel and distributing payroll 
checks is to separate the 
(1) human resource function from the controllership function. 
(2) administrative controls from the internal accounting controls. 
(3) authorization of transactions from the custody of related assets. 
(4) operational responsibility from the record-keeping responsibility. 


20-18 (Objective 20-3) The following questions concern audit testing of the payroll and 
personnel cycle. Choose the best response. 
a. When control risk is assessed as low for assertions related to payroll, substantive tests 
of payroll balances most likely would be limited to applying analytical procedures and 
(1) observing the distribution of payroll checks. 
(2) footing and crossfooting the payroll register. 
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(3) inspecting payroll tax returns. 
(4) recalculating payroll accruals. 

b. A common audit procedure in the audit of payroll transactions involves tracing 
selected items from the payroll journal to employee time cards that have been 
approved by supervisory personnel. This procedure is designed to provide evidence in 
support of the audit proposition that 
(1) only proper employees worked and their pay was correctly computed. 

(2) jobs on which employees worked were charged with the appropriate labor cost. 
(3) internal controls over payroll disbursements are operating effectively. 
(4) all employees worked the number of hours for which their pay was computed. 

c. In performing tests concerning the granting of stock options, an auditor should 
(1) confirm the transaction with the Secretary of State in the state of incorporation. 
(2) verify the existence of option holders in the entity’s payroll records or stock ledgers. 
(3) determine that sufficient treasury stock is available to cover any new stock issued. 
(4) trace the authorization for the transaction to a vote of the board of directors. 


DISCUSSION QUESTIONS AND PROBLEMS 


20-19 (Objectives 20-2, 20-3) Items 1 through 8 are selected questions typically found in 

internal control questionnaires used by auditors to obtain an understanding of internal control 

in the payroll and personnel cycle. In using the questionnaire for a client, a “yes” response to a 

question indicates a possible internal control, whereas a “no” indicates a potential deficiency. 

1. Does an appropriate official authorize initial rates of pay and any subsequent changes 
in rates? 

. Are formal records such as time cards used for keeping time? 

. Is approval by a department head or foreman required for all time cards before they 
are submitted for payment? 

. Does anyone verify pay rates, Apago PDF Enhancer! 
before payroll checks are prepared? 

. Does an adequate means exist for identifying jobs or products, such as work orders, 
job numbers, or some similar identification provided to employees to ensure proper 
coding of time records? 

. Is the issuance of payments to employees independent of timekeeping? 

. Are employees required to show identification to receive paychecks? 

. Are written notices required documenting reasons for termination? 
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a. For each of the questions, state the transaction-related audit objective(s) being ful- 
filled if the control is in effect. 


b. For each control, list a test of control to test its effectiveness. 

c. For each of the questions, identify the nature of the potential financial misstate- 
ment(s) if the control is not in effect. 

d. For each of the potential misstatements in part c, list a substantive audit procedure for 
determining whether a material misstatement exists. 


20-20 (Objectives 20-2, 20-3) Following are some of the tests of controls and substantive 

tests of transactions procedures often performed in the payroll and personnel cycle. (Each 

procedure is to be done on a sample basis.) 

1. Reconcile the monthly payroll total for direct manufacturing labor with the labor 

cost distribution. 

. Examine the time card for the approval of a foreman. 

. Recompute hours on the time card and compare the total with the total hours for 
which the employee has been paid. 

. Compare the employee name, date, check number, and amounts on cancelled checks 
with the payroll journal. 

. Trace the hours from the employee time cards to job tickets to make sure that the 
total reconciles and trace each job ticket to the job-cost record. 


wry 


eS 
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Required a. 


b. 


. Account for a sequence of payroll checks in the payroll journal. 

. Select employees from the personnel file who have been terminated, and determine 
whether their termination pay was in accordance with the union contract. As part of 
this procedure, examine two subsequent periods to determine whether the termi- 
nated employee is still being paid. 

Identify whether each of the procedures is primarily a test of control or a substantive 

test of transactions. 


Identify the transaction-related audit objective(s) of each of the procedures. 


20-21 (Objectives 20-2, 20-3) The following misstatements are included in the accounting 
records of Lathen Manufacturing Company: 


1 


6. 


N 


Required ai. 


b. 


. Joe Block and Frank Demery take turns “punching in” for each other every few days. 
The absent employee comes in at noon and tells his foreman that he had car trouble 
or some other problem. The foreman does not know that the employee is getting 
paid for the time. 

. The foreman submits a fraudulent time card for a former employee each week and 
delivers the related payroll check to the employee’s house on the way home from 
work. They split the amount of the paycheck. 

. Employees often overlook recording their hours worked on job-cost tickets as 
required by the system. Many of the client’s contracts are on a cost-plus basis. 

. Direct labor was unintentionally charged to job 620 instead of job 602 by the payroll 
clerk when he key-entered the labor distribution sheets. Job 602 was completed and 
the costs were expensed in the current year, whereas job 620 was included in work- 
in-process. 

. The payroll clerk prepares a check to the same nonexistent person every week when 

he enters payroll transactions in the computer system, which also records the 

amount in the payroll journal. He submits it along with all other payroll checks for 
signature. When the checks are returned to him for distribution, he takes the check 
d deposits it i cia nt account bearing that person’s name. 

Apagen. 1 ta ERE, the computer operator deducts $.50 

extra federal income taxes from several employees each week and credits the amount 

to his own employee earnings record. 

. The payroll clerk manually prepares payroll checks but often forgets to record one or 
two checks in the computer-prepared payroll journal. 

For each misstatement, state a control that should have prevented it from occurring 

on a continuing basis. 

For each misstatement, state a substantive audit procedure that could uncover it. 


20-22 (Objectives 20-3, 20-4, 20-5) The following audit procedures are typical of those 
found in auditing the payroll and personnel cycle: 


1. 


2. 


10. 


Scan journals for all periods for unusual transactions to determine whether they are 

recorded correctly. 

Select a sample of 40 entries in the payroll journal and trace each to an approved 

time card. 

. Discuss with management any payroll liabilities recorded in the prior year that are 
not provided for in the current period. 

. Examine evidence that payroll hours and wage rates are verified by an independent 
person. 

. Obtain a schedule of all payroll liabilities and trace to the general ledger. 

. Select a sample of 20 cancelled payroll checks and account for the numerical sequence. 

. Foot and cross-foot the payroll journal for two periods and trace totals to the general 
ledger. 

. Compute payroll tax expense as a percentage of total wages, salaries, and commissions. 

. Select a sample of 20 payroll payments and trace to payroll journal entries for name, 

date, and amounts. 

Compute direct labor, indirect labor, and commissions as a percentage of net sales 

and compare with prior years. 
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11. Examine owner approval of rates of pay and withholdings. 
12. For payroll liabilities, examine subsequent cash disbursements and supporting 
documents such as payroll tax returns, depository receipts, and tax receipts. 


a. Select the type of test for each audit procedure from the following: 
(1) Test of control (3) Analytical procedure 
(2) Substantive test of transactions (4) Test of details of balances 


b. For each test of control or substantive test of transactions, identify the applicable 
transaction-related audit objective(s). 


c. For each test of details of balances, identify the applicable balance-related audit 
objective(s). 


20-23 (Objectives 20-3, 20-5) The following are steps in the methodology for designing 
tests of controls, substantive tests of transactions, and tests of details of balances for the 
payroll and personnel cycle: 
1. Design tests of details of balances for the payroll and personnel cycle. 
. Evaluate risk and materiality for payroll expense and liability accounts. 
. Evaluate whether control risk can be assessed as low for payroll. 
. Design and perform payroll- and personnel-related analytical procedures. 
. Identify controls and deficiencies in internal control for the payroll and personnel 
cycle. 
. Obtain an understanding of the payroll and personnel cycle internal controls. 
. Evaluate tests of controls and substantive tests of transactions results. 
. Design payroll and personnel cycle tests of controls and substantive tests of transactions. 
. Assess inherent risk for payroll-related accounts. 
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a. Identify (1) those steps that are tests of controls or substantive tests of transactions 
and (2) those that are tests of details of balances. 


b. Put steps that are tests of controls and substantive tests of transactions in the order of 


their performance in most audit 
ago PDF Enhancer 
c. Put the tests of details of balance Re proper order. 


20-24 (Objective 20-4) In comparing total payroll tax expense with that of the preceding 
year, Merlin Brendin, CPA, observed a significant increase, even though the total number of 
employees increased only from 175 to 185. To investigate the difference, he selected a large 
sample of payroll disbursement transactions and carefully tested the withholdings for each 
employee in the sample by referring to federal and state tax withholding schedules. In his 
test, he found no exceptions; therefore, he concluded that payroll tax expense was fairly 
stated. 


a. Evaluate Brendin’s approach to testing payroll tax expense. 


b. Discuss a more suitable approach for determining whether payroll tax expense is 
correctly stated for the year. 


20-25 (Objective 20-3) You are assessing internal control in the audit of the payroll and 
personnel cycle for Rogers Products Company, a manufacturing company specializing in 
assembling computer parts. Rogers employs approximately two hundred hourly and thirty 
salaried employees in three locations. Each location has one foreman who is responsible for 
overseeing operations. The owner of the company lives in Naples, Florida and is not actively 
involved in the business. The two key executives are the vice president of sales and con- 
troller, and both have been employed by the company for more than fifteen years. 

New hourly employees are hired by the foremen at each location on an as needed basis. 
Each foreman recommends the wage rate for each new employee as well as wage rate increases. 
The effectiveness of employees varies considerably and their wages are adjusted accord- 
ingly. All wage rates are approved by the controller. 

Since each hourly employee works independently, Rogers has a highly flexible work 
schedule policy, as long as they start after 7:00 a.m. and are finished by 6:00 p.m. Each 
foreman has a supply of prenumbered time cards that they distribute to employees on 
Monday morning. Because some employees do not start until later in the day several time 
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cards are kept in a box by the time clock for their use. Hourly employees use time clocks to 
record when they start and stop working. Each Friday, after the employees complete their 
work for the week, the foremen account for the time cards they distributed, approve them, 
and send them by an overnight courier to the main office in Cincinnati. 

The payroll clerk receives the time cards on Saturday and enters the information using 
payroll software that prepares the checks or direct deposit authorizations and the related 
payroll records. The checks are ready for the controller to sign Monday morning. She 
compares each check to the payroll transactions list sent by the payroll department and 
returns the checks using the same courier to each location. The foremen pick up the checks 
and distribute each check to the appropriate employee. If an employee is not present at the 
end of the day the foreman mails it to the employee’s address. 

Except for the foremen, all salaried employees work in the Cincinnati office. The vice 
president of sales or controller hires all salaried employees, depending on their responsi- 
bilities, and determines their salaries and salary adjustments. The owner determines the 
salary of the vice president of sales and controller. The payroll clerk also processes the 
payroll transactions for salaried employees using the same payroll software that is used for 
hourly employees, but all salaried employees use direct deposit so no check is prepared. 

The payroll software has access controls that are set by the controller. She is the only 
person who has access to the salary and wage rate module of the software. She updates the 
software for new wage rates and salaries and changes of existing ones. The accounting clerk 
has access to all other payroll modules. The controller’s assistant has been taught to 
reconcile bank accounts and does the reconciliation monthly. 

a. Identify the internal control deficiencies in the Rogers Products Company’s payroll system. 

b. For each deficiency, state the type of misstatement that is likely to result. Be as specific 
as possible in describing the nature of the misstatement. If the potential misstatement 
involves fraud, identify who is most likely to perpetuate the fraud. 


20-26 ope 20-3) The following are various asset misappropriations involving the 


po Ar ersonnel. PD 
Age Prte PDF. .Bnhanceron, for a fictitious employee and had 


“the funds directly deposited to a bank account that he controlled. 

2. An employee adds 10 overtime hours that she did not work to her time record each 
pay period. 

3. Two factory employees have an arrangement that one of them will take each Friday 
off, and the other employee will record their time worked so that the absent employee 
will be paid. 

4. A supervisor does not notify human resources that an hourly employee has left the 
company. He continues to submit time records for the employee. The money is 
directly deposited in the former employee’s bank account, and he splits the amount 
paid with the supervisor. 

. The payroll clerk increased his salary by $100 each pay period. After a few weeks, he 
also increased the hourly rate for his friend who works in the shipping department. 


wn 


a. For each misappropriation, indicate the transaction-related audit objective that was 
not met. 

b. Indicate one or more controls that would be most effective in preventing or detecting 
the misappropriation. 

c. Because the controller is concerned about fictitious employees, she has recommended 
a surprise payroll payoff. Which misappropriations would be detected by the surprise 
payroll payoff? How is the payoff done if employees do not receive payroll checks 
because payment is directly deposited into their bank accounts? 


20-27 (Objective 20-4) Archer Uniforms, Inc., is a distributor of professional uniforms to retail 
stores that sell work clothing to professionals, such as doctors, nurses, security guards, etc. 
Traditionally, most of the sales are to retail stores throughout the United States and Canada. 
Most shipments are processed in bulk for delivery directly to retail stores or to the corporate 
office warehouse distribution facilities for retail store chains. In early 2011, Archer Uniforms 
began offering the sale of uniforms directly to professionals through its company Web site. 
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Professionals can access online information about uniform styles, sizes, and prices. Purchases 
are applied to the customer’s personal credit card, and the credit card agencies wire funds to 
Archer’s bank account periodically throughout the month. Management made this decision 
based on its conclusion that the online sales would tap a new market of professionals who do 
not have easy access to retail stores. Thus, the volume of shipments to retail stores is expected 
to remain consistent. 

Because Archer’s IT staff lacked the necessary experience to create and support the online 
sales system, management engaged an information technology consulting firm to design and 
maintain the online sales system. 


Before performing analytical procedures related to the payroll and personnel cycle accounts, 
develop expectations of how these recent events at Archer Uniforms, Inc., will affect payroll 
expense for the following departments during 2011 compared to prior years. Indicate the 
degree (extensive, moderate, little) to which you expect the payroll expense account balance 
to increase or decrease during 2011. 


1. Warehouse and Shipping Department 5. Receiving Department 
2. IT Department 6. Executive Management 
3. Accounts Receivable Department 7. Marketing 


4. Accounts Payable Department 


20-28 (Objectives 20-4, 20-5) During the first-year audit of Jones Wholesale Stationery, you 
observe that commissions amount to almost 25 percent of total sales, which is somewhat 
higher than in previous years. Further investigation reveals that the industry typically has 
larger sales commissions than Jones and that there is significant variation in rates depending 
on the product sold. 

At the time a sale is made, the salesperson records the commission rate and the total amount 
of the commissions on the office copy of the sales invoice. When sales are entered into the 
computer system for the recording of sales, the debit to sales commission expense and credit to 
accrued sales commission are also recorded. As part of recording the sales and sales commission 
expense, the accounts receivable clerk Apa Oc PPPi*gharyceerand all 
calculations on the sales invoices. Both theccouTits receivable and the salesperson’s master files 
are updated when the sale and sales commission are recorded. On the fifteenth day after the 
end of the month, the salesperson is paid for the preceding month’s sales commissions. 

a. Develop an audit program to verify sales commission expense, assuming that no audit 
tests have been conducted in any audit area to this point. 

b. Develop an audit program to verify accrued sales commissions at the end of the year, 
assuming that the tests you designed in part a resulted in no significant misstatements. 


Required 


Required 


CASE 


20-29 (Objective 20-3) Roost and Briley, CPAs, are doing the audit of Leggert Lumber Co., 
an international wholesale lumber broker. Because of the nature of their business, payroll 
and telephone expense are the two largest expenses. 

You are the in-charge auditor on the engagement responsible for writing the audit 
program for the payroll and personnel cycle. Leggert Lumber uses a computer service 
company to prepare weekly payroll checks, update earnings records, and prepare the weekly 
payroll journal for its 30 employees. The president maintains all human resource files, 
knows every employee extremely well, and is a full-time participant in the business. 

All employees, except the president, check into the company building daily using a 
time clock. The president’s secretary, Mary Clark, hands out the time cards daily, observes 
employees clocking in, collects the cards, and immediately returns them to the file. She goes 
through the same process when employees clock out on their way home. 

At the end of each week, employees calculate their own hours. Clark rechecks those 
hours, and the president approves all time cards. Each Tuesday, Clark submits payroll input 
to the computer service center. She files a copy of the input data, which includes the 
following information for each employee: 
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Information Source 





Employee name Time card 

Social Security number Employee list 

Hourly labor rate* Wage rate list (approved by president) 
Regular hours Time card 

Overtime hours Time card 

Special deductions* Special form (prepared by employee) 
W-4 information* W-4 form 

Termination of employment* President 





*Included on input form only for new employees, terminations, and changes. 


The service center uses the payroll data to update master files, and print out payroll 
checks and a payroll register. The payroll register has the following headings: 





Employee name Overtime payroll dollars State taxes withheld 
Social Security number Gross payroll Other deductions 
Regular hours FICA taxes withheld Net pay 

Overtime hours Medicare withheld Check number 
Regular payroll dollars Federal taxes withheld 





A line is prepared for each employee and the journal is totaled. 

Payroll checks and the journal are delivered to Clark, who compares the information 
on the journal with her payroll input and initials the journal. She gives the checks to the 
president, who signs them and personally delivers them to employees. 

Clark re-adds the journal and posts the totals to the ledger. Bank statements with copies of 
cancelled checks are mailed to the president, and he prepares a monthly bank reconciliation. 


Required a. Is there any loss of documentation because of the computer service center? Explain. 


b. For each transaction-related audit objective for the payroll and personnel cycle, write 
appropriate tests of controls and substantive tests of transactions audit procedures. 
Consider both controls and deficiencies in writing your program. Label each procedure 


2Apagea fR DE ob nhance F transactions. 


c. Rearrange your design format audit program in requirement b into a performance 
format audit program. 

d. Prepare a sampling data sheet using either nonstatistical or attributes sampling, such 
as the ones shown in Chapter 15, for the audit program in part b. Set ARACR and 
other factors required for sampling as you consider appropriate. Do not assume that 
you actually performed any tests. 


INTERNET PROBLEM 20-1: 


RISKS OF OUTSOURCING THE PAYROLL FUNCTION 





Outsourcing the payroll function can provide many benefits, but there are also risks 
associated with outsourcing. The IRS (www.irs.gov) provides information on outsourcing 
payroll duties for employers who outsource the payroll function (search for “payroll 
outsourcing”). The IRS also provides information on employment tax fraud investigations 
(search for “employment tax fraud”). 
Required a. If the third party makes the payroll tax payments, are they responsible for any defi- 
ciencies or failure to make payments? 
b. What should be the employer address used for correspondence with the IRS? Why do 
you think this provision exists? 


c. Read the fiscal year 2009 investigation entitled “Former Owner of Payroll Company 
Sentenced to 10 Years in Prison.” What was the number of clients and the amount of 
payroll taxes that this payroll operator was charged with failing to remit. 


d. Review other investigations in 2010 and 2009. Are there other cases of fraud involving 
payroll service providers? 
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AUDIT OF THE INVENTORY 
AND WAREHOUSING CYCLE 


After studying this chapter, 





Phantom Inventory you should be able to 

Mickey Monus was the local hero in Youngstown, Ohio. He acquired a local aie escabeine business tincions 

drugstore, and within 10 years, added 299 more stores to form the national and the related documents and 

deep-discount retail chain, Phar-Mor, Inc. The company was viewed as the records in the inventory and 

rising star by some retail experts and was considered to be the next Wal- warehousing cycle. 

Mart. Even Sam Walton announced that the only company he feared in the 21-2 Explain the five parts of the audit 

expansion of Wal-Mart was Phar-Mor. one inventory and warehousing 

Phar-Mor sold a variety of household products and prescription drugs at 21-3 Design and perform audit tests 

substantially lower prices than other discount stores. Monus described the of cost accounting. 

company’s strategy as “power buying,” whereby Phar-Mor loaded up on 21-4 Apply analytical procedures to 

products when suppliers were selling at rock-bottom prices and passed the accounts in the inventory and 

those savings to cost-conscious customers through deeply discounted wiaielieusing cae: 

prices. 21-5 Design and perform physical 
observation audit tests for 

Actually, Phar-Mor's prices were so low that the company was selling goods inventory. 

for less than their cost, causing the company to lose money. However, 21-6 Design and perform audit tests 

Monus continued to argue internally Apa @ Piptyin’s Purhyncer of pricing and compilation for 

it would get so large that it could sell‘tts ne} out of trouble. Unwilling to penton 

allow these shortfalls to damage Phar-Mor's appearance of success, Monus 21-7 _ Integrate the various parts of the 

and his team began to engage in creative accounting so that Phar-Mor SUB GE oy aia 


warehousing cycle. 








never reported these losses in its financial statements. L 





Management dumped the losses into “bucket accounts,” only to reallocate 

those amounts to the company’s hundreds of stores in the form of phantom increases in inventory costs. Monus’ 
team issued fake invoices for merchandise purchases, made fraudulent journal entries to increase inventory and 
decrease cost of goods sold, and overcounted and double-counted inventory items. 


Unfortunately, the auditors never uncovered the fraud. They allegedly observed inventory in only four stores out of 
300, and they informed Phar-Mor management months in advance about the stores they would visit. Phar-Mor 
executives fully stocked the four selected stores but allocated the false inventory increases to the other 296 stores. 


The fraud was ultimately uncovered when a travel agent received a Phar-Mor check signed by Monus paying for 
expenses that were unrelated to Phar-Mor. The agent showed the check to her landlord, who happened to be a Phar- 
Mor investor, and he contacted David Shapiro, Phar-Mor’s CEO. Subsequent investigation of the invalid expenditure 
eventually led to the discovery of the inventory fraud. 


Monus was eventually convicted and went to jail for 5 years. The CFO, who did not profit personally, was sentenced 
to 33 months in prison. The audit failure cost the audit firm over $300 million in civil judgments. 


Sources: Adapted from Beasley, Buckless, Glover, and Prawitt, Auditing Cases: An Interactive Learning Approach, 4th edition, Prentice- 
Hall, 2009, pp. 119-131 and Joseph T. Wells, “Ghost Goods: How to Spot Phantom Inventory,” Journal of Accountancy (June 2001), 
pp. 33-36. 





he inventory and warehousing cycle is unique because of its close relationships to other transaction cycles. For 

a manufacturing company, raw material enters the inventory and warehousing cycle from the acquisition and 
payment cycle, while direct labor enters it from the payroll and personnel cycle. The inventory and warehousing cycle 
ends with the sale of goods in the sales and collection cycle. 

The audit of inventory, especially tests of the year-end inventory balance, is often the most complex and time- 
consuming part of the audit. As the audit of Phar-Mor demonstrates, finding misstatements in inventory accounts 
can be challenging. Factors affecting the complexity of the audit of inventory include: 

* Inventory is often the largest account on the balance sheet. 

* Inventory is often in different locations, making physical control and counting difficult. 

* Diverse inventory items such as jewels, chemicals, and electronic parts are often difficult for auditors to observe 

and value. 

* Inventory valuation is also difficult when estimation of inventory obsolescence is necessary and when manu- 

facturing costs must be allocated to inventory. 

* There are several acceptable inventory valuation methods and some organizations may prefer to use different 

valuation methods for different parts of the inventory, which is acceptable under accounting standards. 


BUSINESS FUNCTIONS IN THE CYCLE AND 


RELATED DOCUMENTS AND RECORDS 





OBJECTIVE 21-1 


Describe the business 
functions and the related 
documents and records in the 
inventory and warehousing 


Inventory takes many different forms, depending on the nature of the business. For 
retail or wholesale businesses, the largest account in the financial statements is often 
merchandise inventory available for sale. To study the inventory and warehousing 
cycle, we will use an example of a manufacturing company, whose inventory may 
include raw materials, purchased parts and supplies for use in production, goods in the 


cycle. process of being manufactured, and finished goods available for sale. Still, most of the 


principles discussed hor es of businesses as well. 
Fi aGQM hy nhancesn the flow of costs in the inventory 


and warehousing cycle for a manufacturing company. Examine the debits to the raw 
materials, direct labor, and manufacturing overhead T accounts to see how the inventory 
and warehousing cycle ties in to the acquisition and payment cycle and the payroll and 
personnel cycle. The direct tie-in to the sales and collection cycle occurs at the point 
where finished goods are relieved (credited) and a charge is made to cost of goods sold. 

The inventory and warehousing cycle can be thought of as comprising two 
separate but closely related systems, one involving the physical flow of goods and the 
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other the related costs. Six functions make up the inventory and warehousing cycle. 
Each of these is discussed next. 


The inventory and warehousing cycle begins with the acquisition of raw materials for 
production. Adequate controls over purchasing must be maintained whether inventory 
purchases are for raw materials for a manufacturer or finished goods for a retailer. 
Purchase requisitions are forms used to request the purchasing department to order 
inventory. These requisitions may be initiated by stockroom personnel as raw materials 
are needed, by automated computer software when raw materials reach a predeter- 
mined level, by orders placed for the materials required to produce a customer order, or 
by orders initiated on the basis of a periodic raw materials count. 


Receipt of the ordered materials, which is also part of the acquisition and payment cycle, 
involves the inspection of material received for quantity and quality. The receiving 
department prepares a receiving report that becomes a part of the documentation 
before payment is made. After inspection, the material is sent to the storeroom and 
copies of the receiving documents, or electronic notifications of the receipt of goods, 
are typically sent to purchasing, the storeroom, and accounts payable. Control and 
accountability are necessary for all transfers. 


Once received, materials are normally stored in a stockroom. When another depart- 
ment needs materials for production, personnel submit a properly approved materials 
requisition, work order, or similar document or electronic notice that indicates the 
type and quantity of materials needed. This requisition document is used to update the 
perpetual inventory master files and record transfers from raw materials to work-in- 
process accounts. These updates occur automatically in organizations with integrated 
inventory management and accounting software systems. 


Processing inventory varies greatly & oY PDF Ennaneée rmine 


the finished goods items and quantities*the produce based on spec ers from 
customers, sales forecasts, predetermined finished goods inventory levels, and 
economical production runs. A separate production control department is often 
responsible for determining the type and quantities to produce. 

An adequate cost accounting system is an important part of the processing of goods 
function for all manufacturing companies. The system shows the relative profitability 
of the products for management planning and control and values inventories for pre- 
paring financial statements. Two primary types of cost systems exist: job cost systems 
and process cost systems, but there are many variations and combinations of these 
systems. In a job cost system, costs are accumulated by individual jobs when material 
is issued and labor costs incurred. In a process cost system, they are accumulated by 
processes, with unit costs for each process assigned to the products passing through 
the process. 

Cost accounting records consist of master files, spreadsheets, and reports that 
accumulate material, labor, and overhead costs by job or process as those costs are 
incurred. When jobs or products are completed, the related costs are transferred from 
work-in-process to finished goods based on production department reports. 


When finished goods are completed, they are placed in the stockroom to await ship- 
ment. In companies with good internal controls, finished goods are kept under physical 
control in a separate, limited-access area. The control of finished goods is often 
considered part of the sales and collection cycle. 


Shipping completed goods is part of the sales and collection cycle. The actual shipment 
of goods to customers in exchange for cash or other assets, such as accounts receivable, 
creates the exchange of assets necessary for meeting revenue recognition criteria. For 
most sales transactions, the actual shipment becomes the trigger for recognizing the 


Process 
Purchase Orders 


Receive Raw Materials 


Store Raw Materials 


Process the Goods 


Store Finished Goods 


Ship Finished Goods 
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Perpetual Inventory 
Master Files 


related accounts receivable and sales in the accounting system. Thus, shipments of 
finished goods must be authorized by a properly approved shipping document. 


We have not yet discussed one type of record used for inventory: a perpetual inventory 
master file. Separate perpetual records are normally kept for raw materials and finished 
goods. Most companies do not use perpetuals for work-in-process. 

Perpetual inventory master files typically include information about the units of 
inventory acquired, sold, and on hand. In well-designed computerized systems, they 
also include information about unit costs. 

For acquisitions of raw materials, the perpetual inventory master file is updated 
automatically when acquisitions of inventory are processed as part of recording acqui- 
sitions. For example, when the number of units and unit cost for each raw material 
acquisition are entered in the computer system, this information is used to update 
perpetual inventory master files along with the acquisitions journal and accounts 
payable master file. 

Transfers of raw material from the storeroom must be separately entered into the 
computer to update the perpetual records. Typically, only the units transferred need to 
be entered because the computer determines the unit costs from the master file. 

Finished goods perpetual inventory master files include the same type of informa- 
tion as raw materials perpetuals but are considerably more complex if costs are included 
along with units. Finished goods costs include raw materials, direct labor, and 
manufacturing overhead, which often requires allocations and detailed record keeping. 
When finished goods perpetuals include unit costs, the cost accounting records must 
be integrated into the computer system. 

Figure 21-2 summarizes the business functions and the physical flow of inventory 
from the purchase of raw materials to the shipment of finished goods. It also includes 
the most common documents and records used to support the functions and physical 
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PARTS OF THE AUDIT OF INVENTORY 


OBJECTIVE 21-2 





Explain the five parts of the 
audit of the inventory and 
warehousing cycle. 





Acquire and 
Record Raw Materials, 
Labor, and Overhead 


Now that you are familiar with the business functions and the related documents and 
records in the inventory and warehousing cycle, we turn our attention to the audit of 
the cycle. The overall objective in the audit of the inventory and warehousing cycle is to 
provide assurance that the financial statements fairly account for raw materials, work- 
in-process, finished goods inventory, and cost of goods sold. 

The audit of the inventory and warehousing cycle can be divided into five activities 
within the cycle: 

1. Acquire and record raw materials, labor, and overhead 
Internally transfer assets and costs 
Ship goods and record revenue and costs 
Physically observe inventory 
Price and compile inventory 


Ue eS 


This part of the audit includes the first three functions in Figure 21-2. These include 
processing purchase orders, receiving raw materials, and storing raw materials. 

The auditor obtains an understanding of internal controls over these three func- 
tions and then performs tests of controls and substantive tests of transactions in both the 
acquisition and payment cycle and the payroll and personnel cycle. These tests should 
satisfy auditors that controls affecting the acquisitions of raw materials and manufac- 
turing costs are operating effectively and that acquisition transactions are correctly 
stated. When direct labor is a significant part of manufactured inventory, auditors 
should verify the proper accounting for these costs in the payroll and personnel cycle. 


684 Part 4 / APPLICATION OF THE AUDIT PROCESS TO OTHER CYCLES 





















































lees Functions in the Inventory and Warehousing Cycle ) 
FUNCTIONS 
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purchase orders raw materials raw materials* the goods __ finished goods” finished goods 
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FLOW OF 5 materials completed Ba 
INVENTORY ajo Ti ae > in >| goods in [> eae 
oe seeded production storage eee 
RELATED Purchase Receiving Raw Raw Finished Shipping 
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Purchase Vendor's inventory inventory Finished 
order invoice master Cost master file goods 
file accounting perpetual 
recordst Cost inventory 
accounting master file 
recordst 
Cost 
accounting 
recordst 
X / 
*Inventory counts are taken and compared with perpetual and book amounts at any stage of the cycle. The auditor must determine that cutoff for recording 
documents corresponds to the physical location of the items. A count must ordinarily be taken once a year. If the perpetual inventory system is operating well, 
this can be done on a cycle basis throughout the year. 
tincludes cost information for materials, direct labor, and overhead. 
Transfer 


Internal transfers of inventory Apa ge. PDE fifth Mya ye 21- 2: 
process the goods and store finishe nts account Tor these ac t +4 in the 
cost accounting records, which are independent of other cycles and are tested as part of 
the audit of the inventory and warehousing cycle. 


Recording shipments and related costs is the last function shown in Figure 21-2. 
Because it is part of the sales and collection cycle, auditors obtain an understanding and 
test internal controls over recording shipments as a part of auditing that cycle, including 
procedures to verify the accuracy of the credits to inventory recorded in perpetual 
inventory master files. 


Auditors must observe the client taking a physical inventory count to determine whether 
recorded inventory actually exists at the balance sheet date and is correctly counted by 
the client. Physical examination is an essential type of evidence used to verify the exis- 
tence and count of inventory. The story at the beginning of this chapter, when auditors 
failed to uncover Phar-Mor’s fraud, demonstrates the importance of physically observing 
inventories, especially when those inventories are material to the financial statements. 


Costs used to value inventory must be tested to determine whether the client has 
correctly followed an inventory method that is both in accordance with accounting 
standards and consistent with previous years. Audit procedures used to verify these 
costs are called price tests. In addition, the auditor must perform inventory 
compilation tests, which are tests to verify whether the physical counts were correctly 
summarized, the inventory quantities and prices were correctly extended, and the 
extended inventory correctly footed to equal the general ledger inventory balance. 
Figure 21-3 (p. 686) summarizes the five parts of the audit of the inventory and 
warehousing cycle. Because of the interrelationships of the inventory and warehousing 
cycle with other cycles, some parts of the audit of inventory are most efficiently tested 


Assets and Costs 


Ship Goods and 
Record Revenue 
and Costs 


Physically 
Observe Inventory 


Price and 
Compile Inventory 
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with the audit tests of other cycles. As noted in Figure 21-3, auditors test the acquisi- 
tion and recording of raw materials, labor, and overhead as part of the audit of the 
acquisition and payment and payroll and personnel cycles. Also, they test shipment of 
goods and recording of revenue and related costs in the audit of the sales and collection 
cycle. Because we have already discussed obtaining an understanding of internal 
eB age PHP af nhane tpof transactions for these other cycles 
in earliechapters, they are not repeated here (the first and third box in Figure 21-3). 

The physical observation of inventory and the pricing and compilation of the 
inventory are audited using analytical procedures and tests of details of balances (the 
last two boxes in Figure 21-3). For tests of details of balances the auditor must consider 
business and inherent risks, set tolerable misstatement for inventory, and evaluate the 
results of the tests of controls and substantive tests of transactions for the transactions 
and activities in the first three boxes in Figure 21-3. This is the same methodology that 
we discussed in chapters 14-20 for other cycles. The remainder of the chapter deals 
with the parts of the audit of inventory in Figure 21-3 that are tested as part of the 
inventory and warehousing cycle, including the use of analytical procedures for tests of 
the physical inventory observation and inventory pricing and compilation. 
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OBJECTIVE 21-3 





Design and perform audit 
tests of cost accounting. 





Our discussion of the audit of cost accounting begins with the internal transfer of 
assets from raw materials to work-in-process to finished goods inventory. We also focus 
on systems and controls related to the transfer of inventory costs, which are accounted 
for in the cost accounting records. 

Cost accounting systems and controls of different companies vary more than most 
other audit areas because of the wide variety of items of inventory and the level of 
sophistication desired by management. For example, a company that manufactures 
farm machines may have completely different cost records and internal controls than a 
steel fabricating shop that makes and installs custom-made metal cabinets. Of course, 
small companies with owners actively involved in the manufacturing process need less 
sophisticated records than large, multiproduct companies. 
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Cost accounting controls are those related to processes affecting physical inventory 
and the tracking of related costs from the time raw materials are requisitioned to the 
completion of the manufactured product and its transfer to storage. It is convenient to 
divide these controls into two broad categories: 


1. Physical controls over raw materials, work-in-process, and finished goods 
inventory 
2. Controls over the related costs 


Almost all companies need physical controls over their assets to prevent loss from 
misuse and theft. To protect assets, most companies physically segregate and restrict 
access to storage areas for raw material, work-in-process, and finished goods to control 
the movement of inventory. In some instances, managers assign custody of inventory 
to specific individuals who are responsible for protecting the inventory. Clients may 
use approved prenumbered documents for authorizing movement of inventory to 
protect the assets from improper use. Electronic or paper copies of these documents 
should be sent directly to accounting by the persons issuing them, bypassing people 
with custodial responsibilities. An example of an effective document of this type is an 
approved materials requisition for obtaining raw materials from the storeroom. 

Perpetual inventory master files maintained by persons who do not have custody of 
or access to assets are another useful cost accounting control for a number of reasons: 

* They provide a record of inventory on hand, which is used to initiate production 

or acquisition of additional materials or goods. 

* They provide a record of the use of raw materials and the sale of finished goods, 

which can be reviewed for obsolete or slow-moving items. 

* They provide a record to pinpoint responsibility when there are differences 

between physical counts and the amounts shown on the perpetual listings. 


Also, adequate internal controls that integrate production and accounting records 


to provide accurate costs for all Prods Temp at jn pricing 
ago PDE “Enhaider 


finished goods, controlling costs, an 


The concepts in auditing inventory cost accounting are no different from those dis- 
cussed for other transaction cycles: understand internal controls in the cost accounting 
system, assess planned control risk, determine extent of testing controls, and design 
tests of controls and substantive tests of transactions to meet transaction-related audit 
objectives. The auditor is concerned with four aspects of cost accounting: 


1. Physical controls over inventory 

2. Documents and records for transferring inventory 
3. Perpetual inventory master files 

4. Unit cost records 


Physical Controls Auditor tests of physical controls over raw materials, work-in- 
process, and finished goods are limited to observation and inquiry. Auditors can 
examine the raw materials storage area to determine whether the inventory is protected 
from theft and misuse by locks or other security measures, including an inventory 
custodian. They can ask inventory custodians to explain their duties related to their 
oversight of inventory monitored by them. If auditors conclude that the physical 
controls are so inadequate that inventory will be difficult to accurately count, they should 
expand observation of physical inventory tests to make sure that an adequate count is 
carried out. 


Documents and Records for Transferring Inventory The auditor’s primary 
concerns in verifying the transfer of inventory from one location to another are that 
recorded transfers exist, all actual transfers are recorded, and the quantity, description, 
and date of all recorded transfers are accurate. Products labeled with standardized bar 
codes that can be scanned by laser bar-code readers and other technologies make it 
easier for clients to track the movement of goods through production. 
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When auditing inventory transfers, auditors first need to understand the client’s 
internal controls for recording transfers before they can perform relevant tests. After 
they understand the internal controls, they can easily perform tests of controls or 
substantive tests of transactions by examining documents and records to test the 
occurrence and accuracy objectives for the transfer of goods from the raw material 
storeroom to manufacturing. For example, auditors may account for a sequence of 
raw material requisitions, examine the requisitions for proper approval, and compare 
the quantity, description, and date with the information recorded in the raw material 
perpetual inventory master files to verify that related controls operated effectively 
and that amounts are correctly recorded. Similarly, the auditor may compare 
completed production records with perpetual inventory master files to be sure that 
all manufactured goods were physically delivered to the finished goods storeroom. 


Perpetual Inventory Master Files The reliability of perpetual inventory master 
files affects the timing and extent of the auditor’s physical examination of inventory. 
When perpetual inventory master files are accurate, auditors can test the physical 
inventory before the balance sheet date. An interim physical inventory or use of cycle 
counts throughout the year can result in significant cost savings for both the client and 
the auditor, and it enables the audit to be completed earlier. The auditor may also 
reduce tests of physical inventory counts when the client has reliable perpetual 
inventory records and assessed control risk related to physical observation of inventory 
is low. 

Auditors test perpetual inventory master files by examining documentation that 
supports additions and reductions of inventory amounts in the master files. For 
example, as part of the tests of the perpetual records, auditors may examine documents 
supporting inventory activities including the addition of acquired raw material 
inventory, the reduction of raw material inventory for use in production, the increase 
in finished goods inventory when goods have been manufactured and the decrease 
when ApagoiwPbFiak MANGE Lvely easy to test the accuracy of the 
perpetual inventory master files after the auditor determines the adequacy of the 
design and implementation of inventory internal controls and the related level of 
assessed control risk. Auditors test the perpetual records for acquisitions of raw 
materials in the acquisition and payment cycle, while reductions in finished goods for 
sale are tested in the sales and collection cycle. 

For many companies, traditional documents exist only in electronic form and the 
perpetual inventory system is integrated with other accounting cycles. As a result, the 
auditor can test computer controls to support a reduction in control risk, which 
reduces substantive testing and can result in audit efficiencies. 


Unit Cost Records Accurate cost data for raw materials, direct labor, and manufac- 
turing overhead is essential for fairly stated raw materials, work in progress and 
finished goods inventories. To maintain accurate cost data, clients must integrate their 
cost accounting records with production and other accounting records. 

When testing inventory cost records, the auditor must first obtain an under- 
standing of internal control in the cost accounting system. This understanding can be 
time-consuming because the flow of costs is integrated with accounting records in 
three other cycles: acquisition and payment, payroll and personnel, and sales and 
collection. 

After auditors understand internal controls affecting cost accounting records, the 
approach to internal verification of cost accounting records involves the same concepts 
that were discussed in the verification of acquisition, payroll and sales transactions. 
Auditors usually test cost accounting records as a part of the acquisition, payroll, and 
sales tests to avoid testing the records more than once and to increase audit efficiency. 
When testing acquisition transactions, auditors should trace the units and unit costs of 
raw materials to additions recorded in the perpetual inventory master files and the total 


Part 4 / APPLICATION OF THE AUDIT PROCESS TO OTHER CYCLES 


cost to cost accounting records. Similarly, when clients maintain payroll cost data for 
different jobs, auditors should trace from the payroll summary directly to job cost 
records when they audit payroll. 

Determining the reasonableness of manufacturing overhead costs assigned to 
work-in-process is challenging for auditors because management must make assump- 
tions that affect overhead allocations that can significantly affect the unit costs of 
inventory and therefore the fairness of inventory valuation. In evaluating these overhead 
cost allocations, the auditor must consider the reasonableness of the allocation method, 
assuming the method complies with accounting standards, and whether it is con- 
sistently applied. 

Management typically allocates overhead using total direct labor dollars as the 
basis for allocation. In this case, the overhead rate should approximate total actual 
manufacturing overhead divided by total actual direct labor dollars. Because auditors 
test total manufacturing overhead as part of the tests of the acquisition and payment 
cycle and test direct labor as part of the payroll and personnel cycle, determining 
the reasonableness of the rate is not difficult. However, if for example, manufac- 
turing overhead is applied on the basis of machine hours, the auditor must verify 
the reasonableness of the machine hours by separate tests of the client’s machine records. 

Because internal controls over cost accounting records vary significantly among 
companies, specific tests of controls are not discussed here. Auditors should design 
appropriate tests based on their understanding of the cost accounting records and the 
extent to which they will be relied on to reduce substantive tests. 


ANALYTICAL PROCEDURES 


Analytical procedures are important in auditing BOR’ Bn and wareh ousing, as they OBJECTIVE 21-4 
are in all other cycles. Table 21-1 (pAPaGesekhD VO BdKedures 
and possible misstatements that may be died ea eee occur. We’ve 





Apply analytical procedures to 
. . : : the accounts in the inventory 
discussed several of those analytical procedures, such as gross margin percentage, in and warehousing cycle. 





relation to other cycles. 

In addition to performing analytical procedures that examine the relationship of 
inventory account balances with other financial statement accounts (as shown in 
Figure 21-1 on page 682), auditors often use nonfinancial information to assess the 
reasonableness of inventory-related balances. For example, auditors may need knowl- 
edge about the size and weight of inventory products, their methods of storage (stacks, 
tanks, etc.), and the capacity of storage facilities (available square footage) to determine 
whether recorded inventory is consistent with available inventory storage. After 
performing the appropriate tests of the cost accounting records and analytical procedures, 
auditors have a basis for designing and performing tests of details of the ending 
inventory balance. 


PHYSICAL OBSERVATION OF INVENTORY 


Because inventory varies significantly for different companies, obtaining an under- OBJECTIVE 21-5 
standing of the client’s industry and business is more important for both physical 
inventory observation and inventory pricing and compilation than for most audit areas. Ohecratlenisudt ceior 
Examples of key considerations that auditors should consider include the inventory inventory. 
valuation method selected by management, the potential for inventory obsolescence, 
and the risk that consignment inventory might be intermingled with owned inventory. 
Auditors often first familiarize themselves with the client’s inventory by conduc- 
ting a tour of the client’s inventory facilities, including receiving, storage, production, 


Design and perform physical 
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lagen Analytical Procedures for the Inventory and Warehousing Cycle 





Analytical Procedure 


Compare gross margin percentage with that 
of previous years. 


Possible Misstatement 


Overstatement or understatement of inventory and 
cost of goods sold. 





Compare inventory turnover (cost of goods 
sold divided by average inventory) with 
that of previous years. 


Obsolete inventory, which affects inventory and cost 
of goods sold. 
Overstatement or understatement of inventory. 





Compare unit costs of inventory with those 
of previous years. 


Overstatement or understatement of unit costs, 
which affect inventory and cost of goods sold. 





Compare extended inventory value with that 
of previous years. 


Misstatements in compilation, unit costs, or 
extensions, which affect inventory and cost of 
goods sold. 





Compare current year manufacturing costs 
with those of previous years (variable 
costs should be adjusted for changes in 


Misstatements of unit costs of inventory, especially 
direct labor and manufacturing overhead, which 
affect inventory and cost of goods sold. 


volume). 











planning, and record-keeping areas. The tour should be led by a supervisor who can 
answer questions about production, especially about any changes in internal controls 
and other processes since last year. 

While gaining an understanding of the effect of the client’s business and industry 
on inventory, auditors assess client business risk to determine if those risks increase the 
likelihood of material misstatements in inventory. Examples of common sources of 
buindpa gov RDEnknhanecenrycles, potential obsolescence, use of 
just-in-time inventory, reliance on a few key suppliers, and use of sophisticated inven- 
tory management technology. 

After assessing client business risk, the auditor decides tolerable misstatement and 
assesses inherent risk for inventory, which is typically highly material for manufacturing, 
wholesale, and retail companies. Auditors often assess a high inherent risk for companies 
with significant inventory, depending on the circumstances. Auditors often have a 
greater concern for misstatements when inventory is stored in multiple locations, the 
costing method is complex, and the potential for inventory obsolescence is great. 

When assessing control risk, the auditor is primarily concerned with internal 
controls over perpetual records, physical controls, inventory counts, and inventory 
compilation and pricing. The nature and extent of these controls varies widely from 
company to company. 


Auditors have been required to perform physical observation tests of inventory since a 
major fraud involving the recording of nonexisting inventory was uncovered in 1938 at 
the McKesson & Robbins Company. The fraud was not discovered because the auditors 
did not physically observe the inventory, which at the time was not required. 

Auditing standards require auditors to satisfy themselves about the effectiveness of 
the client’s methods of counting inventory and the reliance they can place on the 
client’s representations about the quantities and physical condition of the inventories. 
To meet the requirement, auditors must: 

» Be present at the time the client counts their inventory for determining year-end 

balances 

* Observe the client’s counting procedures 

* Make inquiries of client personnel about their counting procedures 

» Make their own independent tests of the physical count 
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An essential point in the auditing standards is the distinction between who observes 
the physical inventory count and who is responsible for taking the count. The client is 
responsible for setting up the procedures for taking an accurate physical inventory and 
actually making and recording the counts. The auditor is responsible for evaluating 
and observing the client’s procedures, including doing test counts of the inventory and 
drawing conclusions about the adequacy of the physical inventory. 

An auditor’s physical examination of inventory is not required if inventory is 
housed in a public warehouse or overseen by outside custodians. In those situations, 
auditors verify inventory by confirmation with the custodian. However, if inventory 
stored with outside custodians represents a significant portion of current assets or 
total assets, the auditor should apply additional procedures, such as investigating the 
custodian’s inventory procedures, obtaining an independent accountant’s report on 
the custodian’s control procedures over the custody of goods, or observing the physical 
count of the goods held by the custodian, if practical. 


Regardless of the inventory record-keeping method, the client must make a periodic 
physical count of inventory, but not necessarily every year. The physical count may 
be performed at or near the balance sheet date, at an interim date, or on a cycle basis 
throughout the year. The latter two approaches are appropriate only if there are 
adequate controls over the of the perpetual inventory master files. 

Adequate controls over the client’s physical count of inventory include proper client 
instructions for the physical count, supervision by responsible company personnel, 
independent internal verification of the counts by other client personnel, independent 
reconciliations of the physical counts with perpetual inventory master files, and 
adequate client control over count sheets or tags used to record inventory counts. 

Auditors need to understand the client’s physical inventory count controls before 
the count of inventory begins. While this understanding is necessary to evaluate the 
effectiveness of the client’s procedurgs, it also o. “HORS sane seageuctive 
suggestions beforehand. Obviously, ARGO. in Eittols are 
inadequate, the auditor must spend more time rai sure that ibe eG count is 
accurate. 


The auditor’s decisions in the physical observation of inventory are similar to those made 
for other audit areas. They include selecting audit procedures, deciding the timing of the 
procedures, determining sample size, and selecting items for testing. The last three decisions 
are discussed next, followed by a discussion of the appropriate audit procedures. 


Timing The auditor decides whether the physical count can be taken before year-end 
primarily on the basis of the accuracy of the perpetual inventory master files. When a 
client does an interim physical count, which the auditor will agree to only when 
internal controls are effective, the auditor observes the inventory count at that time, 
and also tests transactions recorded in the perpetual inventory records from the date of 
the count to year-end. When the perpetual records are accurate and related controls 
operate effectively, it may be unnecessary for the client to count all the inventory at 
year-end. Instead, the auditor can compare the perpetuals with the actual inventory on 
a sample basis at convenient times throughout the year, as long as controls over 
additions and reductions to the perpetual records are tested and found to operate 
effectively. When there are no perpetuals and the inventory is material, the client must 
take a complete physical inventory near the end of the accounting period. 


Sample Size The number of inventory items auditors should count is difficult to 
specify because auditors concentrate on observing the client’s procedures rather than 
on selecting items for testing. For convenience, sample size in physical observation may 
be considered in terms of the total number of hours spent rather than the number of 
inventory items counted. The key determinants of the amount of time needed to test 
inventory are the adequacy of internal controls over the physical counts, accuracy of 


Controls 
Over Physical Count 


Audit Decisions 
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the perpetual inventory master files, total dollar amount and type of inventory, number 
of different significant inventory locations, nature and extent of misstatements dis- 
covered in previous years, and other inherent risks. 

In some situations, inventory is so material that it requires dozens of auditors to 
observe the physical count. In other situations, one auditor can complete the observation 
in a short time. Audit planning for inventory count testing and coordination with client 
personnel is critical. Poor planning may lead to audit difficulties. For example, it is 
impossible to observe client personnel counting inventory after they have completed 
their counts and it is difficult to expand sample sizes or reperform tests after the physical 
inventory has been taken. 


Selection of Items When auditors observe the client counting inventory, they should 
be careful to: 
* Observe the counting of the most significant items and a representative sample 
of typical inventory items 
* Inquire about items that are likely to be obsolete or damaged 
* Discuss with management the reasons for excluding any material items 


The same balance-related audit objectives discussed in previous sections for tests of 
details of balances provide a frame of reference for discussing the physical observation 
tests. However, before discussing those objectives, some overall comments about the 
client’s inventory process are important to consider. 

The most important part of the observation of inventory is determining whether 
the physical count is being taken in accordance with the client’s instructions. To do this 
effectively, it is essential that the auditor be present while the physical count is taking place. 

When the client’s employees are not following the inventory instructions, the 
auditor must either contact the supervisor to correct the problem or modify the physical 
observation procedures. For example, if the procedures require one team to count the 


inven ecpp rim Brehanicerrtest of accuracy, the auditor should 


inform management if both teams are observed counting together. 


In 2004, the Securities and Exchange Commission 
(SEC) charged Measurement Specialties, Inc. 
(MSI) and its chief financial officer, Kirk Dischino, 
with materially overstating its earnings by 
capitalizing overhead expenses into inventory. The 
impact of the fraudulent manipulations of 
inventory resulted in a 435% overstatement of 
the company’s pre-tax income for the fiscal year 
ended March 31, 2001, and as the fraud continued, 
the company was able to avoid reporting a net loss 
in the first quarter of the following year. During 
the time of the fraud, Dischino sold 40,000 
shares of company stock. 

MSI, based in Fairfield, New Jersey, designed, 
manufactured, and marketed a variety of sensors 
for electronic, automotive, military, and other 
uses. Between June 30, 2000 and February 2002, 
Dischino inflated the carrying value of MSI's 
inventory by recording “production credits” that 
he manually calculated to reflect variances 
between standard costs and actual costs of the 
inventory. These variances arise if a company uses 
standard costs to value inventory. Accounting 
standards require the company to determine 
whether any differences exist between standard 
costs and actual costs at the end of each period. 
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The production credits were based on incon- 
sistent methodologies across multiple company 
locations and across different time periods. 
Additionally, the “actual costs” Dischino used to 
calculate the production credits were incorrect. 
For example, he used estimated costs when actual 
costs were available, included costs that were not 
properly allocable to inventory, and included costs 
that could not be reconciled to the company's 
accounting records. Finally, he failed to adjust 
inventories to the lower of cost or market. As a 
result, inventory as stated on the March 31, 2001 
year-end balance sheet was valued materially 
above actual costs, and at times above its net 
realizable value, resulting in an inventory overstate- 
ment of $7.5 million compared to pre-tax income 
of $2.4 million for the year ended March 31, 2001. 

Mr. Dischino was required to pay a disgorge- 
ment of profits from the stock sales of $215,734 
plus a civil penalty of the same amount. He was 
also suspended from serving as an accountant 
before the SEC. 


Source: Securities and Exchange Commission, 
Accounting and Auditing Enforcement Release No. 
2046, June 28, 2004 (www.sec.gov). 





Table 21-2 (p. 694) lists common tests of details of balances audit procedures for 
physical inventory observation. Detail tie-in is the only balance-related audit objectives 
not included. That balance-related objective is discussed under compilation of 
inventory. In the discussion that follows, we assume that the client counts inventory 
on the balance sheet date and records the inventory counts on prenumbered tags. 
When they record inventory counts in a different way, audit procedures will vary. In 
addition to the detailed procedures in Table 21-2, the auditor should also inspect all 
physical areas where inventory is warehoused to make sure that all inventory has 
been counted and properly tagged. Boxes or other containers holding inventory 
should also be opened during test counts to be certain inventory is physically present. 
As part of their analytical procedures performed after the client has completed the 
inventory counts, the auditor may compare high-dollar-value inventory to counts in 
the previous year and inventory master files as a test of reasonableness. 


AUDIT OF PRICING AND COMPILATION 


Auditors must verify that the physical counts or perpetual record quantities are 
correctly priced and compiled. Inventory price tests include all the tests of the client’s 
unit prices to determine whether they are correct. Inventory compilation tests include 
testing the client’s summarization of the inventory counts, recalculating price times 
quantity, footing the inventory summary, and tracing the totals to the general ledger. 


Adequate internal controls surrounding the tracking of unit costs that are integrated 
with production and other accounting records provides assurance that clients use 
reasonable costs for valuing ending inventory. Standard cost records that indicate 
variances in material, labor, and overhead — are ane to evaluate the reason- 
ableness of production records if APAgS' hes piped Aka Heer p the 
standards updated for changes in pro processes and Bn hatice. should 
also have someone independent of the department responsible for determining the 
costs review them for reasonableness. 

To prevent including or overstating the value of obsolete inventory, clients should 
have a formal review and reporting of obsolete, slow-moving, damaged, and overstated 
inventory items. The review should be done by a knowledgeable employee who reviews 
perpetual inventory master files for inventory turnover and holds discussions with 
engineering or production personnel. 

Clients need inventory compilation internal controls to ensure that the physical 
counts are correctly summarized, priced at the same amount as the unit records, 
correctly extended and totaled, and included in the perpetual inventory master file and 
related general ledger inventory accounts at the proper amount. The most important 
internal control for accurate unit costs, extensions, and footings is internal verification 
by a competent, independent person, who relies on adequate documents and records 
that were used for taking the physical count. If the physical inventory counts are 
recorded by the client on prenumbered tags and carefully reviewed before the personnel 
who counted the inventory are released from the physical examination of inventory, 
there should be little risk of misstatement in summarizing inventory count tags. 


Table 21-3 (p. 695) lists the audit objectives and related tests for inventory pricing and 
compilation, except for the cutoff objective. As we’ve already discussed, physical 
observation is a major source of cutoff information for sales and purchases. Tests of the 
accounting records for cutoff are done as a part of sales (sales and collection cycle) and 
acquisitions (acquisition and payment cycle). 

Auditors can apply the objectives using information obtained from the client as a 
frame of reference, including each inventory item’s description, quantity, unit price, 
and extended value. We assume the information reflected in the inventory perpetual 
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Balance-Related Audit Objectives and Tests of Details of Balances for Physical Inventory 





























Observation 

Balance-Related Audit Objective Common Inventory Observation Procedures Comments 

Inventory as recorded on tags Select a random sample of tag numbers and The purpose is to uncover the inclusion 
exists (existence). identify the tag with that number attached to of nonexistent items as inventory. 

the actual inventory. 
Observe whether movement of inventory takes 
place during the count. 

Existing inventory is counted Examine inventory to make sure it is tagged. Special concern should be directed to 
and tagged, and tags are Observe whether movement of inventory takes omission of large sections of inventory. 
accounted for to make place during the count. 
sure none are missing Inquire as to inventory in other locations. 

(completeness). Account for all used and unused tags to make This test should be done at the completion 
sure none are lost or intentionally omitted. of the physical count. 

Record the tag numbers for those used and This test should be done at the completion 
unused for subsequent follow-up. of the physical count. 

Inventory is counted accurately Recount client's counts to make sure the Recording client counts in the audit files on 
(accuracy). recorded counts are accurate on the tags inventory count sheets is done for two 

(also check descriptions and unit of count, reasons: to obtain documentation that an 

such as dozen or gross). adequate physical examination was made, 
Compare physical counts with perpetual and to test for the possibility that the 

inventory master file. client might change the recorded counts 
Record client's counts for subsequent testing. after the auditor leaves the premises. 

Inventory is classified correctly Examine inventory descriptions on the tags and These tests will be done as a part of the 

on the tags (classification). compare with the actual inventory for raw first procedure in the accuracy objective. 
material, work-in-process, and finished goods. 
Evaluate whether the percent of completion 
recorded on the tags for work-in-process is 
reasonable. 

Information is obtained to make Record in the audit files for subsequent follow-up the Obtaining proper cutoff information for 
sure sales and inventory last shipping document number used at year-end. sales and acquisitions is an essential 
purchases are recorded in Make sure the inventory for the above item was part of inventory observation. The 
the proper period (cutoff). excluded from the physical count. appropriate tests were discussed for 

Review shipping area for inventory set aside for sales in Chapter 16 and for acquisitions 
shipment but not counted. in Chapter 18. 
Record in the audit files for subsequent follow-up 
the last receiving report number used at year-end. 
Make sure the inventory for the above item was 
included in the physical count. 
Review receiving area for inventory that should be 
included in the physical count. 

Obsolete and unusable inventory Test for obsolete inventory by inquiry of factory 
items are excluded or noted employees and management and alertness for 
(realizable value). items that are damaged, rust- or dust-covered, 

or located in inappropriate places. 
The client has rights to inventory Inquire about consignment or customer inventory 
recorded on tags (rights). included on client's premises. 
Be alert for inventory that is set aside or specially 
marked as indications of nonownership. 
x y 





listing is recorded in inventory item description order, with raw material, work-in- 
process, and finished goods listed separately. The listing totals should equal the general 
ledger balance. 


Valuation of Inventory —_In performing inventory valuation tests (often called price tests), the auditor has three 
concerns. First, the method must be in accordance with accounting standards. Second, 
the application of the method must be consistent from year to year. Third, inventory 
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TABLE 21-3 Balance-Related Audit Objectives and Tests of Details of Balances for Inventory Pricing ) 
and Compilation 





Balance-Related 
Audit Objective 


Common Inventory Pricing 


and Compilation Procedures Comments 





Inventory in the inventory listing 
schedule agrees with the physical 
inventory counts, the extensions 
are correct, and the total is 
correctly added and agrees with 
the general ledger (detail tie-in). 


Unless controls are deficient, extending 
and footing tests should be limited. 


Perform compilation tests (see existence, completeness, 
and accuracy objectives). 

Foot the inventory listing schedules for raw materials, 
work-in-process, and finished goods. 

Trace the totals to the general ledger. 

Extend the quantity times the price on selected items. 





Inventory items in the inventory 
listing schedule exist (existence). 


Existing inventory items are 
included in the inventory listing 
schedule (completeness). 


The next five objectives are affected by 
the results of the physical inventory 
observation. The tag numbers and 
counts verified as a part of physical 
inventory observation are traced to 
the inventory listing schedule as a 
part of these tests. 


Trace inventory listed in the schedule to inventory 
tags and auditor's recorded counts for existence 
and description. 

Account for unused tag numbers shown in the 
auditor's documentation to make sure no tags have 
been added. 


Trace from inventory tags to the inventory listing 
schedules and make sure inventory on tags is included. 

Account for tag numbers to make sure none have been 
deleted. 





Inventory items in the inventory 
listing schedule are accurate 
(accuracy). 


Trace inventory listed in the schedule to inventory tags and 
auditor's recorded counts for quantity and description. 

Perform price tests of inventory. For a discussion of price 
tests, see text material on pages 693-697. 





Inventory items in the inventory 
listing schedule are correctly 
classified (classification). 


Inventory items in the inventory 
listing are stated at realizable 
value (realizable value). 


Verify the classification into raw materials, work-in-process, 
and finished goods by comparing the descriptions on 
inventory tags and auditor's recorded test counts with 
the inventory listing schedule. 


Perform tests of lower of cost or market, selling price, 
and obsolescence. 





The client has rights to inventory 
items in the inventory listing 
schedule (rights). 





Trace inventory tags identified as nonowned during the 
physical observation to the inventory listing schedule 
to make sure these have not been included. 

Review contracts with suppliers and customers and 
inquire of management for the possibility of the 
inclusion of consigned or other nonowned inventory, 
or the exclusion of owned inventory. 








cost versus market value (replacement cost or net realizable value) must be considered. 
Because the method of verifying the pricing of inventory depends on whether 
inventory items are acquired or manufactured, these two categories are discussed 


separately. 


Pricing Purchased Inventory The primary types of inventory included in this 
category are raw materials, purchased parts, and supplies. As a first step in verifying the 
valuation of purchased inventory, the auditor must determine whether the client uses 
LIFO, FIFO, weighted average, or some other valuation method. Auditors must also 
determine which costs should be included in the valuation of an item of inventory. For 
example, the auditor must find out whether freight, storage, discounts, and other costs 
are included and the auditor must compare the findings with the preceding year to 
make sure that the costs are determined consistently. 
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SWITCH TO IFRS 
REQUIRES CHANGE 
FROM LIFO 





As the profession continues to explore the move 
from U.S. GAAP to International Financial 
Reporting Standards (IFRS), one of the more 
notable issues is the accounting treatment for 
inventories. IFRS does not allow the use of the 
Last-In, First-Out (LIFO) inventory valuation 
method, which is widely used among U.S. 
companies but scarcely used elsewhere. 
Companies using LIFO would have to switch 

to FIFO or the average cost method. 

Companies that use LIFO sometimes prefer 
it over other methods of inventory accounting 
because of favorable tax benefits. As U.S. 
companies evaluate the impact of a potential shift 
to IFRS, they are realizing potentially significant 


Research performed by Georgia Tech’s 
Financial Analysis Lab suggests that current 
LIFO users could be significantly affected by the 
switch from LIFO. Examination of a sample 30 
companies that use LIFO found that the 
companies’ pretax income would have been 
nearly 12 percent higher if they had followed 
FIFO. One possible solution is that the U.S. 
Treasury Department might explore the 
elimination of the current LIFO conformity rule. 
Companies currently using LIFO are closely 
monitoring the implications of the adoption of 
IFRS and CPAs are being called upon to help 
manage the possible change in accounting 
methods. 


tax consequences from such a move. This is 
largely due to the fact that the IRS requires 
taxpayers who apply LIFO for tax purposes to also 
apply it for income measurement in financial 
reporting. Because IFRS does not permit LIFO for 
book accounting, U.S. companies will not be able 
to use it for tax purposes. 


Sources: Adapted from: 1. Robert Bloom and 
William J. Cenker, “The Death of LIFO? Changing 
Inventory Method Requires Managing Accounting 
Tax-Differences,” Journal of Accountancy, January 
2009; 2. Sarah Johnson, “One Beneficiary of IFRS 
Switch: The Taxman,” CFO.com, December 22, 2008. 


In selecting specific inventory items for pricing, auditors should focus on larger 
dollar amounts and on products that are known to have wide fluctuations in price. They 
should also test a representative sample of all types of inventory and departments. 
Stratified variables or monetary unit sampling is commonly used for these tests. 

The auditor should list the inventory items to be verified for pricing and request the 
client Ape ap Py BatcMeyvia netessy the auditor must examine sufficient 
invoices’to actount for the entire quantity of inventory for the item being tested, 
especially for the FIFO valuation method. Assume that the client values an inventory 
item at $12.00 per unit for 1,000 units, using FIFO. When the auditor examines the 
most recent invoices for acquisitions of that inventory item, she finds that the most 
recent acquisition of the inventory item in the year being audited was for 700 units at 
$12.00 per unit, and the immediately preceding acquisition was for 600 units at $11.30 
per unit. Using correct FIFO valuation techniques, the inventory items should be 
included at $11,790 (700 units at $12 and 300 at $11.30). The client’s calculations 
overstates inventory by $210.00 ($12,000 — $11,790). Assuming the client makes this 
same error on many inventory items, the misstatement amount can be material. 

When the client has perpetual inventory master files that include unit costs of 
acquisitions, it is usually much faster to test the pricing by tracing the unit costs to the 
perpetuals rather than to vendors’ invoices. Naturally, when perpetual inventory 
records are used to verify unit costs, auditors must test the unit costs recorded in the 
perpetual records to vendors’ invoices as a part of the tests of the acquisition and 
payment cycle transactions. 


Pricing Manufactured Inventory In pricing work-in-process and finished goods, 
the auditor must consider the cost of raw materials, direct labor, and manufacturing 
overhead. The need to verify each of these makes the audit of work-in-process and 
finished goods inventory more complex than the audit of purchased inventory. 
Nevertheless, several considerations that apply to the audit of purchased inventory still 
apply, such as selecting the items to be tested, testing for whether cost or market value 
is lower, and evaluating the possibility of obsolescence. 

In pricing raw materials in manufactured products, auditors must consider both 
the unit cost of the raw materials and the number of units required to manufacture a 
unit of output. The unit cost can be verified in the same manner as that used for other 
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purchased inventory, by examining vendors’ invoices or perpetual inventory master 
files. Auditors must examine engineering specifications, inspect the finished product, 
or find a similar method to determine the number of units it takes to manufacture a 
product. 

Similarly, while testing direct labor, auditors must verify the hourly costs of direct 
labor and the number of hours it takes to manufacture a unit of output. Hourly labor 
costs can be verified by examining labor payroll or union contracts. Auditors can 
determine the number of hours needed to manufacture the product from engineering 
specifications or similar sources. 

The proper manufacturing overhead in work-in-process and finished goods 
depends on the approach the client uses to allocate manufacturing overhead. Auditors 
must evaluate the method being used for consistency and reasonableness and recom- 
pute the costs to determine whether the overhead is correct. For example, if the rate is 
based on direct labor dollars, the auditor can divide the total manufacturing overhead 
by the total direct labor dollars to determine the actual overhead rate. This rate can 
then be compared with the overhead rate used by the client to determine unit costs. 
Testing of pricing for work-in-process and finished goods is often done in conjunction 
with tests of standard costs. When auditors have tested standard costs with satisfactory 
results, they can limit testing of the unit costs of ending inventory to tracing the price 
used to value ending inventory to the standard cost records. 

When the client has standard costs records, an efficient and useful method of 
determining valuation is to review and analyze variances. Small variances in material, 
labor, and manufacturing overhead are evidence of reliable cost records. 


Cost or Market In pricing inventory, auditors must consider whether replacement 
cost or net realizable value is lower than historical cost. For purchased finished goods 
and raw materials, auditors can test for replacement cost by examining vendor invoices 
of the subsequent period or recent invoices if no purchases of an inventory item were 
made after year-end. All manufaA pages PDBe Enhance nating 
realizable value for work-in-process and finished goods for manufactured inventory. 
Auditors must consider the sales value of inventory items and the possible effect of 
rapid fluctuation of prices to determine net realizable value. 


INTEGRATION OF THE TESTS 


Figure 21-4 (p. 698) and the discussions that follow summarize and illustrate the audit OBJECTIVE 21-7 
of the inventory and warehousing cycle as a series of integrated tests. 





Integrate the various parts 
Tests of the Acquisition and Payment Cycle When auditors verify inventory _ | of the audit of the inventory 


acquisitions as part of the tests of the acquisition and payment cycle, they are also _| and warehousing cycle. 





obtaining evidence about the accuracy of raw materials acquired and all manufacturing 
overhead costs incurred except labor. These acquisition costs either flow directly into 
cost of goods sold or become the largest part of the ending inventory of raw material, 
work-in-process, and finished goods. In audits where clients have perpetual inventory 
master files, auditors commonly test these as a part of tests of controls and substantive 
tests of transactions procedures performed in the acquisition and payment cycle. 
Similarly, if manufacturing costs are assigned to individual jobs or processes, they are 
usually tested as a part of the same cycle. 


Tests of the Payroll and Personnel Cycle When auditors verify labor costs, the 
same conditions apply as for acquisitions. In most cases, the cost accounting records 
for direct and indirect labor costs can be tested as part of the audit of the payroll and 
personnel cycle. 

Tests of the Sales and Collection Cycle The relationship between the sales and 
collection cycle and the inventory and warehousing cycle is not as interwoven as the two 
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cycles we just discussed. Nonetheless, most of the audit testing in the storage of finished 
goods, as well as the shipment and recording of sales, takes place when the sales and 
collection cycle is tested. When the client uses standard cost records, auditors may be able 
to test the standard cost of goods sold at the same time that sales tests are performed. 


Tests of Cost Accounting Tests of cost accounting records are meant to verify the 
controls affecting inventory that auditors did not verify as part of testing in the 
preceding three cycles. Auditors test the physical controls, transfers of raw material 
costs to work-in-process, transfers of costs of completed goods to finished goods, 
perpetual inventory master files, and unit cost records. 


Physical Inventory, Pricing, and Compilation Physical inventory, pricing, and 
compilation are each equally important in the audit of inventory because a misstatement 
in any one activity results in misstated inventory and cost of goods sold. In most audits, 
cost of goods sold is a residual of beginning inventory plus acquisitions of raw materials, 
direct labor, and other manufacturing costs minus ending inventory. Because cost of 
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goods sold is a residual and often one of the largest accounts on the income statement, 
the importance of auditing ending inventory becomes obvious. 

In testing physical inventory, auditors may rely heavily on the perpetual inventory 
master files if they have been tested as a part of one or more of the cycles we've dis- 
cussed and are considered reliable. When that is the case, auditors can observe and test 
the physical count at a time other than year-end and rely on the perpetuals to keep 
adequate records of the quantities. 

When testing the unit costs, auditors may also rely, to some degree, on the tests of 
the cost records made during the substantive tests of transactions. Standard cost records 
are also useful for comparison with the actual unit costs. When standard costs are used 
to represent historical cost, they must be tested for reliability. 

Finally, as auditors test controls and perform substantive tests related to inventory 
transactions and balances, they also integrate tests related to balance-related audit 
objectives with tests performed to satisfy the four presentation and disclosure objectives. 
Accounting standards require disclosure of inventory valuation methods and other 
relevant inventory information, such as LIFO reserve information, in the footnotes. 
The auditor should obtain an understanding of client controls related to inventory dis- 
closures and perform tests of those controls and other substantive tests to obtain 
sufficient appropriate evidence for each of the four presentation and disclosure objectives. 


SUMMARY 


In this chapter, we discussed the audit of the inventory and warehousing cycle. Because of 
the difficulties associated with establishing the existence and valuation of inventories, the 
cycle is often the most time-consuming and complex part of the audit. This cycle is also 
unique because many of the tests of the inputs to the cycle are tested as part of the audit of 
other cycles. Tests performed as part gf the inventory, i] cycle focus on cost 
accounting records, physical observa Aga: P t EK ‘Bntancex RGR of the 


ending inventory balance. 


ESSENTIAL TERMS 


Cost accounting controls—controls over 
physical inventory and the related costs 
from the point at which raw materials are 
requisitioned to the point at which the 
manufactured product is completed and 
transferred to storage 


Cost accounting records—the accounting 
records concerned with the manufacture 
and processing of the goods and storing 
finished goods 


Inventory and warehousing cycle—the 
transaction cycle that involves the physical 
flow of goods through the organization, as 
well as related costs 


Inventory compilation tests—audit pro- 
cedures used to verify whether physical 
counts of inventory are correctly sum- 
marized, inventory quantities and prices 
are correctly extended, and extended in- 
ventory is correctly footed 


Inventory price tests—audit procedures 
used to verify the costs used to value 
physical inventory 


Job cost system—system of cost account- 
ing in which costs are accumulated by 
individual jobs when material is used and 
labor costs are incurred 


Perpetual inventory master file—a con- 
tinuously updated computerized record 
of inventory items purchased, used, 
sold, and on hand for merchandise, raw 
materials, and finished goods 


Process cost system—system of cost 
accounting in which costs are accumu- 
lated for a process, with unit costs for each 
process assigned to the products passing 
through the process 


Standard cost records—trecords that 
indicate variances between projected 
material, labor, and overhead costs and 
the actual costs 
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REVIEW QUESTIONS 


21-1 (Objective 21-1) Give the reasons why inventory is often the most difficult and time- 
consuming part of many audits. 


21-2 (Objectives 21-1, 21-7) Explain the relationship between the acquisition and payment 
cycle and the inventory and warehousing cycle in the audit of a manufacturing company. 
List several audit procedures in the acquisition and payment cycle that support your 
explanation. 


21-3 (Objectives 21-1, 21-3) State what is meant by cost accounting records and explain 
their importance in the conduct of an audit. 


21-4 (Objectives 21-3) Many auditors assert that certain audit tests can be significantly 
reduced for clients with adequate perpetual records that include both unit and cost data. 
What are the most important tests of the perpetual records that the auditor must make 
before reducing assessed control risk? Assuming the perpetuals are determined to be 
accurate, which tests can be reduced? 


21-5 (Objective 21-5) Before the physical examination, the auditor obtains a copy of the 
client’s inventory instructions and reviews them with the controller. In obtaining an under- 
standing of inventory procedures for a small manufacturing company, these deficiencies 
are identified: Shipping operations will not be completely halted during the physical 
examination, and there will be no independent verification of the original inventory count 
by a second counting team. Evaluate the importance of each of these deficiencies and state 
its effect on the auditor’s observation of inventory. 


21-6 (Objective 21-5) At the completion of an inventory observation, the controller 
requested the auditor to give him a copy of all recorded test counts to facilitate the correction 
of all discrepancies between the client’s and the auditor’s counts. Should the auditor 
comply with the request? Why? 


21-7 ‘Apago > PPE Enhan ge are involved in testing for the owner- 
itven 


ship o 'y during the observation of the physical counts and as a part of subsequent 
valuation tests? 


21-8 (Objectives 21-4, 21-5, 21-6) In the verification of the amount of the inventory, one 
of the auditor’s concerns is that slow-moving and obsolete items be identified. List the 
auditing procedures that can be used to determine whether slow-moving or obsolete items 
have been included in inventory. 


21-9 (Objective 21-5) During the taking of physical inventory, the controller intentionally 
withheld several inventory tags from the employees responsible for the physical count. 
After the auditor left the client’s premises at the completion of the inventory observation, 
the controller recorded nonexistent inventory on the tags and thereby significantly over- 
stated earnings. How could the auditor have uncovered the misstatement, assuming that 
there are no perpetual records? 


21-10 (Objective 21-5) Explain why a proper cutoff of purchases and sales is heavily 
dependent on the physical inventory observation. What information should be obtained 
during the physical count to make sure that cutoff is accurate? 


21-11 (Objective 21-6) Define what is meant by compilation tests. List several examples of 
audit procedures to verify compilation. 


21-12 (Objective 21-4) List the major analytical procedures for testing the overall reason- 
ableness of inventory. For each test, explain the type of misstatement that could be identified. 


21-13 (Objective 21-6) Included in the December 31, 2011, inventory of the Wholeridge 
Supply Company are 2,600 deluxe ring binders in the amount of $5,902. An examination of 
the most recent acquisitions of binders showed the following costs: January 26, 2012, 2,300 
at $2.42 each; December 6, 2011, 1,900 at $2.28 each; November 26, 2011, 2,400 at $2.07 
each. What is the misstatement in valuation of the December 31, 2011, inventory for deluxe 
ring binders, assuming FIFO inventory valuation? What would your answer be if the 
January 26, 2012, acquisition was for 2,300 binders at $2.12 each? 
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21-14 (Objectives 21-6, 21-7) The Ruswell Manufacturing Company applied manufac- 
turing overhead to inventory at December 31, 2011, on the basis of $3.47 per direct labor 
hour. Explain how you will evaluate the reasonableness of total direct labor hours and 
manufacturing overhead in the ending inventory of finished goods. 


21-15 (Objective 21-7) Each employee for the Gedding Manufacturing Co., a firm using a 
job-cost inventory costing method, must reconcile his or her total hours worked with the 
hours worked on individual jobs using a job time sheet at the time weekly payroll time 
cards are prepared. The job time sheet is then stapled to the time card. Explain how you 
could test the direct labor dollars included in inventory as a part of the payroll and 
personnel tests. 


21-16 (Objective 21-5) Assuming that the auditor properly documents receiving report 
numbers as a part of the physical inventory observation procedures, explain how the 
proper cutoff of purchases, including tests for the possibility of raw materials in transit, 
should be verified later in the audit. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 





21-17 (Objective 21-1) The following questions concern internal controls in the inventory 
and warehousing cycle. Choose the best response. 


a. Which of the following controls will most likely justify a reduced assessed level of 

control risk for the occurrence assertion for purchases of inventory? 

(1) Receiving reports for inventory additions are accounted for and entry of received 
goods into the purchases system is verified by accounting clerks. 

(2) The purchases system automatically updates the perpetual inventory master file 
when transactions are entered into the purchases journal. 

(3) The perpetual inventory system will not allow an addition of inventory to be 
posted without entry of a vaj ago" bm nh ancer 

(4) At the close of each day, the system reconciles the perpetual inventory master file 
to the inventory general ledger account and generates an exception report when 
differences exist. 


b. For control purposes, the quantities of materials ordered may be omitted from the 
copy of the purchase order that is 
(1) returned to the requisitioner. 
(2) forwarded to the receiving department. 
(3) forwarded to the accounting department. 
(4) retained in the purchasing department's files. 


c. Which of the following procedures will best detect the theft of valuable items from an 
inventory that consists of hundreds of different items selling for $1 to $10 and a few 
items selling for hundreds of dollars? 

(1) Maintain a perpetual inventory master file of only the more valuable items with 
frequent periodic verification of the validity of the perpetuals. 

(2) Have an independent CPA firm prepare an internal control report on the effec- 
tiveness of the administrative and accounting controls over inventory. 

(3) Have separate warehouse space for the more valuable items with sequentially 
numbered tags. 

(4) Require an authorized officer’s signature on all requisitions for the more valuable 
items. 


21-18 (Objectives 21-1, 21-3) The following questions concern testing the client’s internal 
controls for inventory and warehousing. Choose the best response. 


a. When an auditor tests a client’s cost accounting records, the auditor’s tests are pri- 
marily designed to determine that 
(1) costs have been correctly assigned to finished goods, work-in-process, and cost of 
goods sold. 
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(2) quantities on hand have been computed based on acceptable cost accounting 
techniques that reasonably approximate actual quantities on hand. 

(3) physical inventories are in substantial agreement with book inventories. 

(4) the internal controls are in accordance with accounting standards and are 
functioning as planned. 


b. The accuracy of perpetual inventory master files may be established, in part, by com- 
paring perpetual inventory records with 
(1) purchase requisitions. (3) purchase orders. 
(2) receiving reports. (4) vendor payments. 


c. Which of the following sets of duties related to inventory and warehousing causes the 
greatest concern about inadequate segregation of duties? 

(1) Individuals in charge of approving disbursements related to inventory purchases 
have “read-only” ability to view the list of vendors in the pre-approved vendor 
master file. 

(2) Purchasing agents who arrange for shipment of raw materials from vendors are 
responsible for verifying actual receipt of the inventory items at the receiving dock. 

(3) The receiving department has access to copies of the purchase orders that exclude 
information about quantities ordered. 

(4) Accounts payable personnel have access to receiving reports and purchases orders 
in addition to vendor invoices for inventory purchases. 


21-19 (Objectives 21-1, 21-4, 21-5, 21-6) The following questions deal with tests of details 
of balances and analytical procedures for inventory. Choose the best response. 


a. Which of the following procedures is the auditor least likely to perform on the actual 

date the physical inventory count is observed? 

(1) Examine inventory to make sure that it is tagged by client count teams. 

(2) Watch for inventory items that are rust- or dust-covered or otherwise damaged. 

(3) Observe client_count teams to determine if they are conducting the physical 
Pago coRD Fic MAAN GE Bolicies and procedures. 

(4) Examine documentation supporting the acquisition of highly material inventory 
items on hand at the count date. 


b. An inventory turnover analysis is useful to the auditor because it may detect 
(1) inadequacies in inventory pricing. 
(2) methods of avoiding cyclical holding costs. 
(3) the existence of obsolete merchandise. 
(4) the optimum automatic reorder points. 


c. ACPA auditing inventory may appropriately apply attributes sampling to estimate the 
(1) average price of inventory items. 
(2) percentage of slow-moving inventory items. 
(3) dollar value of inventory. 
(4) physical quantity of inventory items. 


DISCUSSION QUESTIONS AND PROBLEMS 


21-20 (Objectives 21-1, 21-3, 21-5, 21-6, 21-7) Items 1 through 8 are selected questions 
typically found in questionnaires used by auditors to obtain an understanding of internal 
control in the inventory and warehousing cycle. In using the questionnaire for a client, a 
“yes” response to a question indicates a possible internal control, whereas a “no” indicates a 
potential deficiency. 


1. Is a detailed perpetual inventory master file maintained for raw materials inventory? 

2. Are physical inventory counts made by someone other than storekeepers and those 
responsible for maintaining the perpetual inventory master file? 

. Is the clerical accuracy of the final inventory compilation checked by a person 
independent of those responsible for preparing it? 


1S) 
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4. Does the receiving department prepare prenumbered receiving reports and account 


for the numbers periodically for all inventory received, showing the description and 
quantity of materials? 

. Is all inventory stored under the control of an inventory custodian in areas where 
access is limited? 


6. Are all shipments to customers authorized by prenumbered shipping documents? 
7. Are standard cost records used for raw materials, direct labor, and manufacturing 


overhead? 
. Is there a stated policy with specific criteria for writing off obsolete or slow-moving 
goods? 


. For each of the preceding questions, state the purpose of the internal control. 
. For each internal control, list a test of control to test its effectiveness. 


c. For each of the preceding questions, identify the nature of the potential financial 


21-2 


misstatement(s) if the control is not in effect. 


. For each of the potential misstatements in part c, list a substantive audit procedure to 


determine whether a material misstatement exists. 


1 (Objective 21-1, 21-3, 21-5, 21-6, 21-7) The Frist Corporation has the following 


internal controls related to inventory: 


1. 
2 


9. 


10. 


The inventory purchasing system only allows purchases from pre-approved vendors. 
The perpetual inventory system tracks the average number of days each inventory 
product number has been in the warehouse. 

. Microchips are embedded in each product and when inventory items are removed 
from the warehouse to shipping, radio-frequencies signal a deduction of inventory 
to the perpetual inventory system. 

. Only authorized inventory warehousing personnel are allowed in inventory storage 
areas. 

. All inventory products are stoyed in warehousi. eag_that, are scocgated from 
other storage areas used to ho Raga: =} Bn ancer 

. On a weekly basis, inventory accounting personnel take samples of inventory 
products selected from the perpetual inventory system and verify that the inventory 
is on-hand in the warehouse and that the quantities in the listing are correct. 

. Ona weekly basis, inventory accounting personnel select inventory items on hand in 
the warehouse and verify that the item is included in the perpetual inventory listing 
at the correct amount. 

. The perpetual inventory system subtotals the quantity of inventory in the system and 

interfaces with the general ledger system on a daily basis to ensure quantities agree. 

The perpetual inventory system will not accept inventory additions without the 

recording on a valid receiving report. 

All inventory held on consignment at Frist Corporation is stored in a separate area of 

the warehouse. 


For each of the internal controls: 


a. 
b. 


Cc. 


Identify the related transaction-related audit objective(s) affected by the control. 
Describe risks the control is designed to mitigate. 
Design a test of control to determine if the control is operating effectively. 


21-22 (Objective 21-3) The cost accounting records are often an essential area to audit in a 
manufacturing or construction company. 


a. 


b. 


Why should the auditor review the cost accounting records and test their accuracy? 


For the audit of standard cost accounting records in which 35 parts are manufactured, 
explain how you would determine whether each of the following were reasonable for 


part no. 21: 

(1) Standard direct labor hours (4) Standard units of raw materials 

(2) Standard direct labor rate (5) Standard cost of a unit of raw materials 
(3) Standard overhead rate (6) Total standard cost 
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Required 


21-23 (Objectives 21-1, 21-3, 21-5, 21-6) Following are audit procedures commonly 
performed in the inventory and warehousing cycle for a manufacturing company: 
1. Read the client’s physical inventory instructions and observe whether they are being 
followed by those responsible for counting the inventory. 
2. Account for a sequence of inventory tags and trace each tag to the physical inventory 
to make sure it actually exists. 
3. Compare the client’s count of physical inventory at an interim date with the perpetual 
inventory master file. 
4. Trace the auditor’s test counts recorded in the audit files to the final inventory 
compilation and compare the tag number, description, and quantity. 
5. Compare the unit price on the final inventory summary with vendors’ invoices. 
6. Account for a sequence of raw material requisitions and examine each requisition 
for an authorized approval. 
7. Trace the recorded additions on the finished goods perpetual inventory master file to 
the records for completed production. 


a. Identify whether each of the procedures is primarily a test of control or a substantive test. 
b. State the purpose(s) of each of the procedures. 


21-24 (Objectives 21-1, 21-5, 21-6) The following misstatements are included in the 
inventory and related records of Westbox Manufacturing Company: 

1. An inventory item was priced at $12 each instead of at the correct cost of $12 per 
dozen. 

2. In taking the physical inventory, the last shipments for the day were excluded from 
inventory and were not included as a sale until the subsequent year. 

3. The clerk in charge of the perpetual inventory master file altered the quantity on an 
inventory tag to cover up the shortage of inventory caused by its theft during the year. 

4. After the auditor left the premises, several inventory tags were lost and were not 
included in the final inventory summary. 

5, Apago« PDihiknhancesn, the improper unit price was included 
in the perpetual inventory master file. Therefore, the inventory valuation was mis- 
stated because the physical inventory was priced by referring to the perpetual records. 

6. During the physical count, several obsolete inventory items were included. 

7. Because of a significant increase in volume during the current year and excellent 
control over manufacturing overhead costs, the manufacturing overhead rate applied 
to inventory was far greater than actual cost. 


a. For each misstatement, state an internal control that should have prevented it from 
occurring. 


b. For each misstatement, state a substantive audit procedure that can be used to uncover it. 


21-25 (Objective 21-3, 21-5) You are responsible for the audit of inventory for Honey Best 
Grocery Wholesales, Inc., a closely held grocery wholesaler that sells to independent 
grocery stores. Inventory is by far the largest account on their balance sheet. Honey Best 
operates in ten southeastern states with a central distribution center in Atlanta and local 
distribution centers in each of the ten states in which it operates. Management has 
implemented a sophisticated perpetual inventory system that includes only quantities to 
assist in managing quantity levels in Atlanta and the local distribution centers. All 
accounting is maintained in Atlanta, including purchases which originate from the Atlanta 
office using online inventory information available for all centers. All inventory deliveries 
are made to the Atlanta center and then sent to local centers, again using the online 
information. Product and quantity information for sales are prepared online by each 
distribution center for updating the perpetual records, with a hard copy sent to Atlanta. 
Each center takes a quarterly physical inventory for comparison to and adjustment of the 
perpetual records. The counts are sent to Atlanta where all adjustments are made. Regional 
centers’ access to the perpetual records are limited to online sales transaction entry. Internal 
auditors test the perpetual records continuously, sample physical inventory counts and test 
inventory adjustments. Their tests and results are filed in Atlanta. 
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a. List six or more internal controls and tests of controls that can be used to test the 
effectiveness of internal controls over inventory. 


b. Assuming you determine that internal controls are effective, state how you can reduce 
or change physical observation tests of inventory. Be specific. 


21-26 (Objective 21-4) Your client, Ridgewood Heating and Cooling, specializes in resi- 
dential air conditioning and heating installations. The company maintains an inventory of 
air conditioning units, furnaces, and air handling ductwork. The client has provided the 
following selected financial statement information for the year ending December 31, 2011: 





12/31/2011 12/31/2010 12/31/2009 
Total Sales $55,443,900 $52,700,440 $50,384,300 
Cost of Goods Sold 47,771,880 46,810,900 44,670,400 
Ending Inventory 9,582,960 8,100,220 7,730,660 





Following is a breakdown of the ending inventory account as of December 31, 2011: 





Inventory Description Quantity Ending Balance 
AC Unit — Model 635 1,240 Units $ 806,000 
AC Unit —- Model 770 1,733 Units 1,940,960 
Furnace — Model 223 1,992 Furnaces 2,589,600 
Furnace — Model 225 2,008 Furnaces 2,761,000 
Air Handling Ducts 11,883 Boxes 1,485,400 
Total $9,582,960 





Ridgewood stores inventory in a 100,000 square foot warehouse facility at a location different 
from its corporate office. A single AC unit is stored on a 4 foot by 4 foot pallet. Warehouse 
storage shelves allow the company to store 1 pallet on the floor while 2 additional pallets 
are placed on shelves above the first pallet. Furnaces are also stored on similar sized pallets. 
Due to the height of the furnaces, only one unit can be stored on a shelf above another 


pallet that rests on the floor. Air hadApago: tPDEbErhance If 5 foot 
at the base and 7 feet tall. Three boxes can be stacked on top of the box that sits on the floor. 


a. Design analytical procedures to evaluate the reasonableness of the ending inventory 
account. 


b. What concerns, if any, do you have about the ending inventory at Ridgewood Heating 
and Cooling? 


21-27 (Objective 21-5) You encountered the following situations during the December 31, 
2011, physical inventory of Latner Shoe Distributor Company: 


a. Latner maintains a large portion of the shoe merchandise in 10 warehouses through- 
out the eastern United States. This ensures swift delivery service for its chain of stores. 
You are assigned alone to the Boston warehouse to observe the physical inventory 
process. During the inventory count, several express trucks pulled in for loading. 
Although infrequent, express shipments must be attended to immediately. As a result, 
the employees who were counting the inventory stopped to assist in loading the 
express trucks. What should you do? 


b. (1) In one storeroom of 10,000 items, you have test-counted about 200 items of high 
value and a few items of low value. You found no misstatements. You also note 
that the employees are diligently following the inventory instructions. Do you 
think you have tested enough items? Explain. 

(2) What would you do if you test-counted 150 items and found a substantial number 
of counting errors? 

c. In observing an inventory of liquid shoe polish, you note that one lot is 5 years old. 

From inspection of some bottles in an open box, you find that the liquid has solidified 
in most of the bottles. What action should you take? 


d. During your observation of the inventory count in the main warehouse, you found that 
most of the prenumbered tags that had been incorrectly filled out are being destroyed 
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and thrown away. What is the significance of this procedure and what action should 
you take? 


21-28 (Objective 21-5) In connection with his audit of the financial statements of Knutson 
Products Co., an assembler of home appliances, for the year ended May 31, 2011, Ray Abel, 
CPA, is reviewing with Knutson’s controller the plans for a physical inventory at the 
company warehouse on May 31, 2011. 

Finished appliances, unassembled parts, and supplies are stored in the warehouse, 
which is attached to Knutson’s assembly plant. The plant will operate during the count. On 
May 30, the warehouse will deliver to the plant the estimated quantities of unassembled 
parts and supplies required for May 31 production, but there may be emergency requi- 
sitions on May 31. During the count, the warehouse will continue to receive parts and 
supplies and to ship finished appliances. However, appliances completed on May 31 will be 
held in the plant until after the physical inventory. 


What procedures should the company establish to ensure that the inventory count includes 
all items that should be included and that nothing is counted twice?* 


21-29 (Objective 21-4) The following are sales, cost of sales, and inventory data for 
Aladdin Products Supply Company, a wholesale distributor of cleaning supplies. Dollar 
amounts are in millions. 





2011 2010 2009 2008 
Sales $92.8 $86.8 $78.4 $69.6 
Cost of sales 68.4 67.2 60.8 54.0 
Beginning inventory 9.2 8.4 7.6 6.0 
Ending inventory 11.6 9.2 8.4 7.6 





a. Calculate the following ratios, using an electronic spreadsheet program (instructor’s 
option): 
ns Gross margin as a percentage of sales (2) Inventory turnover 


b. L wae esicp pr PPE ofr hase eayiwo ratios. 


c. feiss that $2,000,000 is considered material for audit planning purposes for 2011. 
Do any of the fluctuations in the computed ratios indicate a possible material 
misstatement? Demonstrate this by using the spreadsheet program to perform a 
sensitivity analysis. 

d. What should the auditor do to determine the actual cause of the changes? 


21-30 (Objective 21-5) In an annual audit at December 31, 2011, you find the following 

transactions near the closing date: 

1. Merchandise costing $1,822 was received on January 3, 2012, and the related 
acquisition invoice recorded January 5. The invoice showed the shipment was made 
on December 29, 2011, FOB destination. 

2. Merchandise costing $625 was received on December 28, 2011, and the invoice was 
not recorded. You located it in the hands of the purchasing agent; it was marked “on 
consignment.” 

. A packing case containing products costing $816 was standing in the shipping room 
when the physical inventory was taken. It was not included in the inventory because 
it was marked “Hold for shipping instructions.” Your investigation revealed that the 
customer’s order was dated December 18, 2011, but that the case was shipped and 
the customer billed on January 10, 2012. The product was a stock item of your client. 

4, Merchandise received on January 6, 2012, costing $720 was entered in the acquisitions 
journal on January 7, 2012. The invoice showed shipment was made FOB supplier’s 
warehouse on December 31, 2011. Because it was not on hand December 31, it was 
not included in inventory. 

. A special machine, fabricated to order for a customer, was finished and in the 
shipping room on December 31, 2011. The customer was billed on that date and the 
machine excluded from inventory, although it was shipped on January 4, 2012. 


1S) 


wn 


*AICPA adapted. 
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Assume that each of the amounts is material. 
a. State whether the merchandise should be included in the client’s inventory. Required 
b. Give your reason for your decision on each item.* 


21-31 (Objective 21-6) As a part of your clerical tests of inventory for Martin Manufac- 
turing, you have tested about 20% of the dollar items and have found the following 





exceptions: 
1. Extension errors: 
Description Quantity Price Extension as Recorded 
Wood 920 board feet $ 0.12/board foot $ 11.04 
Metal-cutting tools 49 units 30.00 each 1,740.00 
Cutting fluid 26 barrels 40.00/barrel 240.00 
Sandpaper 600 sheets 0.95/hundred 579.00 


2. Differences located in comparing last year’s costs with the current year’s costs on the 
client’s inventory lists: 





Description Quantity This Year's Cost Preceding Year's Cost 
TA-114 precision-cutting torches 12 units $800.00 each Unable to locate 
Aluminum scrap 4,500 pounds 8.00/ton $95.00/ton 
Lubricating oil 400 gallons 55.00/gallon 95.00/barrel 





3. Test counts that you were unable to find when tracing from the test counts to the 
final inventory compilation: 





Tag No. Quantity Current Year Cost Description 
2958 20 tons $75.00/ton Cold-rolled bars 
0026 3,000 feet 2.25/foot 4-inch aluminum stripping 





4. Page total, footing errors: 
Page No. Client Total Correct Total 


"ago PDF “Eijhancer 


a. State the amount of the actual misstatement in each of the four tests. For any item for Required 
which the amount of the misstatement cannot be determined from the information 
given, state the considerations that will affect your estimate of the misstatement. 
b. As a result of your findings, what will you do about clerical accuracy tests of the 
inventory in the current year? 
c. What changes, if any, would you suggest in internal controls and procedures for 
Martin Manufacturing during the compilation of next year’s inventory to prevent 
each type of misstatement? 








21-32 (Objective 21-5) You have been engaged for the audit of the Y Company for the year 
ended December 31, 2011. The Y Company is in the wholesale chemical business and 
makes all sales at 25% over cost. 

Following are portions of the client’s sales and purchases accounts for the calendar year 
2011. 








SALES 
Balance Forward 

Date Reference Amount Date Reference Amount 
12-31 Closing entry $699,860 $658,320 
12-27 *S1#965 5,195 
12-28 SI#966 19,270 
12-28 S1#967 1,302 
12-31 SI#969 5,841 
12-31 S1#970 7,922 
12-31 S1#971 2,010 
$699,860 $699,860 





*S| = Sales invoice. 


*AICPA adapted. 
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PURCHASES 
Balance Forward 








Date Reference Amount Date Reference Amount 
$360,300 12-31 Closing entry $385,346 
12-28 TRR#1059 3,100 
12-30 RR#1061 8,965 
12-31 RR#1062 4,861 
12-31 RR#1063 8,120 
$385,346 $385,346 





TRR = Receiving report. 


You observed the physical inventory of goods in the warehouse on December 31, 2011, 
and were satisfied that it was properly taken. 

When performing a sales and purchases cutoff test, you found that at December 31, 
2011, the last receiving report that had been used was no. 1063 and that no shipments have 
been made on any sales invoices with numbers larger than no. 968. You also obtained the 
following additional information: 


1. Included in the warehouse physical inventory at December 31, 2011 were chemicals 
that had been acquired and received on receiving report no. 1060 but for which an 
invoice was not received until the year 2012. Cost was $2,183. 

2. In the warehouse at December 31, 2011 were goods that had been sold and paid for 
by the customer but which were not shipped out until the year 2012. They were all 
sold on sales invoice no. 965 and were not inventoried. 

3. On the evening of December 31, 2011 there were two cars on the Y company siding: 

(a) Car AR38162 was unloaded on January 2, 2012, and received on receiving report 
no. 1063. The freight was paid by the vendor. 

(b) Car BAE74123 was loaded and sealed on December 31, 2011, and was switched 
off the co an 2, ex. The sales price was $12,700 and the 

A PAG Qa "BRE ERhane @eRler was sold on sales invoice no. 968. 

‘ Ace stranded at December 31, 2011 on a railroad siding were two cars of 
chemicals en route to the Z Pulp and Paper Co. They were sold on sales invoice no. 
966, and the terms were FOB destination. 

. En route to the Y Company on December 31, 2011 was a truckload of material that 
was received on receiving report no. 1064. The material was shipped FOB desti- 
nation, and freight of $75 was paid by the Y Company. However, the freight was 
deducted from the purchase price of $975. 

6. Included in the physical inventory were chemicals exposed to rain during transit and 

deemed unsalable. Their invoice cost was $1,250, and freight charges of $350 had 
been paid on the chemicals. 


eS 


wn 


Required a. Compute the adjustments that should be made to the client’s physical inventory at 
December 31, 2011. 


b. Prepare a worksheet of adjusting entries that are required as of December 31, 2011.* 


CASE 


21-33 (Objective 21-6) You are assigned to the December 31, 2011, audit of Sea Gull 
Airframes, Inc. The company designs and manufactures aircraft superstructures and 
airframe components. You observed the physical inventory at December 31 and are 
satisfied that it was properly taken. The inventory at December 31, 2011, has been priced, 
extended, and totaled by the client and is made up of about 5,000 inventory items with a 
total valuation of $8,275,000. In performing inventory price tests, you have decided to 


*AICPA adapted. 
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stratify your tests and conclude that you should have two strata: items with a value over 
$5,000 and those with a value of less than $5,000. The book values are as follows: 








No. of Items Total Value 

More than $5,000 500 $4,150,000 
Less than $5,000 4,500 4,125,000 
5,000 $8,275,000 





In performing pricing and extension tests, you have decided to test about 50 inventory 
items in detail. You selected 40 of the over $5,000 items and 10 of those under $5,000 at 
random from the population. You find all items to be correct except for items A through G 
below, which you believe may be misstated. You have tested the following items, to this 
point, exclusive of A through G: 





No. of Items Total Value 
More than $5,000 36 $360,000 
Less than $5,000 7 2,600 





Sea Gull Airframes uses a periodic inventory system and values its inventory at the 
lower of FIFO cost or market. You were able to locate all invoices needed for your 
examination. The seven inventory items in the sample you believe may be misstated, along 
with the relevant data for determining the proper valuation, are shown next. 


INVENTORY ITEMS POSSIBLY MISSTATED 





Description Quantity Price Total! 

A. L37 spars 3,000 meters $ 8.00/meter $24,000 
B. B68 metal formers 10,000 inches 1.20/foot 12,000 
C. RO1 metal ribs 1,500 yards 10.00/yard 15,000 
D. St26 struts 1,000 feet 8.00/foot 8,000 
E. Industrial hand drills 45 units 20.00 each 900 
F. L803 steel leaf springs j PLB j op 
G. V16 fasteners ApAgo “08 /do: TWhance 





"Amounts are as stated on client's inventory. 


INFORMATION FOR PRICING FROM INVOICES (SEA GULL AIRFRAMES) 





Voucher Voucher Receiving 
Number Date Date Paid Terms Report Date Invoice Description 
7-68 8-01-06 8-21-06 Net FOB destination 8-01-06 77 V16 fasteners at $10 per dozen 

11-81 10-16-11 11-15-11 Net FOB destination 10-18-11 1,100 yards RO1 metal ribs at $9.50 per yard; 
2,000 feet St26 struts at $8.20 per foot 

12-06 12-08-11 12-30-11 2/10, n/30 FOB S.P. 12-10-11 180 L803 steel leaf springs at $69 each 

12-09 12-10-11 12-18-11 Net FOB destination 12-11-11 45 industrial hand drills at $20 each; 
guaranteed for 4 years 

12-18 12-27-11 12-27-11 2/10, n/30 FOB S.P. 12-21-11 4,200 meters L37 spars at $8 per meter 

12-23 12-24-11 1-03-12 2/10, n/30 FOB dest. 12-26-11 12,800 inches B68 metal formers at $1.20 per foot 

12-61 12-29-11 1-08-12 Net FOB destination 12-29-11 1,000 yards RO1 metal ribs at $10 per yard; 
800 feet St26 struts at $8 per foot 

12-81 12-31-11 1-20-12 Net FOB destination 1-06-12 2,000 meters L37 spars at $7.50 per meter; 


2,000 yards RO1 metal ribs at $10 per yard 





In addition, you noted a freight bill for voucher 12-23 in the amount of $200. This bill was 
entered in the freight-in account. Virtually all freight was for the metal formers. 
This is the first time Sea Gull Airframes has been audited by your firm. 


a. Review all information and determine the inventory misstatements of the seven items 


Required 


in question. State any assumptions you consider necessary to determine the amount 
of the misstatements. 
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b. Prepare an audit schedule to summarize your findings. Use the computer to prepare 
the schedule (instructor’s option). 


INTERNET PROBLEM 21-1: 


USING INVENTORY COUNT SPECIALISTS 





Since 1938, when auditors failed to uncover fictitious inventory recorded by the McKesson 
& Robbins Company, auditors have been ordinarily required to physically observe the 
counting of inventory. It is important to recognize that auditors are not required to actually 
count the inventory for inclusion on the balance sheet, but they are required to observe the 
inventory being counted. Occasionally, companies employ inventory specialists to perform 
their inventory counts. One very large inventory counting specialist is Retail Grocery 
Inventory Service, now known as RGIS. Visit RGIS’s (www.rgisinv.com) Web site and 
answer the following questions. 


Required a. Under the link to “Case Studies,” read the case about Hines Horticulture. How did 
RGIS assist Hines in its inventory management? 


b. What created the need for Hines to use a service provider such as RGIS? 


c. Does an auditor’s responsibility for observing the physical inventory differ if a 
company hires an inventory specialist such as RGIS to perform counts as opposed to 
having its own employees perform inventory counts? 


d. Would your expectations of the results of the physical observation of a client’s 
inventory change if a client hired a company such as RGIS? 


e. What are the advantages and disadvantages of hiring an inventory specialist such as 
RGIS? 


Apago PDF Enhancer 
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AUDIT OF THE 
CAPITAL ACQUISITION 
AND REPAYMENT CYCLE 


A Dishonest Client Will Get The Best Of 
The Auditor Almost Every Time 





22 








LEARNING OBJECTIVES 


After studying this chapter, 
you should be able to 


22-1 


Identify the accounts and the 
unique characteristics of the 
capital acquisition and 
repayment cycle. 


Able Construction Company entered into long-term construction contracts, 22-2 Design and perform audit tests 
recognizing income using the percentage of completion method of of notes ae and related 
accounting. To finance its operations, Able borrowed funds from the bank Sane ieee 
and agreed to comply with restrictive loan covenants dependent on LL era ae cOncelis 
reported income from the long-term contracts. The percentage of Hee enete oymctencdulty 
completion method of accounting requires, among other things, an ; 

22-4 Design and perform tests of 


agreement with well-defined, enforceable terms, a reliable method of 
estimating costs to complete the contracts, and recognition of losses at the 
time they become known. As part of the audit of Able, its auditors read the 
contracts for all projects in progress, tested costs incurred to date, and 





controls, substantive tests of 
transactions, and tests of details 
of balances for capital stock and 
retained earnings. 














assessed the ultimate profitability of the contracts, including discussing — 
them with management. A significant part of v Saag ep unde: 
percentage of completion is audtin AR Ored> nnancer 

In the current year, management's records and schedules of projects indicate that all projects will result in a profit. For 
each project, there is a separate schedule showing estimated total revenue from the project, costs incurred in the 
current period, costs incurred to date, estimated total costs, percentage of completion, and profit recognized in the 
current period. The auditor discussed each project with management, performed audit tests to support the schedule, 


and concluded that the revenue, expenses, and profit were reasonably stated. Reported income allowed Able to meet 
several of the restrictive covenants in its loan agreement with the bank. 


In fact, Able had incurred a significant loss on one of its major projects. Able engaged a subcontractor to do 
reconstructive work not anticipated in the original contract bid. In awarding the subcontract, Able entered into an 
agreement with the subcontractor that the work would not be paid for until after its audit was completed in an effort 
to defer recording losses associated with the additional work. Management hid the subcontractor’s invoices from the 
auditors as they were received. During the next year, management recognized this loss but doctored the invoices so 
that it appeared the “unexpected” additional cost was incurred during that year, and that the previous year’s 
statements were correct and that all loan covenants with the bank were satisfied. 


The fraudulent misstatement was discovered several years later when Able went bankrupt and the CPA firm was sued 
by the bank for performing inadequate audits. The firm was ultimately found not responsible, but only after spending 
extensive time and large amounts of money defending its audit. 


he final transaction cycle we discuss is the capital acquisition and repayment cycle, which concerns the 

acquisition of capital resources through interest-bearing debt and owners’ equity and the repayment of the 
capital. This cycle also includes the payment of interest and dividends. 

Four characteristics of the capital acquisition and repayment cycle influence the audit of these accounts: 


Li 


3. 


4. 


Relatively few transactions affect the account balances, but each transaction is often highly material. For 
example, bonds are infrequently issued by companies, but the amount of a bond issue is normally large. Their size 
makes it common for auditors, as a part of verifying the balance sheet accounts, to verify each transaction taking 
place in the cycle for the entire year. Audit schedules for most accounts in the cycle include the beginning balance 
of every account, every transaction that occurred during the year and the ending balance. 

The exclusion or misstatement of a single transaction can be material. As a result, the auditor’s primary emphasis 
in auditing these accounts is often on the completeness and accuracy balance-related audit objectives. 

A legal relationship exists between the client entity and the holder of the stock, bond, or similar ownership 
document. As the chapter-opening case of Able Construction Company demonstrates, the auditor must deter- 
mine whether the client has met the requirements of debt or equity agreements. In the audit of the transactions 
and amounts in the cycle, the auditor must take great care to make sure the significant legal requirements affecting 
the financial statements have been met and adequately presented and disclosed in the statements. 

A direct relationship exists between the interest and dividends accounts and debt and equity. In the audit of 
interest-bearing debt, auditors should simultaneously verify the related interest expense and interest payable. This 
is also true for owners’ equity, dividends declared, and dividends payable. 


Auditors often learn about capital acquisition transactions while gaining an understanding of the client’s 
business and industry performed as part of the auditor’s risk assessment procedures. Also, when public companies 
issue additional debt and equity securities during the year, SEC rules require auditor consideration of financial 
information included in the client’s new securities offering prospectus. In doing so, auditors frequently identify 
business risk issues for capital acquisition activities that should be considered in the design of audit procedures for 
transactions, account balances, and disclosures in the capital acquisition and repayment cycle. 


ACCOUNTS IN THE CYCLE 


OBJECTIVE 22-1 The accounts in a company’s capital acquisition and repayment cycle depend on the type 





Identify the accounts and the 


of business the company operates and how its operations are financed. All corporations 


unique characteristics of the have capital stock and retained earnings, but some may also have preferred stock, addi- 
capital acquisition and tional paid-in capital, and treasury stock. As with other cycles, cash is an important 
repayment cycle. account in the cycle because both the acquisition and repayment of capital affect the cash 
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account. The unique characteristics of the capital acquisition and repayment cycle affect 
how auditors verify the accounts in the cycle. This cycle often includes these accounts: 


* Notes payable * Cash in the bank 

* Contracts payable * Capital stock—common 

» Mortgages payable * Capital stock—preferred 

* Bonds payable * Paid-in capital in excess of par 

* Interest expense * Donated capital 

* Accrued interest * Retained earnings 

* Appropriations of retained earnings ° Dividends payable 

* Treasury stock * Proprietorship—capital account 
* Dividends declared * Partnership—capital account 


The methodology for designing tests of details of balances for accounts in the capital 
acquisition and repayment cycle is the same as that followed for other accounts. (See 
Figure 16-1 on page 520. The only difference is the name of the account being audited.) 
For example, in determining the tests of details of balances for notes payable, the auditor 
considers business risk, tolerable misstatement, inherent risk, control risk, the results 
of tests of controls and substantive tests of transactions, and the results of analytical 
procedures. 
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Auditors often set tolerable misstatement at a low level because it is usually possible 
to completely audit the account balance and transactions affecting the notes payable 
account balance. Typically, they also set inherent risk at a low level because the correct 
account value is usually easy to determine. Auditors are normally most concerned about 
the completeness objective for notes payable account balances and the completeness 
objective for notes payable disclosures, such as collateral and covenant restrictions for 
notes payable. Because the cycle usually contains few transactions, control risk and the 
results of substantive tests of transactions are normally less important for designing 
tests of details of balances for accounts such as notes payable. 

To best understand the audit procedures for many of the accounts in the capital 
acquisition and repayment cycle, representative accounts that are significant parts of 
the cycle for a typical business are included in this chapter. The following sections 
discuss (1) the audit of notes payable and related interest expense to illustrate interest- 
bearing capital and (2) the audit of common stock, paid-in capital in excess of par, 
dividends, and retained earnings to illustrate equity accounts. 


NOTES PAYABLE 


A note payable is a legal obligation to a creditor, which may be unsecured or secured by OBJECTIVE 22-2 
assets, and bears interest. Typically, a note is issued for a period somewhere between 
one month and one year, but longer term notes exist. Notes are issued for different 





Design and perform audit 
: : : tests of notes payable and 
purposes, and the property pledged as collateral includes a wide variety of assets, such related accounts and 


as securities, accounts receivable, inventory, and fixed assets. The principal and interest transactions. 





payments on the notes must be made in accordance with the terms of the loan agree- 
ment. For short-term loans, a principal and interest payment is usually required only 
when the loan becomes due. For loans over 90 days, the note usually calls for monthly 
or quarterly interest payments. Apago PDF Enhancer 

Figure 22-1 (p. 714) shows the accounts used for notes payable and related interest. 

Auditors commonly include tests of principal and interest payments as a part of the 
audit of the acquisition and payment cycle, because the payments are recorded in the 
cash disbursements journal. But in many cases, because of their relative infrequency, 
no capital transactions are included in the auditor’s sample for tests of controls and 
substantive tests of transactions. Therefore, it is also normal to test these transactions 
as a part of the capital acquisition and repayment cycle. 

The objectives of the audit of notes payable are to determine whether: 

* Internal controls over notes payable are adequate. 

* Transactions for principal and interest involving notes payable are properly 
authorized and recorded in accordance with the six transaction-related audit 
objectives. 

* The liability for notes payable and the related interest expense and accrued 
liability are properly stated as defined by seven of the eight balance-related audit 
objectives. (Realizable value is not applicable to liability accounts.) 


There are four important controls over notes payable: Internal Controls 
1. Proper authorization for the issue of new notes. Responsibility for the issuance of 
new notes should be vested in the board of directors or high-level management 
personnel. Generally, two signatures of properly authorized officials are 
required for all loan agreements, which usually stipulate the amount of the 
loan, the interest rate, the repayment terms, and the assets pledged. When notes 
are renewed, they need to be subject to the same authorization procedures as 
those for the issuance of new notes. 
2. Adequate controls over the repayment of principal and interest. The periodic 
payments of interest and principal should be subject to the controls in the 
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Tests of Controls 
and Substantive 
Tests of Transactions 


Analytical Procedures 





laren Notes Payable and the Related Interest Accounts ) 


Notes 
payable Interest 
expense 


Interest 
expense 








Payments] Beginning 
of balance 
principal 






Issue of 
new notes 





Ending 
balance 






















Interest 
Cash payable 
in bank Beginning 
Issue of | Payments of balance 
new principal Payments] Interest 








notes Payments of <————————_»>_ of expense 
interest interest Ending 
balance 
oe 4 





acquisition and payment cycle. At the time the note was issued, the accounting 
department should have received a copy of the note, much like it receives 
vendors’ invoices and receiving reports. The accounts payable department should 
automatically issue checks or electronic fund transfers for the notes when they 
become due, again in the same manner in which it prepares payments for 
Apa r PDE an Nhsncer the note provides the supporting 
umentation for payment. 

3. Proper documents and records. These include subsidiary records and control 
over blank and paid notes by an authorized person. Paid notes should be 
cancelled and retained under the custody of an authorized official. 

4. Periodic independent verification. Periodically, the detailed note records should 
be reconciled with the general ledger and compared with the note holders’ records 
by an employee who is not responsible for maintaining the detailed records. At 
the same time, an independent person should recompute the interest expense 
on notes to test the accuracy of the record keeping. 


Tests of notes payable transactions involve the issue of notes and the repayment of prin- 
cipal and interest. These audit tests are a part of tests of controls and substantive tests of 
transactions for cash receipts (see page 461 in Chapter 14) and cash disbursements (see 
page 611 in Chapter 18). Additional tests of controls and substantive tests of trans- 
actions are often done as a part of tests of details of balances because of the materiality 
of individual transactions. 

Tests of controls for notes payable and related interest should emphasize testing the 
four internal controls we just discussed. In addition, auditors should verify the accurate 
recording of receipts from note proceeds and payments of principal and interest. 


Analytical procedures are essential for notes payable because tests of details for interest 
expense and accrued interest can often be eliminated when results are favorable. Table 22-1 
illustrates typical analytical procedures for notes payable and related interest accounts. 
The auditor’s independent prediction of interest expense, using average notes 
payable outstanding and average interest rates, helps the auditor evaluate the reason- 
ableness of interest expense and also tests for omitted notes payable. Turn to page 231 
in Chapter 8 and review Figure 8-8 for an illustration of an auditor’s schedule where such 
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ell Analytical Procedures for Notes Payable ) 


Possible Misstatement 





Analytical Procedure 





Recalculate approximate interest expense on 
the basis of average interest rates and overall 
monthly notes payable. 


Misstatement of interest expense and accrued 
interest or omission of an outstanding note 
payable 





Compare individual notes outstanding with those 
of the prior year. 


Omission or misstatement of a note payable 





Compare total balance in notes payable, interest 
expense, and accrued interest with prior-year 
balances. 


Misstatement of interest expense and accrued 
interest or notes payable 











an analytical procedure has been performed. If actual interest expense is materially 
larger than the auditor’s estimate, one possible cause is recorded interest payments on 
unrecorded notes payable. 


The normal starting point for the audit of notes payable is a schedule of notes payable and 
accrued interest, which the auditor obtains from the client. Figure 22-2 (pp. 716-717) 
illustrates a typical schedule, including detailed information of all transactions that took 
place during the entire year for principal and interest, the beginning and ending 
balances for notes and interest payable, and descriptive information about the notes, 
such as the due date, the interest rate, and the assets pledged as collateral. 

When there are numerous transactions involving notes during the year, it may be 
impractical for auditors to obtain such a schedule. In those situations, auditors are 


Tests of 
Details of Balances 


likely to request the client to prepare qs Ker f 3) i a lances 
at the end of the year, showing a d 9 ea e, era, (si and the 
interest payable at the end of the year, including the collateral and interest rate. 

Table 22-2 (p. 718) summarizes the applicable balance-related audit objectives and 


common audit procedures as they apply to the schedule of notes payable. Again, the 
amount of testing depends heavily on the materiality of notes payable and the effective- 


ness of internal controls. 


The two most important balance-related audit objectives in notes payable are: 


1. Existing notes payable are included (completeness). 


2. Notes payable in the schedule are accurately recorded (accuracy). 





DON’T FORGET 
THE LIABILITIES! 








Through a series of closely timed purchase trans- 
actions, NECO Enterprises, Inc., a public utility 
holding company based in Providence, Rhode 
Island, rapidly expanded its holdings of other 
utilities in the New England area. Under the new 
leadership of David LaRoche as chairman and 
chief executive officer, the company purchased 
the outstanding stock of several corporations 
wholly owned by LaRoche, who also happened 
to be NECO’s majority shareholder. 

Within two years of the related party 
purchases, the SEC filed a complaint against the 
company and LaRoche accusing them of violating 
the antifraud provisions of federal securities laws 
in conjunction with quarterly financial statements 
filed when the acquisitions were made. According 
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to the SEC, the quarterly reports failed to disclose 
over $16 million in liabilities acquired as a result of 
the purchases, which also led to overstatements 
of NECO’s retained earnings and total capital 
balances. 

Following the SEC’s investigation, the company 
restated the filings to comply with GAAP, relocated 
to Vermont, and disposed of its utility subsidiary, 
Newport Electric Company. LaRoche consented 
to the issuance of a permanent injunction against 
future violations of all the provisions of the 
securities laws associated with the SEC's 
complaint. 

Source: Accounting and Auditing Enforcement 

Release No. 335, Commerce Clearing House, Inc., 

Chicago. 
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These objectives are vital because a misstatement can be material if even one note 
is omitted or incorrect. Table 22-2 on page 718 shows common procedures to test for 
the completeness objective for notes payable. When internal controls over notes 
payable are deficient, auditors may need to perform extended procedures to test for 
omitted notes payable. For example, the auditor might send confirmations to creditors 
that have held notes from the client in the past but are not currently included in the 
notes payable schedule. The auditor might also analyze interest expense for payments 
to creditors that are not included in the notes payable schedule and review the minutes 
of the board of directors meetings for authorized but unrecorded notes. 

In addition to balance-related objectives, the four presentation and disclosure- 
related objectives are important for note payable because accounting standards require 
that the footnotes adequately describe the terms of notes payable outstanding and the 
assets pledged as collateral for the loans. If the loans require significant restrictions on 
the activities of the company, such as compensating balance provisions or restrictions 
on the payment of dividends, these must also be disclosed in the footnotes. As auditors 
perform tests of details of balances for balance-related audit objectives, the evidence 
obtained helps satisfy the notes payable presentation and disclosure objectives. 


OWNERS’ EQUITY 


OBJECTIVE 22-3 There is an important difference in the audit of owners’ equity between a publicly held 
corporation and a closely held corporation. In most closely held corporations, which 


Identify the primary concerns : ; : . : 
har ca typically have few shareholders, occasional, if any, transactions occur during the year for 


in the audit of owners’ equity : ; ; ‘ : 
transactions. capital stock accounts. The only transactions entered in the owners’ equity section are 
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likely to be the change in owners’ equity for the annual earnings or loss and the declaration 
of dividends, if any. Closely held corporations rarely pay dividends, and auditors spend 
little time verifying owners’ equity, ApagorePDFsinhancerds. 

For publicly held corporations, however, the verification of owners’ equity is more 
complex because of the larger numbers of shareholders and frequent changes in the 
individuals holding the stock. The rest of this chapter deals with tests for verifying the 
major owners’ equity accounts in a publicly held corporation, including: 


* Capital and common stock 
* Paid-in capital in excess of par 
* Retained earnings and related dividends 


Figure 22-3 (p. 719) provides an overview of the specific owners’ equity accounts 
discussed. The objective for each is to determine whether: 


* Internal controls over capital stock and related dividends are adequate 

* Owners’ equity transactions are correctly recorded, as defined by the six 
transaction-related audit objectives 

* Owners’ equity balances are properly recorded, as defined by the eight balance- 
related audit objectives, and properly presented and disclosed, as defined by the 
four presentation and disclosure-related audit objectives for owners’ equity 
accounts 


Other accounts in owners’ equity are verified in much the same way as these. 


Several internal controls are important for owners’ equity activities. We discuss several Internal Controls 


of these in the following sections. 


Proper Authorization of Transactions Because each owners’ equity transaction is 
typically material, many of these transactions must be approved by the board of 
directors. The following types of owners’ equity transactions usually require specific 
authorization: 
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Balance-Related Audit Objectives and Tests of Details of Balances for Notes Payable 


and Interest 





Balance-Related Audit Objective 


Common Tests of Details 
of Balances Procedures 


Comments 





Notes payable in the notes payable 
schedule agree with the client's 
notes payable register or master 
file, and the total is correctly 
added and agrees with the 
general ledger (detail tie-in). 


Foot the notes payable list for notes payable and 
accrued interest. 

Trace the totals to the general ledger. 

Trace the individual notes payable to the master 
file. 


These are often done on a 100 percent 
basis because of the small population 
size. 





Notes payable in the schedule exist 
(existence). 


Confirm notes payable. 

Examine duplicate copies of notes for 
authorization. 

Examine corporate minutes for loan approval. 


The existence objective is not as 
important as completeness or 
accuracy. 





Existing notes payable are included 
in the notes payable schedule 
(completeness). 


Notes payable and accrued interest 
on the schedule are accurate 
(accuracy). 


Examine notes paid after year-end to determine 
whether they were liabilities at the balance 
sheet date. 

Obtain a standard bank confirmation that 
includes specific reference to the existence of 
notes payable from all banks with which the 
client does business. (Bank confirmations 
are discussed more fully in Chapter 23.) 

Review the bank reconciliation for new notes 
credited directly to the bank account by the 
bank. (Bank reconciliations are also discussed 
more fully in Chapter 23.) 


Examine duplicate copies of notes for principal 
and interest rates. 

Confirm notes payable, interest rates, and last 
date for which interest has been paid with 
holders of notes. 

Recalculate accrued interest. 


This objective is important for 
uncovering both errors and fraud. 
These three procedures are done 
on most audits. Additional procedures 
to search for omitted liabilities may 
be necessary if internal controls are 
deficient. 


In some cases, it may be necessary 
to calculate, using present-value 
techniques, the imputed interest rates 
or the principal amount of the note. 
An example is when equipment is 
acquired for a note. 





Notes payable in the schedule are 
correctly classified (classification). 


Examine due dates on duplicate copies of 
notes to determine whether all or part of the 
notes are a noncurrent liability. 

Review notes to determine whether any are 
related party notes or accounts payable. 





Notes payable are included in the 
proper period (cutoff). 





The company has an obligation to pay 
L the notes payable (obligations). 


Examine duplicate copies of notes to 
determine whether notes were dated on 
or before the balance sheet date. 


Examine notes to determine whether the 
company has obligations for payment. 


Notes should be included as current 
period liabilities when dated on or 
before the balance sheet date. 








Issuance of Capital Stock. The authorization includes the type of equity to issue 
(such as preferred or common stock), number of shares to issue, par value of 
the stock, privileged condition for any stock other than common, and date of 
the issue. 

Repurchase of Capital Stock. The repurchase of common or preferred shares, the 
timing of the repurchase, and the amount to pay for the shares should all be 
approved by the board of directors. 

Declaration of Dividends. The board of directors must authorize the form of the 
dividends (such as cash or stock), the amount of the dividend per share, and 
the record and payment dates of the dividends. 
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Proper Record Keeping and Segregation of Duties When a company maintains 
its own records of stock transactions and outstanding stock, the internal controls 
must be adequate to ensure that: 


* Actual owners of the stock a ago inPDPypdnharcer 

* The correct amount of dividends is paid to the stockholders owning the stock as 
of the dividend record date 

* The potential for misappropriation of assets is minimized 


The proper assignment of personnel, adequate record-keeping procedures, and 
independent internal verification of information in the records are useful controls for 
these purposes. The client should also have well-defined policies for preparing stock 
certificates and for recording capital stock transactions. 

When issuing and recording capital stock, the client must comply with both the 
state laws governing corporations and the requirements in the corporate charter. The 
par value of the stock, the number of shares the company is authorized to issue, and 
state taxes on the issue of capital stock all affect issuance and recording. 

As a control over capital stock, most companies maintain stock certificate books 
and a shareholders’ capital stock master file. A capital stock certificate record records 
the issuance and repurchase of capital stock for the life of the corporation. The record 
for a capital stock transaction includes the certificate number, the number of shares 
issued, the name of the person to whom it was issued, and the issue date. When shares 
are repurchased, the capital stock certificate book should include the cancelled 
certificates and the date of their cancellation. 

A shareholders’ capital stock master file is the record of the outstanding shares at 
any given time. The master file acts as a check on the accuracy of the capital stock 
certificate record and the common stock balance in the general ledger. It is also used as 
the basis for the payment of dividends. 

The disbursement of cash for the payment of dividends should be controlled in 
much the same manner as the preparation and payment of payroll, which we described 
in Chapter 20. Internal controls affecting dividend payments may include: 
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Audit of 
Capital Stock 
and Paid-in Capital 


OBJECTIVE 22-4 


Design and perform tests of 
controls, substantive tests of 


transactions, and tests of 
details of balances for capital 
stock and retained earnings. 





* Dividend checks are prepared from the capital stock certificate record by 
someone who is not responsible for maintaining the capital stock records. 

» After the checks are prepared, there is independent verification of the stockholders’ 
names and the amounts of the checks and a reconciliation of the total amount of 
the dividend checks with the total dividends authorized in the minutes. 

* A separate imprest dividend account is used to prevent the payment of a larger 
amount of dividends than was authorized. 


Independent Registrar and Stock Transfer Agent Any company with stock listed 
on a securities exchange is required to engage an independent registrar as a control to 
prevent the improper issue of stock certificates. The responsibility of an independent 
registrar is to make sure that stock is issued by a corporation in accordance with the 
capital stock provisions in the corporate charter and the authorization of the board of 
directors. When there is a change in the ownership of the stock, the registrar is respon- 
sible for signing all newly issued stock certificates and making sure that old certificates 
are received and cancelled before a replacement certificate is issued. 

Most large corporations also employ the services of a stock transfer agent to main- 
tain the stockholder records, including those documenting transfers of stock ownership. 
The employment of a transfer agent helps strengthen control over the stock records by 
putting the records in the hands of an independent organization and helps reduce the 
cost of record keeping by using a specialist. Many companies also have the transfer agent 
disburse cash dividends to shareholders, further improving internal control. 


Auditors have four main concerns in auditing capital stock and paid-in capital in excess 
of par: 
1. Existing capital stock transactions are recorded (completeness transaction-related 
objective). 
2. Recorded capital stock transactions occurred and are accurately recorded (occur- 
Apago«< PDE aBnAance rcv) 
3. Capital stock is accurately recorded (accuracy balance-related objectives). 
4. Capital stock is properly presented and disclosed (all four presentation and 
disclosure objectives). 


The first two concerns involve tests of controls and substantive tests of transactions, 
and the last two involve tests of details of balances and related disclosures. 


Existing Capital Stock Transactions Are Recorded This objective is easily satisfied 
when a registrar or transfer agent is used. The auditor can confirm with them whether any 
capital stock transactions occurred and the accuracy of existing transactions and then 
determine if all of those transactions have been recorded. To uncover issuances and repur- 
chases of capital stock, auditors also review the minutes of the board of directors meetings, 
especially near the balance sheet date, and examine client-held stock record books. 


Recorded Capital Stock Transactions Occurred and Are Accurately Recorded 
Extensive auditing is required for transactions involving issuance of capital stock such as 
the issuance of new capital stock for cash, the merger with another company through an 
exchange of stock, donated shares, and the purchase of treasury shares. Regardless of the 
controls, it is normal practice for auditors to verify all capital stock transactions because 
of their materiality and permanence in the records. The occurrence transaction-related 
objective can ordinarily be tested by examining the minutes of the board of directors 
meetings for proper authorization. 

Auditors can readily verify accurate recording of capital stock transactions for cash by 
confirming the amount with the transfer agent and tracing the amount of the recorded 
capital stock transactions to cash receipts. (In the case of treasury stock, the amounts are 
traced to the cash disbursements journal.) In addition, the auditor must verify whether 
the correct amounts were credited to capital stock and paid-in capital in excess of par by 
referring to the corporate charter to determine the par or stated value of the capital stock. 
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ROLLER COASTER 
IPO MARKETS 


Activity surrounding initial public offerings (IPOs) 
has been on a roller coaster ride for much of the 
past decade. Coming off the craze of the dot.com 
era in the late 1990s, the IPO market in the U.S. 
began to trail off soon after the passage of the 
Sarbanes-Oxley Act of 2002. Concerns about the 
cost of compliance with many of the provisions of 
the Act caused some companies to undertake 
their IPOs in overseas markets. The London Stock 
Exchange actively sought many of the smaller U.S. 
companies that might be willing to take their 
stocks public in the United Kingdom to avoid the 
need to comply with many of the perceived costly 
provisions of the Act. Some public companies 
even threatened to go private to avoid the hassles 
of the new regulations. 

By 2006 and 2007, the global IPO market was 
gaining strength again with $271.8 billion and 
$323.9 billion in priced IPOs globally. However, 
the global economic crisis that began in 2008 
dried up most of the IPO activity. Total priced 
IPOs for 2008 and 2009 fell off to $114.8 billion 
and $102.1 billion, respectively. While the IPO 
market was showing signs of gaining strength in 


new shares, uncertainty in the market, including 
the debt crisis in Greece and Spain, created some 
volatility in the global IPO arena causing some 
companies to postpone or withdraw their listings. 

According to Ernst & Young's “Global IPO 
Trends — 2010,” Asian companies, particularly 
from China, will likely continue to dominate the 
IPO recovery for a while given the country’s 
vigorous economic growth, as many former state- 
owned enterprises in China and in other countries 
such as Poland seek to raise capital in public 
markets. Global IPOs are expected to be highly 
diverse in geographies, sectors, and deal sizes, 
while most of the growth in the U.S. will be 
fueled by high tech and energy sectors. 

While there are cash-rich investors interested 
in providing equity capital, the recent economic 
crisis has caused them to be much more 
disciplined and valuation-driven. Investors are 
requiring bigger IPO discounts as they take on 
greater risks than years preceding the downturn. 


Sources: Adapted from 1. Ken Sweet, “IPO Market 
Begins to Heat Up,” Fox Business, August 27, 2010 


2010, with some big name deals such as General 
Motors, Toys “R” Us, and Dollar General issuing 


(www.foxbusiness.com); 2. Global IPO Trends 2010, 
Ernst & Young (www.ey.com). 








Auditing capital stock transactions such as stock dividends, acquisition of property 
for stock, mergers, or similar nonc ‘ADAG... i in cause considerable 
technical expertise is required an ARageink i. Bh MAC GErmine 
proper valuations. For example, in the audit of a major merger transaction, the auditor 
must often do considerable research to determine the appropriate accounting treatment 
and proper valuation of the transaction, after considering all the facts in the merger. 


Capital Stock Is Accurately Recorded Auditors verify the ending balance in the 
capital stock account by first determining the number of shares outstanding at the 
balance sheet date. A confirmation from the transfer agent is the simplest way to obtain 
this information. When no transfer agent exists, the auditor must rely on examining 
the stock records and accounting for all shares outstanding in the stock certificate 
records, examining all cancelled certificates, and accounting for blank certificates. 

After the auditor is satisfied that the number of shares outstanding is correct, the 
recorded par value in the capital account can be verified by multiplying the number of 
shares by the par value of the stock. The ending balance in the capital in excess of par 
account is a residual amount. It is audited by verifying the amount of recorded trans- 
actions during the year and adding them to or subtracting them from the beginning 
balance in the account. 

A major consideration when auditing the accuracy balance-related objective for 
capital stock is verifying whether the number of shares used in the calculation of 
earnings per share is accurate. It is easy to determine the correct number of shares to 
use in the calculation when there is only one class of stock and a small number of 
capital stock transactions. The problem becomes much more complex when there are 
convertible securities, stock options, or stock warrants outstanding. Auditors must 
have thorough understanding of requirements of relevant accounting standards before 
verifying the number of shares for determining basic and diluted earnings per share. 


Capital Stock Is Properly Presented and Disclosed The most important sources 
of information for determining whether all four presentation and disclosure-related 
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Audit of Dividends 


Audit of 
Retained Earnings 


objectives for capital stock activities are satisfied are the corporate charter, the minutes 
of board of directors meetings, and the auditor’s analysis of capital stock transactions. 
The auditor should determine that each class of stock has a proper description, including 
the number of shares issued and outstanding and any special rights of an individual 
class. Auditors should also verify the proper presentation and disclosure of stock options, 
stock warrants, and convertible securities by examining legal documents or other 
evidence of the provisions of these agreements. 


The emphasis in the audit of dividends is on dividend transactions rather than on the 
ending balance. The exception is when there are dividends payable. 

All six transaction-related audit objectives for transactions are relevant for 
dividends. But typically, dividends are audited on a 100 percent basis. The most impor- 
tant objectives, including those concerning dividends payable, are: 


1. Recorded dividends occurred (occurrence). 

Existing dividends are recorded (completeness). 
Dividends are accurately recorded (accuracy). 

Dividends are paid to stockholders that exist (occurrence). 
Dividends payable are recorded (completeness). 
Dividends payable are accurately recorded (accuracy). 


Awe wD 


Auditors can verify the occurrence of recorded dividends by examining the minutes 
of board of directors meetings for authorization of the amount of the dividend per 
share and the dividend date. When doing so, the auditor should be alert to the possi- 
bility of unrecorded dividends declared, particularly shortly before the balance sheet 
date. A closely related audit procedure is to review the audit permanent file to 
determine whether restrictions exist on the payment of dividends in bond indenture 
agreements or preferred stock provisions. 

The accuracy of a dividend declaration can be audited by recalculating the amount 
on hApage: dPDE paARARACEeBumber of shares outstanding. If the 
client uses a transfer agent to disburse dividends, the total can be traced to a cash 
disbursement entry to the agent and also confirmed. 

When a client keeps its own dividend records and pays the dividends itself, the 
auditor can verify the total amount of the dividend by recalculation and reference to 
cash disbursed. In addition, auditors must verify whether the payment was made to the 
stockholders who owned the stock as of the dividend record date. They can test this by 
selecting a sample of recorded dividend payments and tracing the payee’s name on the 
cancelled check to the dividend records. At the same time, auditors can verify the 
amount and the authenticity of the dividend check. 

Tests of dividends payable should be done in conjunction with declared dividends. 
Any unpaid dividend should be included as a liability. 


For most companies, the only transactions involving retained earnings are net earnings 
for the year and dividends declared. Other changes in retained earnings may include 
corrections of prior-period earnings, prior-period adjustments charged or credited 
directly to retained earnings, and the setting up or elimination of appropriations of 
retained earnings. 

To begin the audit of retained earnings, auditors first analyze retained earnings for 
the entire year. The audit schedule showing the analysis, which is usually a part of the 
permanent file, includes a description of every transaction affecting the account. 

To accomplish the audit of the credit to retained earnings for net income for the year 
(or the debit for a loss) auditors simply trace the entry in retained earnings to the net 
earnings figure on the income statement. This procedure must, of course, take place fairly 
late in the audit after all adjusting entries affecting net earnings have been completed. 

In auditing debits and credits to retained earnings, other than net earnings and 
dividends, auditors must determine whether the transactions should have been included. 
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For example, prior-period adjustments can be included in retained earnings only if 
they satisfy the requirements of accounting standards. 

After the auditor is satisfied that the recorded transactions were correctly classified 
as retained earnings transactions, the next step is to decide whether they were accurately 
recorded. The audit evidence necessary to determine accuracy depends on the nature of 
the transactions. For example, if an appropriation of retained earnings is required for a 
bond sinking fund, auditors can determine the correct amount of the appropriation by 
examining the bond indenture agreement. If there is a major loss charged to retained 
earnings because of a material nonrecurring abandonment of a plant, the evidence 
needed to determine the amount of the loss can be complex and include examining a 
large number of documents and records, as well as discussions with management. 

Auditors must also evaluate whether any transactions should have been included 
but were not. For example, if the client declared a stock dividend, the market value of 
the securities issued should be capitalized by a debit to retained earnings and a credit to 
capital stock. Similarly, if the financial statements include appropriations of retained 
earnings, the auditor should evaluate whether it is still necessary to have the appropri- 
ation as of the balance sheet date. 

Accounting standards require presentation and disclosure of information related to 
retained earnings. The auditor’s primary concern in determining whether presentation 
and disclosure objectives for retained earnings are satisfied primarily relates to disclosure 
of any restrictions on the payment of dividends. Often, agreements with bankers, stock- 
holders, and other creditors prohibit or limit the amount of dividends the client can 
pay. These restrictions must be disclosed in the footnotes to the financial statements. 


SUMMARY 


This chapter discussed the audit of ital acd wise a y. which 
includes the primary sources of inn PASS. Dee. paver estes volves 
few transactions, but the individual transactions are often material, which influences the 
design and performance of tests in the cycle. The approach to auditing this cycle was 


illustrated for notes payable, related interest expense and accrued interest, and for owners’ 
equity and related accounts. 


ESSENTIAL TERMS 


Capital acquisition and repayment cycle— 
the transaction cycle that involves the 
acquisition of capital resources in the 
form of interest-bearing debt and owners’ 
equity, and the repayment of the capital 


Capital stock certificate record—a record 
of the issuance and repurchase of capital 
stock for the life of the corporation 


Closely held corporation—corporation 
with stock that is not publicly traded; 
typically, there are only a few shareholders 
and few, if any, capital stock account 
transactions during the year 


Independent registrar—outside person 
engaged by a corporation to make sure 
that its stock is issued in accordance with 
capital stock provisions in the corporate 
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charter and authorizations by the board 
of directors; required by the SEC for 
publicly held corporations 


Note payable—a legal obligation to a 
creditor, which may be unsecured or 
secured by assets 


Publicly held corporation—corporation 
with stock that is publicly traded; typically, 
there are many shareholders and frequent 
changes in the ownership of the stock 


Shareholders’ capital stock master file— 
a record of the issuance and repurchase 
of capital stock for the life of a corporation 


Stock transfer agent—outside person 
engaged by a corporation to maintain the 
stockholder records and often to disburse 
cash dividends 
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REVIEW QUESTIONS 


22-1 (Objective 22-1) List four examples of interest-bearing liability accounts commonly 
found in balance sheets. What characteristics do these liabilities have in common? How do 
they differ? 


22-2 (Objectives 22-1, 22-2) Why are liability accounts included in the capital acquisition 
and repayment cycle audited differently from accounts payable? 


22-3 (Objective 22-2) It is common practice to audit the balance in notes payable in 
conjunction with the audit of interest expense and interest payable. Explain the advantages 
of this approach. 


22-4 (Objective 22-2) Which internal controls should the auditor be most concerned about 
in the audit of notes payable? Explain the importance of each. 


22-5 (Objective 22-2) Which analytical procedures are most important in verifying notes 
payable? Which types of misstatements can the auditor uncover by the use of these tests? 


22-6 (Objective 22-2) Why is it more important to search for unrecorded notes payable 
than for unrecorded notes receivable? Suggest audit procedures that the auditor can use to 
uncover unrecorded notes payable. 


22-7 (Objective 22-2) What is the primary purpose of analyzing interest expense? Given 
this purpose, what primary considerations should the auditor keep in mind when doing 
the analysis? 


22-8 (Objective 22-2) Distinguish between (a) tests of controls and substantive tests of 
transactions and (b) tests of details of balances for liability accounts in the capital acquisi- 
tion and repayment cycle. 


22-9 (Objective 22-2) List two types of restrictions long-term creditors often put on 
companies when granting them a loan. How can the auditor find out about these restrictions? 


2-0 Apago2PDEt BAHAAGESK ctives in the audit of owners’ equity 


accounts? 


22-11 (Objectives 22-3, 22-4) Evaluate the following statement: “The corporate charter and 
the bylaws of a company are legal documents; therefore, they should not be examined by 
the auditors. If the auditor wants information about these documents, an attorney should 
be consulted.” 


22-12 (Objective 22-3) What are the major internal controls over owners’ equity? 


22-13 (Objective 22-3) How does the audit of owners’ equity for a closely held corporation 
differ from that for a publicly held corporation? In what respects are there no significant 
differences? 


22-14 (Objective 22-3) Describe the duties of a stock registrar and a transfer agent. How 
does the use of their services affect the client’s internal controls? 


22-15 (Objective 22-4) What kinds of information can be confirmed with a transfer agent? 


22-16 (Objective 22-4) Evaluate the following statement: “The most important audit 
procedure to verify dividends for the year is a comparison of a random sample of cancelled 
dividend checks with a dividend list that has been prepared by management as of the 
dividend record date.” 


22-17 (Objective 22-4) If a transfer agent disburses dividends for a client, explain how the 
audit of dividends declared and paid is affected. What audit procedures are necessary to 
verify dividends paid when a transfer agent is used? 


22-18 (Objective 22-4) What should be the major emphasis in auditing the retained 
earnings account? Explain your answer. 


22-19 (Objectives 22-3, 22-4) Explain the relationship between the audit of owners’ equity 
and the calculations of earnings per share. What are the main auditing considerations in 
verifying the earnings per share figure? 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


22-20 (Objective 22-2) The following multiple choice questions concern interest-bearing 
liabilities. Choose the best response. 

a. The audit program for long-term debt should include steps that require the 
(1) verification of the existence of the bondholders. 

(2) examination of any bond trust indenture. 

(3) inspection of the accounts payable master file. 

(4) investigation of credits to the bond interest income account. 

b. During the year under audit, a company has completed a private placement of a sub- 
stantial amount of bonds. Which of the following is the most important step in the 
auditor’s program for the audit of bonds payable? 

(1) Recomputing the annual interest cost and the effective yield. 

(2) Confirming the amount issued with the bond trustee. 

(3) Tracing the cash received from the issue to the accounting records. 

(4) Examining the bond records maintained by the transfer agent. 

c. Which of the following controls will most likely justify a reduced assessed level of 
control risk for the completeness assertion for notes payable? 

(1) The accounting staff reviews board of director minutes for any indication of any 
transactions involving outstanding debt to make sure all borrowings are included 
in the general ledger. 

(2) All borrowings that exceed $500,000 require approval from the board of directors 
before loan contracts can be finalized. 

(3) Before approving disbursement of principal payments on notes payable, the 
treasurer reviews terms in the note. 

(4) Accounting maintains a detailed schedule of outstanding note payable that is 
reconciled monthly to the general ledger. 

d. In the audit of notes payable, whApagocdPDRit Bnhance'lr one of 
the most important for the auditor to verify? 

(1) Notes payable reflected on the balance sheet at the end of the year exist. 

(2) Notes payable due to related parties are properly reflected on the balance sheet. 

(3) Existing notes payable are included on the balance sheet as of year end. 

(4) Notes payable are reflected at net realizable value as of the balance sheet date. 


22-21 (Objectives 22-2, 22-3, 22-4) The following questions concern the audit of accounts 
in the capital acquisition and repayment cycle. Choose the best response. 
a. During an audit of a publicly held company, the auditor should obtain written con- 
firmation regarding debenture transactions from the 
(1) debenture holders. (3) internal auditors. 
(2) client’s attorney. (4) trustee. 
b. An audit program for the audit of the retained earnings account should include a step 
that requires verification of 
(1) market value used to charge retained earnings to account for a 2-for-1 stock split. 
(2) approval of the adjustment to the beginning balance as a result of a write-down of 
an account receivable. 
(3) authorization for both cash and stock dividends. 
(4) gain or loss resulting from disposition of treasury shares. 


aa 


c. Which of the following internal controls is least likely to reduce risks related to the 

occurrence transaction-related audit objective for issuances of stock? 

(1) The board of directors must approve the distribution of cash dividends. 

(2) The issuance of any shares of stock must be pre-approved by the board of directors. 

(3) The company engages an independent registrar to issue stock certificates. 

(4) The company maintains a capital stock certificate record that includes certificate 
number, number of shares issued, issue date, and name of person to whom certifi- 
cates are issued. 
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d. 


Which of the following audit procedures would be most relevant when examining the 

completeness transaction-related audit objective for capital stock? 

(1) The auditor examines minutes of the board of directors’ meetings to identify any 
actions involving the issuance of capital stock. 

(2) The auditor vouches entries in the client’s capital stock records to board minutes. 

(3) Confirmations of new stock issuances are sent to the client’s stock transfer agent. 

(4) The auditor traces entries of new stock issuances to the cash receipts journal. 


DISCUSSION QUESTIONS AND PROBLEMS 


22-22 (Objective 22-2) Items 1 through 6 are questions typically found in a standard 


inter. 


nal control questionnaire used by auditors to obtain an understanding of internal 


control for notes payable. In using the questionnaire for a client, a “yes” response indicates 
a possible internal control, whereas a “no” indicates a potential deficiency. 


1 


Required a. 
b. 


Cc. 


. Are liabilities for notes payable incurred only after written authorization by a proper 
company official? 

. Is a notes payable master file maintained? 

. Is a periodic reconciliation made of the notes payable master file with the actual notes 
outstanding by an individual who does not maintain the master file? 

. Is the individual who maintains the notes payable master file someone other than the 
person who approves the issue of new notes or handles cash? 

. Are paid notes cancelled and retained in the company files? 

. Are interest expense and accrued interest recomputed periodically by an individual 
who does not record interest transactions? 


For each of the preceding questions, state the purpose of the control. 


For each of the preceding questigns, identify the type of financial statement misstate- 


nrAPAGO oc DEhe AC@K tect. 


For each of the potential misstatements in part b, list an audit procedure that can be 
used to determine whether a material misstatement exists. 


22-23 (Objective 22-2) The following are frequently performed audit procedures for the 
verification of bonds payable issued in previous years: 


1. 


ae WwW bY 


Required a. 


Analyze the general ledger account for bonds payable, interest expense, and unamor- 
tized bond discount or premium. 

. Obtain a confirmation from the bondholder. 

. Obtain a copy of the bond indenture agreement and review its important provisions. 
. Determine that each of the bond indenture provisions has been met. 

. Test the client’s calculations of interest expense, unamortized bond discount or 
premium, accrued interest, and bonds payable. 


State the purpose of each of the five audit procedures listed. 


. List the provisions for which the auditor should be alert in examining the bond 


indenture agreement. 


. For each provision listed in part b, explain how the auditor can determine whether its 


terms have been met. 


. Explain how the auditor should verify the unamortized bond discount or premium. 


. List the information that should be requested in the confirmation of bonds payable 


with the bondholder. 


22-24 (Objective 22-2) Your client, Red Horse Inc., prepared the following schedule for 


long 
2011 


term debt for the audit of financial statements for the year ended December 31, 
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Notes 1/1/11 12/31/11 








Payable Interest Due Beginning Ending 
Description Rate _— Date Balance Additions Payments Balance 
Mortgage Payable 6.25% 2020 §$ 1,125,000 - $200,000 $ 925,000 
Unsecured Notes 

Payable 6.00% 2022 7,500,000 - 475,000 7,025,000 
Secured Bonds 5.75% 2018 2,700,000 $ 1,250,000 300,000 3,650,000 
Convertible 

Debentures 5.25% 2025 - 10,000,000 - 10,000,000 
Total $11,325,000 $11,250,000 $975,000 $21,600,000 





a. What type of evidence would you examine to support the beginning balances in the 
accounts? 


. What types of evidence would you use to support the additions to each account? 

. What types of evidence would you examine to support payments? 

. What procedures would you perform related to the ending balances in the accounts? 
. What evidence would you use to verify interest rates and due dates? 


moan 


. How might you use the information presented above to audit interest expense and 
interest payable accounts? 


22-25 (Objective 22-2) The ending general ledger balance of $186,000 in notes payable for 
the Sterling Manufacturing Company is made up of 20 notes to eight different payees. The 
notes vary in duration anywhere from 30 days to 2 years, and in amounts from $1,000 to 
$10,000. In some cases, the notes were issued for cash loans; in other cases, the notes were 
issued directly to vendors for the acquisition of inventory or equipment. The use of 
relatively short-term financing is necessary because all existing properties are pledged for 
mortgages. Nevertheless, there is still a serious cash shortage. 

Record-keeping procedures for notes payable BpE not ae onsidering the large 
number of loan transactions. TherAPagas R ARARGEEndent 
verification of ending balances; however, the notes aa = are maintained by a 
secretary who does not have access to cash. 

The audit has been done by the same CPA firm for several years. In the current year, the 
following procedures were performed to verify notes payable: 

1. Obtain a list of notes payable from the client, foot the notes payable balances on the 

list, and trace the total to the general ledger. 

2. Examine duplicate copies of notes for all outstanding notes included on the listing. 
Compare the name of the lender, amount, and due date on the duplicate copy with 
the list. 

3. Obtain a confirmation from lenders for all listed notes payable. The confirmation 
should include the due date of the loan, the amount, and interest payable at the 
balance sheet date. 

4, Recompute accrued interest on the list for all notes. The information for determining 
the correct accrued interest is to be obtained from the duplicate copy of the note. Foot 
the accrued interest amounts and trace the balance to the general ledger. 


a. What should be the emphasis in the verification of notes payable in this situation? 
Explain. 

b. State the purpose of each of the four audit procedures listed. 

c. Evaluate whether each of the four audit procedures was necessary. Evaluate the sample 
size for each procedure. 

d. List other audit procedures that should be performed in the audit of notes payable in 
these circumstances. 


22-26 (Objective 22-2) The following covenants are extracted from the indenture of a bond 
issue. The indenture provides that failure to comply with its terms in any respect auto- 
matically makes the loan immediately due (the regular date is 20 years hence). List any audit 
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Required 


Required 
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Required 


Required 


steps or reporting requirements you think should be taken or recognized in connection 
with each one of the following: 


a. The debtor company shall endeavor to maintain a working capital ratio of 2 to 1 at all 
times, and in any fiscal year following a failure to maintain said ratio, the company 
shall restrict compensation of officers to $100,000 per individual. Officers for this 
purpose shall include chairman of the board of directors, president, all vice presidents, 
secretary, and treasurer. 


b. The debtor company shall keep all property that is security for this debt insured 
against loss by fire to the extent of 100% of its actual value. Policies of insurance 
comprising this protection shall be filed with the trustee. 


c. The debtor company shall pay all taxes legally assessed against property that is security 
for this debt within the time provided by law for payment without penalty and shall 
deposit receipted tax bills or equally acceptable evidence of payment of same with the 
trustee. 


d. A sinking fund shall be deposited with the trustee by semiannual payments of 
$300,000, from which the trustee shall, in his discretion, purchase bonds of this issue.* 


22-27 (Objective 22-2) The Redford Corporation took out a 20-year mortgage on June 15, 
2011, for $2,600,000 and pledged its only manufacturing building and the land on which 
the building stands as collateral. Each month subsequent to the issue of the mortgage, a 
payment of $20,000 was paid to the mortgagor. You are in charge of the current year audit 
for Redford, which has a balance sheet date of December 31, 2011. The client has been 
audited previously by your CPA firm, but this is the first time Redford Corporation has had 
a mortgage. 


a. Explain why it is desirable to prepare an audit schedule for the permanent file for the 
mortgage. What type of information should be included in the schedule? 


b. Explain why the audit of mortgage payable, interest expense, and interest payable 


‘Apa uld all be slong ‘pie 
c.L St EG? cee ures mo nhancer,.. performed to verify the issue of the 


mortgage, the balance in the mortgage and interest payable accounts at December 31, 
2011, and the balance in interest expense for the year 2011. 


d. Identify the types of information that should be disclosed in the footnotes for this 
long-term note payable to help the auditor determine whether the completeness 
presentation and disclosure audit objective is satisfied. 


22-28 (Objectives 22-3, 22-4) Items 1 through 6 are common questions found in internal 
control questionnaires used by auditors to obtain an understanding of internal control for 
owners’ equity. In using the questionnaire for a client, a “yes” response indicates a possible 
internal control, whereas a “no” indicates a potential deficiency. 
1. Does the company use the services of an independent registrar or transfer agent? 
2. If an independent registrar and transfer agent are not used: 
(a) Are unissued certificates properly controlled? 
(b) Are cancelled certificates mutilated to prevent their reuse? 
3. Are common stock master files and stock certificate books periodically reconciled 
with the general ledger by an independent person? 
4. Is an independent transfer agent used for disbursing dividends? If not, is an imprest 
dividend account maintained? 
. Are issues and retirements of stock authorized by the board of directors? 
6. Are all entries in the owners’ equity accounts authorized at the proper level in the 
organization? 


wn 


a. For each of the preceding questions, state the purpose of the control. 


b. For each of the preceding questions, identify the type of potential financial statement 
misstatements if the control is not in effect. 


*AICPA adapted. 
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c. For each of the potential misstatements in part b, list an audit procedure that the 
auditor can use to determine whether a material misstatement exists. 


22-29 (Objectives 22-3, 22-4) The following audit procedures are commonly performed by 
auditors in the verification of owners’ equity: 


1. Review the articles of incorporation and bylaws for provisions about owners’ equity. 

2. Analyze all owners’ equity accounts for the year and document the nature of any 
recorded change in each account. 

3. Account for all certificate numbers in the capital stock book for all shares outstanding. 

. Examine the stock certificate book for any stock that was cancelled. 

5. Review the minutes of the board of directors’ meetings for the year for approvals 
related to owners’ equity. 

6. Recompute earnings per share. 

7. Review debt provisions and senior securities with respect to liquidation preferences, 
dividends in arrears, and restrictions on the payment of dividends or the issue of stock. 


eS 


a. State the purpose of each of these seven audit procedures. 


b. List the type of misstatements the auditors can uncover by the use of each audit 
procedure. 


22-30 (Objectives 22-3, 22-4) You are engaged in the audit of a corporation whose records 
have not previously been audited by you. The corporation has both an independent 
transfer agent and a registrar for its capital stock. The transfer agent maintains the record of 
stockholders and the registrar checks that there is no overissue of stock. Signatures of both 
are required to validate certificates. 

It has been proposed that confirmations be obtained from both the transfer agent and 
the registrar as to the stock outstanding at the balance sheet date. If such confirmations 
agree with the books, no additional work is to be performed as to capital stock. 


If you agree that obtaining the confirngations as age PoE... uff ane: in this er. give 
the justification for your position. If Saha @hal steps 
you would take and explain your reasons for vi them.* 


22-31 (Objective 22-4) You are a CPA engaged in an audit of the financial statements of 
Pate Corporation for the year ended December 31, 2011. The financial statements and 
records of Pate Corporation have not been audited by a CPA in prior years. 

The stockholders’ equity section of Pate Corporation’s balance sheet at December 31, 
2011, follows: 








Stockholders’ Equity 

Capital stock 10,000 shares of $10 par value authorized; $ 50,000 
5,000 shares issued and outstanding 

Capital contributed in excess of par value of capital stock 32,580 

Retained earnings 47,320 
Total stockholders’ equity $129,900 





Pate Corporation was founded in 2004. The corporation has 10 stockholders and serves 
as its own registrar and transfer agent. There are no capital stock subscription contracts in 
effect. 


a. Prepare the detailed audit program for the audit of the three accounts comprising the 
stockholders’ equity section of Pate Corporation’s balance sheet. (Do not include in 
the audit program the verification of the results of the current year’s operations.) 

b. After every other figure on the balance sheet has been audited, it might appear that the 
retained earnings figure is a balancing figure and requires no further verification. Why 
does the CPA verify retained earnings as is done with the other figures on the balance 
sheet? Discuss.* 


*AICPA adapted. 
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Required 


22-32 (Objective 22-3) E-Antiques, Inc. is an Internet-based market maker for buyers and 
sellers of antique furniture and jewelry. The company allows sellers of antique items to list 
descriptions of those items on the E-Antiques Web site. Interested buyers review the Web 
site for antique items and then enter into negotiations directly with the seller for purchase. 
E-Antiques receives a commission on each transaction. 

The company, founded in 2007, initially obtained capital through equity funding 
provided by the founders and through loan proceeds from financial institutions. In early 
2010, E-Antiques became a publicly held company when it began selling shares on a 
national stock exchange. Although the company had never generated profits, the stock 
offering generated large proceeds based on favorable expectations for the company, and the 
stock quickly increased to above $100 per share. 

Management used the proceeds to pay off loans to financial institutions and to reacquire 
shares issued to the company founders. Proceeds were also used to fund purchases of 
hardware and software used to support the online market. The balance of unused proceeds 
is currently held in the company’s bank accounts. 


a. Before performing analytical procedures related to the capital acquisition and 
repayment cycle accounts, consider how the process of becoming publicly held will 
affect accounts at E-Antiques, Inc. Describe whether each of the following balances 
would have increased, decreased, or experienced no change between 2009 and 2010 
because of the public offering: 


(1) Cash (7) Additional paid-in capital 
(2) Accounts receivable (8) Retained earnings 

(3) Property, plant, and equipment (9) Treasury stock 

(4) Accounts payable (10) Dividends 

(5) Long-term debt (11) Revenues 


(6) Common stock 


b. During 2011, the stock price for E-Antiques plummeted to around $19 per share. No 
new shares were issued during 2011. Describe the impact of this drop in stock price on 
tApageacRDFor @NCEMnber 31, 2011: 

(1) Common stock 
(2) Additional paid-in capital 
(3) Retained earnings 

c. How does the decline in stock price affect your assessment of client business risk and 

acceptable audit risk? 


INTERNET PROBLEM 22-1: OVERVIEW OF THE NYSE 


Required 


Many companies aspire to go public and have their shares traded on exchanges such as 
the New York Stock Exchange (NYSE) and NASDAQ. Visit the Website of the NYSE 
(www.nyse.com) and search for the “Guide to the NYSE Marketplace” to answer the 
following questions. 


a. What two U.S. securities exchanges does the NYSE Group Inc. operate? Briefly 
describe each. 


. What is required to be able to trade securities on the NYSE trading floor? 

. How many shares does the NYSE have the capacity to trade in a single trading day? 

. How do most trade orders reach the NYSE trading floor? 

. What federal agency oversees the NYSE and its member organizations? 

. Describe the three widely cited stock market indexes described in the NYSE materials. 


ce moan we 


. Describe the five basic categories of stock. 
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AUDIT OF CASH BALANCES 


Fake Bank Confirmation Hides Massive Fraud 


LEARNING OBJECTIVES 


Calisto Tanzi formed Parmalat in 1961 at the age of 22 after inheriting a ; ; 
small family-run pasteurization plant in the Italian town of Parma. In 1990, sheet te chapter, 
the company went public on the Milan stock exchange. By the end of that Yor ee wes Gonciae 
decade, Parmalat employed more than 30,000 people in 30 countries, was 23-1 Show the relationship of cash 
Italy's eighth largest company, and a global consumer brand that sought to in the bank to the various 
be the “Coca-Cola of milk.” Baton Oucyaes 

23-2 Identify the major types of cash 
Parmalat began engaging in fraudulent transactions involving fictitious sales accounts maintained by business 
as early as 1993, and investigators indicate that without the fraud, Parmalat enuueS, 
would have reported losses every year from 1990 until the fraud was 23-3 Design and perform audit tests 
revealed in 2003. During the period, the company took on increasing levels of the general cash account. 
of debt to finance international acquisitions. To raise money and increase 23-4 Recognize when to extend audit 
sales, Parmalat established three Caribbean shell companies. The shell tests of the general cash account 
companies pretended to sell Parmalat products, and Parmalat used credit freee Tater dovenateta aud: 
notes from the shell companies to raise money from banks. 23-5 Design and perform audit tests 

of the imprest payroll bank 

In 1999 the activities of the shell companies were transferred to the Cayman account 
Islands. Two outside auditors allegedly came up with the audacious creation 23-6 Design and perform audit tests 
of a bogus milk producer in Singapore that provided 300,000 tons of milk OA MMUBUCS pase eaah 














powder to a Cuban importer thoa&pagonk#YFca neer 
subsidiary. Parmalat claimed that the Cayman Islands subsidiary held €3.95 

billion in cash in a New York bank, but the account did not exist. A forged bank confirmation was sent to the subsidiary’s 
auditors to support the fraudulent cash balance. 


Parmalat’s losses totaled € 12 billion, and in 2008, Tanzi was sentenced to 10 years in prison for his role in the fraud. The 
company restructured and in 2005 was relisted on the Milan stock exchange. 


Sources: Adapted from Peter Gumbel, “How It All Went So Sour,” Time (November 21, 2004) (www.time.com/time/magazine). 


ash is the only account included in every cycle except inventory and warehousing. It makes sense to study this 
C audit area last because the evidence accumulated for cash balances depends heavily on the results of the tests in 
other cycles. For example, if the auditors’ understanding of internal control and tests of controls and substantive tests 
of transactions in the acquisition and payment cycle cause them to believe that it is appropriate to reduce assessed 
control risk to low, they can reduce detailed tests of the ending balance in cash. If, however, auditors conclude that 
assessed control risk should be higher, extensive year-end testing may be necessary. 

Cash is important because of its susceptibility to theft, and cash can also be significantly misstated as illustrated 
in the case of Parmalat. This chapter highlights the linkage of cash in the bank to transaction cycles and describes 
substantive tests of the cash balance. 


CASH IN THE BANK AND TRANSACTION CYCLES 


OBJECTIVE 23-1 





Show the relationship of 
cash in the bank to the 
various transaction cycles. 





A brief discussion of the relationship between cash in the bank and the other transaction 
cycles serves a dual function: 


1. It shows the importance of audit tests of various transaction cycles on the audit 
of cash. 

2. It aids in further understanding the integration of the different transaction 
cycles. 


Figure 23-1 illustrates the relationships of the various transaction cycles, the focal 
point being the general cash account (“Cash in bank”). By examining Figure 23-1, it is 
apparent why the general cash account is considered significant in almost all audits, 
even when the ending balance is immaterial. The amount of cash flowing into and out 
of the cash account is often larger than that for any other account in the financial state- 
ments. Furthermore, the susceptibility of cash to embezzlement is greater than for 
eo | S ags® SBF mp BS aly ay be converted to cash to make them 

In the audit of cash, auditors must distinguish between verifying the client’s 
reconciliation of the balance on the bank statement to the balance in the general ledger, 
and verifying whether recorded cash in the general ledger correctly reflects all cash 
transactions that took place during the year. It is relatively easy to verify the client’s 
reconciliation of the balance in the bank account to the general ledger, but a significant 
part of the total audit of a company involves verifying whether cash transactions are 
correctly recorded. For example, each of the following misstatements ultimately results 
in the improper payment of or the failure to receive cash, but none will normally be 
discovered as a part of the audit of the bank reconciliation: 


* Failure to bill a customer 

* An embezzlement of cash by intercepting cash receipts from customers before 
they are recorded, with the account charged off as a bad debt 

* Duplicate payment of a vendor’s invoice 

* Improper payments of officers’ personal expenditures 

* Payment for raw materials that were not received 

* Payment to an employee for more hours than he or she worked 

* Payment of interest to a related party for an amount in excess of the going rate 


If these misstatements are to be uncovered in the audit, their discovery must occur 
through tests of controls and substantive tests of transactions, which we discussed in 
preceding chapters. The first two misstatements can be discovered as part of the audit 
of the sales and collection cycle (Chapter 14), the next three in the audit of the 
acquisition and payment cycle (Chapter 18), and the last two in the tests of the payroll 
and personnel cycle (Chapter 20) and the capital acquisition and repayment cycle 
(Chapter 22), respectively. 
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fae Relationships of Cash in the Bank and Transaction Cycles | 
Capital Acquisition and Repayment Cycle* Acquisition and Payment Cycle 
Capital stock—common Dividends payable Accounts payable 
(1) Redemption | Issue of Payment Payment 
of stock stock of 
dividends 
Paid-in capital 
in excess 
of par—common 
(1) Redemption | Issue of 
of stock stock 
(1) Decrease cash 
Sales and Collection Cycle Payroll and Personnel Cycle 
Accrued wages, 
salaries, bonuses, 
Gross sales and commissions 
Cash Payment 
sales Cash Vee a 
discounts 
Accounts receivable taken 
Cash Withheld income taxes 
receipts Daa and other deductions 
Payment | 
Accrued payroll 
tax expense 
Payment | 
*For simplicity, only owners’ equity accounts are shown in this figure. For notes payable accounts, see Figure 22-1 on page 714. 
Entirely different types of misstatements are normally discovered as a part of the 
tests of the bank reconciliation. These include: 
* Failure to include a check that has not cleared the bank on the outstanding check 
list, even though it has been recorded in the cash disbursements journal 
* Cash received by the client subsequent to the balance sheet date but recorded as 
cash receipts in the current year 
* Deposits recorded as cash receipts near the end of the year, deposited in the 
bank in the same month, and included in the bank reconciliation as a deposit in 
transit 
* Payments on notes payable debited directly to the bank balance by the bank but 
not entered in the client’s records 
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TYPES OF CASH ACCOUNTS 


OBJECTIVE 23-2 





Identify the major types of 
cash accounts maintained 
by business entities. 





General Cash Account 


Imprest Accounts 


Branch Bank Account 


Imprest 
Petty Cash Fund 


Before dealing with audit tests of the client’s bank reconciliation, it is helpful to discuss 
the types of cash accounts commonly used by most companies, because the auditing 
approach to each varies. Auditors are likely to learn about the various types of cash 
balances when they obtain an understanding of the client’s business. The following are 
the major types of cash accounts. 


The general cash account is the focal point of cash for most organizations because 
virtually all cash receipts and disbursements flow through this account. For example, the 
disbursements for the acquisition and payment cycle are normally paid from this account, 
while the receipts of cash in the sales and collection cycle are deposited in the account. 


As discussed in Chapter 20 (p. 663), many companies establish a separate imprest pay- 
roll account to improve internal control over payroll disbursements. A fixed balance, 
such as $5,000, is maintained in the imprest payroll bank account. Immediately before 
each pay period, one check or electronic transfer is drawn on the general cash account to 
deposit the total amount of the net payroll into the payroll account. After all payroll 
payments have cleared the imprest payroll account, the bank account should have a 
$5,000 balance. The only deposits into the account are for the weekly and semimonthly 
payroll, and the only disbursements are payments to employees. 

A somewhat different type of imprest account consists of one bank account for 
receipts and a separate one for disbursements. There may be several of these in a 
company for different divisions. All receipts are deposited in the imprest account, and 
the total is transferred to the general account periodically. The disbursement account is 
set up on an imprest basis, but in a different manner than an imprest payroll account. A 
fixed balance is maintained in the imprest account, and the authorized personnel use 
these Apago PDF" Entra reer io as long as the payments are 
consistefft with company policy. When the cash balance has been depleted, a reim- 
bursement is made to the imprest disbursement account from the general account after 
the expenditures have been approved, usually through an online transfer. The use of 
such an imprest bank account improves controls over receipts and disbursements. 


For a company operating in multiple locations, it is often desirable to have a separate 
bank balance at each location. Branch bank accounts are useful for building banking 
relations in local communities and permitting the centralization of operations at the 
branch level. 

In some companies, the deposits and disbursements for each branch are made to a 
separate bank account, and the excess cash is periodically transferred electronically to 
the main office general bank account. The branch account in this instance is much like 
a general account, but at the branch level. 


An imprest petty cash fund is not a bank account, but it is sufficiently similar to cash 
in the bank to merit inclusion. A petty cash account is often something as simple as a 
preset amount of cash set aside in a cash box for incidental expenses. It is used for small 
cash acquisitions that can be paid more conveniently and quickly by cash than by check, 
or for the convenience of employees in cashing personal or payroll checks. An imprest 
cash account is set up on the same basis as an imprest branch bank account, but the 
expenditures are normally for much smaller amounts. Typical expenses include minor 
office supplies, stamps, and employee meals. A petty cash account usually does not 
exceed a few hundred dollars and is often reimbursed only once or twice each month. 

Many organizations use pre-approved purchase cards (known as P-cards) to make 
miscellaneous purchases instead of maintaining a petty cash fund. These purchase 
cards function much like a credit card, but contain numerous restrictions on the nature 
and amount of purchases that can be made. 
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fiueeeaen Relationship of General Cash to Other Cash Accounts ) 


Branch bank Imprest payroll 
account account 


General 
cash 
Imprest 
petty cash 
fund 





Cash 
equivalents 














Companies often invest excess cash accumulated during certain parts of the operating Cash Equivalents 
cycle that will be needed in the reasonably near future in short-term, highly liquid cash 

equivalents. These may include time deposits, certificates of deposit, and money 

market funds. Cash equivalents, which can be highly material, are included in the 

financial statements as a part of the cash account only if they are short-term invest- 

ments that are readily convertible to known amounts of cash, and there is insignificant 

risk of a change of value from interest rate changes. Marketable securities and longer- 

term interest-bearing investments are not cash equivalents. 

Figure 23-2 shows the relationship of general cash to the other cash accounts. All 
cash either originates from or is defipg ago PDE Pnbbanewert this 
chapter, the focus is on auditing thréé typts of accounts: the general cash account, 
imprest payroll bank account, and imprest petty cash. The other accounts are similar 
enough to these that we need not discuss them separately. 


AUDIT OF THE GENERAL CASH ACCOUNT 


The trial balance of Hillsburg Hardware Co. on page 150 includes only one cash OBJECTIVE 23-3 
account. Notice, however, that all cycles, except inventory and warehousing, affect cash 
in the bank. 





Design and perform audit 
: : : tests of the general cash 
In testing the year-end balance in the general cash account, the auditor must account. 


accumulate sufficient appropriate evidence to evaluate whether cash, as stated on the 
balance sheet, is fairly stated and properly disclosed in accordance with five of the eight 
balance-related audit objectives used for all tests of details of balances (existence, 
completeness, accuracy, cutoff, and detail tie-in). Rights to general cash and its classifi- 
cation on the balance sheet are generally not of concern, and the realizable value of 
cash is not applicable. 

The methodology for auditing year-end cash is essentially the same as that for all 
other balance sheet accounts and discussed in detail. 





Most companies are unlikely to have significant client business risks affecting cash Identify Client 
balances. However, client business risk may arise from inappropriate cash management Business Risks 
policies or handling of funds held in trust for others. Affecting Cash 

Client business risk is more likely to arise from cash equivalents and other types (Phase I) 


of investments. Several financial services firms have suffered large trading losses 
from the activities of individual traders that were hidden by misstating investment 
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Set Tolerable 
Misstatement and 
Assess Inherent Risk 
(Phase I) 


Assess Control Risk 
(Phase 1) 


and cash balances. The auditor should understand the risks from the client’s investment 
policies and strategies, as well as management controls that mitigate these risks. 


The cash balance is not material on many audits, but cash transactions affecting the 
balance are almost always extremely material. Therefore, the potential often exists for 
material misstatement of cash. 

Because cash is more susceptible to theft than other assets, there is high inherent risk 
for the existence, completeness, and accuracy objectives. These objectives are usually the 
focus in auditing cash balances. Typically, inherent risk is low for all other objectives. 


Internal controls over year-end cash balances in the general account can be divided 
into two categories: 
1. Controls over the transaction cycles affecting the recording of cash receipts and 
disbursements 
2. Independent bank reconciliations 


In preceding chapters, we discussed controls affecting the recording of cash trans- 
actions, which are essential in assessing control risk for cash. For example, in the 
acquisition and payment cycle (Chapter 18), major controls include adequate segrega- 
tion of duties between the check signing and accounts payable functions, signing of 
checks only by a properly authorized person, use of prenumbered checks printed on 
special paper, careful review of supporting documentation by the check signer before 
checks are signed, and adequate internal verification. Similar controls apply to electronic 
payments. If controls affecting cash-related transactions are operating effectively, 
control risk is reduced as are the audit tests for the year-end bank reconciliation. 

A monthly bank reconciliation of the general bank account on a timely basis by 
someone independent of the handling or recording of cash receipts and disbursements 
is an essential control over the ending cash balance. Companies with significant cash 
balances and large volumes of cash transactions may reconcile cash on a daily basis to 
onl RPAGSBDE* "RAAT qpating bank reconciliations for long 
periods, the vatue of the control is reduced and may affect the auditor’s assessment of 
control risk for cash. The reconciliation ensures that the accounting records reflect the 
same cash balance as the actual amount of cash in the bank after considering recon- 
ciling items. More important, the independent reconciliation provides an opportunity 
for an internal verification of cash receipts and disbursements transactions. If the bank 
statements are received unopened by the reconciler, and physical control is maintained 
over the statements until the reconciliations are complete, copies of cancelled checks, 
duplicate deposit slips, and other documents included in the statement can be examined 
without concern for the possibility of alterations, deletions, or additions. A careful 
bank reconciliation by competent client personnel includes the following actions: 

* Compare cancelled checks or electronic bank records of payment with the cash 

disbursements records for date, payee, and amount 

* Examine cancelled checks or electronic bank records of payment for signature, 

endorsement, and cancellation 

* Compare deposits in the bank with recorded cash receipts for date, customer, 

and amount 
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POSITIVE 
PAY REDUCES 
CHECK FRAUD 


Positive pay is an automated fraud detection tool provided by the company. All three components 
offered by most banks. A company using positive of the check must match exactly for the check to 
pay sends a file of issued checks to the bank each be paid. When a check is presented that does not 
day that checks are written. The file sent to the match, it is reported as an exception and an image 
bank includes the check number, account number, of the check is sent to the company. The company 
issue date, and dollar amount. The positive pay reviews the image and instructs the bank to pay 
service matches the account number, check or return the check. 

number and dollar amount of each check Source: Adapted from “All About Positive Pay” 
presented for payment against the list of checks (http://positivepay.net). 
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* Account for the numerical sequence of checks, and investigate missing ones 

* Reconcile all items causing a difference between the book and bank balance and 
verify their appropriateness for the client’s business 

* Reconcile total debits on the bank statement with the totals in the cash disburse- 
ments records 

* Reconcile total credits on the bank statement with the totals in the cash receipts 
records 

* Review month-end interbank transfers for appropriateness and proper recording 

* Follow up on outstanding checks and stop-payment notices 


Most accounting software packages incorporate bank reconciliation as a part of 
end-of-month procedures. Even though the software reduces the clerical efforts in per- 
forming the bank reconciliations, the preparer still needs to do most of the procedures 
listed above. The bank reconciliation control is enhanced when a qualified employee 
reviews the monthly reconciliation as soon as possible after its completion. 


Because the cash balance is affected by all other cycles except inventory and warehousing, 
an extremely large number of transactions affect cash. In several earlier chapters, we 
discussed in detail the appropriate tests of controls and substantive tests of transactions 
for the audit of each cycle. For example, controls over cash receipts were studied in 
Chapter 14, and controls over cash disbursements were studied in Chapter 18. Cash 
transactions are audited through these transaction cycle tests. 


In many audits, the year-end bank reconciliation is extensively audited. Using analytical 
procedures to test the reasonableness of the cash balance is therefore less important than 
it is for most other audit areas. 

Auditors commonly compare the ending balance on the bank reconciliation, deposits 
in transit, outstanding checks, and other reconciling items with the prior-year recon- 
ciliation. Similarly, auditors normally compare the SDE En in cash with previous 


months’ balances. These analytical paRag Qay RDE: nBa Ged. 


The starting point for the verification of the balance in the general bank account is to 
obtain a bank reconciliation from the client for inclusion in the auditor’s documen- 
tation. Figure 23-3 (p. 738) shows a bank reconciliation after the client has made 
adjustments to the account balance. Notice that the bottom figure in the audit schedule 
is the adjusted balance in the general ledger, which is the balance that should appear on 
the financial statements. The auditor must determine that the client has made adjust- 
ments such as those at the bottom of Figure 23-3, if they are material. 

To audit cash in the bank, the auditor verifies whether the bank reconciliation received 
from the client is correct. The balance-related audit objectives and common tests of 
details of balances in the audit of the cash account are shown in Table 23-1 (p. 739). The 
most important objectives are existence, completeness, and accuracy. Therefore, they 
receive the greatest attention. In addition to these balance-related objectives, the auditor 
also performs tests related to the four presentation and disclosure objectives, such as 
review of minutes and loan agreements to determine if there are restrictions on cash that 
must be disclosed. As in all other audit areas, the actual audit procedures depend on 
materiality and the risks in cash that the auditor has identified in other parts of the audit. 

The following three procedures merit additional discussion because of their 
importance and complexity: receipt of a bank confirmation, receipt of a cutoff bank 
statement, and tests of the bank reconciliation. 


Receipt of a Bank Confirmation Bank confirmations are not required for audits of 
non-public entities or under international auditing standards. However, auditors 
usually obtain a direct receipt of a confirmation from every bank or other financial 
institution with which the client does business, except when there is an unusually large 
number of inactive accounts. If the bank does not respond to a confirmation request, the 
auditor should send a second request or ask the client to communicate with the bank to 
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Design and Perform 
Tests of Controls 
and Substantive 
Tests of Transactions 
(Phase II) 


Design and Perform 
Analytical Procedures 
(Phase III) 


Design Tests of Details 
of Cash Balance 
(Phase III) 
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Clawson Industries Schedule A-2 
Bank Reconciliation Prepared by Clheat/DED 7/10/12 
12/31/11 Approved by S%/ 1/18/12 











Acct. 101 — General account, First National Bank 


Balance per Bank 109713. XA-2/7 
Add: 
Deposits in transit 
12/30 10017 / 
12/31 11100 ¥ PANU IG/ 
Deduct 
Outstanding checks 
#7993 12/16 3068 
8007 12/16 9763 XK 
8012 12/23 11916 X 
8013 12/23 14717 X 
8029 12/28 AT 37998 XK 
8038 12/30 A-7 10000 X <87462> 


Other reconciling items: Bank error 
Deposit for another bank customer credited 


to General account by bank, in error <15200> A-3 
Balance per bank, adjusted 28168 TB 
Balance per books before adjustments went A-/ 
Adjustments: 

Unrecorded bank service charge 216 A-3 


Nonsufficient funds check 
returned by bank, not collectible 








from customer 4200 <4416> = @-3// 
Balance per books, adjusted 28168 A-/ 
M 
X tTaced and agreed to bank confirmation. 


7 ‘Traced deposit to the December 2011 cash receipts records and te the January 2012 
12/31/11 
% Traced chech te December 2011 cash disbursements records and ta the January 2012 
1.2131/11 
TB Traced to 12/31/11 adjusted trial balance 


M Gooted 











ask them to complete and return the confirmation to the auditor. As a convenience to 
auditors as well as to bankers who are requested to fill out bank confirmations, the 
AICPA has approved the use of a standard bank confirmation form. Figure 23-4 
(p. 740) illustrates a completed standard confirmation, called a “standard form to 
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Balance-Related Audit Objectives and Tests of Details of Balances for General Cash in 
the Bank 





Balance-Related 
Audit Objective 


Common Tests of Details 
of Balances Procedures 


Comments 





Cash in the bank as stated on the 
reconciliation foots correctly and 
agrees with the general ledger 
(detail tie-in). 


Foot the outstanding check and electronic 
payment list and deposits in transit. 

Prove the bank reconciliation as to 
additions and subtractions, including 
all reconciling items. 

Trace the book balance on the 
reconciliation to the general ledger. 


These tests are done entirely on the bank 
reconciliation, with no reference to 
documents or other records except the 
general ledger. 





Cash in the bank as stated on the 
reconciliation exists (existence). 
Existing cash in the bank is recorded 
(completeness). 

Cash in the bank as stated on 
the reconciliation is accurate 
(accuracy). 


(See extended discussion for each of these.) 
Receipt and tests of a bank confirmation. 


Receipt and tests of a cutoff bank statement. 


Tests of the bank reconciliation. 
Extended tests of the bank reconciliation. 
Proof of cash. 

Tests for kiting. 


These are the three most important objectives 
for cash in the bank. The procedures are 
combined because of their close inter- 
dependence. The last three procedures 
should be done only when there are 
internal control deficiencies. 





Cash receipts and cash disbursements 
transactions are recorded in the 
proper period (cutoff). 





Cash receipts: 

Count the cash on hand on the last day 
of the year and subsequently trace to 
deposits in transit and the cash receipts 
journal. Trace deposits in transit to 
subsequent period bank statement 
(cutoff bank statement). 


Cash disbursements: 

Record the last check number used on the 
last day of the year and subsequently 
trace to the outstanding checks and the 
cash disbursements journal. 

Trace outstanding checks to subsequent 
period bank statement. 


When cash receipts received after year-end 
are included in the journal, a better cash 
position than actually exists is shown. It is 
called “holding open” the cash receipts 
journal. Holding open the cash disburse- 
ments journal reduces accounts payable 
and usually overstates the current ratio. 

The first procedure listed for receipts and 
disbursements cutoff tests requires the 
auditor's presence on the client's premises 
at the end of the last day of the year. 








confirm account balance information with financial institutions.” This standard form 
has been agreed upon by the AICPA and the American Bankers Association. As discussed 
in the text insert on page 741, bank confirmations are often sent electronically, and 
some banks will only respond to confirmation requests sent electronically through a 
designated third-party intermediary. 

The importance of bank confirmations in the audit extends beyond the verifi- 
cation of the actual cash balance. Typically, the bank confirms loan information and 
bank balances on the same form, such as the three outstanding loans in Figure 23-4. 
Information on liabilities to the bank for notes, mortgages, or other debt typically 
includes the amount and date of the loan, the loan due date, interest rate, and the 
existence of collateral. 

Banks are not responsible for searching their records for bank balances or loans 
beyond those included on the form by the CPA firm’s client. A statement near the 
bottom of the form obligates banks to inform the CPA firm of any loans not included 
on the confirmation about which the bank has knowledge. The effect of this limited 
responsibility is to require auditors to satisfy themselves about the completeness 
objective for unrecorded bank balances and loans from the bank in another manner. 
Similarly, banks are not expected to inform auditors of such things as open lines of 
credit, compensating balance requirements, or contingent liabilities for guaranteeing 
the loans of others. If auditors want confirmation of this type of information, they 
should obtain a separate confirmation from the financial institution addressing the 
matters of concern. 
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Standard Confirmation of Financial Institution Account Balance 
Information 








Clawson Industries 


Schedule 4-2/7 Date 
Bank Confirmation Prepared by 325 solt2 
12/31/11 Approved by sw 1/48/12 





STANDARD FORM TO CONFIRM ACCOUNT 
BALANCE INFORMATION WITH FINANCIAL INSTITUTIONS 


Clawson Industries 
CUSTOMER NAME 


[ ] We have provided to our accountants the following information as of 
the close of business on December 31, 2011, regarding our deposit 





Financial and loan balances. Please confirm the accuracy of the information, 
= 2 i noting any exceptions to the information provided. If the balances 
Institution's First National Bank have been left blank, please complete this form by furnishing the 
balance in the appropriate space below* Although we do not request 
Name and 200 Oak Street nor expect you to conduct a comprehensive, detailed search of 
Address Midvale, Illinois 40093 your records, if during the process of completing this confirmation 


additional information about other deposit and loan accounts we 
may have with you comes to your attention, please include such 
information below. Please use the enclosed envelope to return the 
form directly to our accountants. 


1. At the close of business on the date listed above, our records indicated the following deposit balance(s): 





ACCOUNT N 


AME | ACCOUNT NUMBER 


| INTEREST RATE | 


BALANCE* 








General account | 


1975 1-974 


None 


109,713.11 A-2 








2. We were directly liable to the financial institution for loans at the close of business on the date listed above as follows: 






































ACCOUNT NO./ 7 DATE THROUGH WHICH | DESCRIPTION OF 
DESCRIPTION | BALANCE Dus WS |) Wiuesieewliteue INTEREST IS PAID COLLATERAL 
N/A 50,000.00 | 1/9/12 4.75% N/A General 
N/A 90,000.00 | 1/9/12 4.625% N/A Security 
N/A 60,000.00 | 1/23/12 4.75% N/A Agreement 

a Vamary 5, 20/2 
(Customer's Authorized Signature) (Date) 


The information presented above by the customer is in agreement with our records. Although we have not conducted 
a comprehensive, detailed search of our records, no other deposit or loan accounts have come to our attention 
except as noted below. 


(Financial intution Authorized Signature) 


Kooe Presiodent 
(Title) 


Sara 8, 20/2 
(Date) 











EXCEPTIONS AND/OR COMMENTS 





None 











Please return this form directly to our accountants: 


Jones and Smith CPAs 
2111 First Street 
Detroit, Michigan 48711 








Approved 1990 by American Bankers Association, American Institute of Certified Public Accountants, 
and Bank Administration Institute. Additional forms available from: AICPA-Order Department, 1-888-777-7077 











*Ordinarily, balances are intentionally left blank if they are not available at the time the form is prepared. 











After auditors receive the completed bank confirmation, the balance in the bank 
account confirmed by the bank should be traced to the amount stated on the bank 
reconciliation. Similarly, all other information on the reconciliation should be traced 
to the relevant audit schedules. If the bank confirmation does not agree with the audit 
schedules, auditors must investigate the difference. 
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the bank, obtaining bank confirmations can be a 
time-consuming process. Organizations may not 
respond to confirmation requests, and it may take 
several weeks to receive confirmation responses 


ELECTRONIC As illustrated by the Parmalat fraud (see page 731), firm, client, and financial institution). A secure 
one of the shortcomings of the confirmation value-added network with digital signatures and 
CONFIRMATIONS process is difficulty authenticating the confirmation encryption technology are used to allow the client 
OF BANK ___ tespondent. Although auditors generally confirm to authorize the confirmation requests and the 
bank balances because they are considered a auditor to communicate directly with the 
BALANCES highly reliable source of evidence about cash in confirming parties. Interpretation No. 1 of AU 330, 


“Use of Electronic Confirmations,” states that 
when secure and properly controlled, electronic 
confirmations may be considered sufficient, valid 
confirmation responses. 


through the mail. 

Automated confirmations using a third-party 
intermediary can address many of these short- 
comings and improve confirmation efficiency and 
effectiveness. Authentication checks are performed 
on all parties to the confirmation process (audit 


Sources: Adapted from 1. George Aldhizer and 
James Cashell “Automating the Confirmation 
Process: How to Enhance Audit Effectiveness and 
Efficiency,” The CPA Journal (April 2006) p. 6-10; 
2. AICPA Practice Alert 2003-1 (June 2007) 
(www.aicpa.org). 








Receipt of a Cutoff Bank Statement A cutoff bank statement is a partial-period 
bank statement and the related copies of cancelled checks, duplicate deposit slips, and 
other documents included in bank statements, mailed by the bank directly to the CPA 
firm’s office. The purpose of the cutoff bank statement is to verify the reconciling items 
on the client’s year-end bank reconciliation with evidence that is not accessible to the 
client. To fulfill this purpose, the auditor requests the client to have the bank send the 
statement for 7 to 10 days subsequent to the balance sheet date directly to the auditor. 
Many auditors verify the subsequent period bank statement if a cutoff statement is 
not received directly from the bank. The purpose is to test whether the client’s employees 
have omitted, added, or altered any of the documents accompanying the statement. 
Obviously, this tests for intentional Apagar. PDEditk @@Mowing 


verification in the month subsequent to the balance sheet date: 


* Foot the lists of all cancelled checks, debit memos, deposits, and credit memos 

* Verify that the bank statement balances when the footed totals are used 

* Review the items included in the footings to make sure that they were cancelled 
by the bank in the proper period and do not include any erasures or alterations 


Tests of the Bank Reconciliation A well-prepared independent bank reconciliation is 
an essential internal control over cash. Auditors test the bank reconciliation to determine 
whether client personnel have carefully prepared the bank reconciliation and to verify 
whether the client’s recorded bank balance is the same amount as the actual cash in the 
bank except for deposits in transit, outstanding checks, and other reconciling items. 

In verifying the reconciliation, the auditor uses information in the cutoff bank 
statement to verify the appropriateness of reconciling items. The auditor’s verification 
of the reconciliation involves several procedures: 


* Verify that the client’s bank reconciliation is mathematically accurate. 

* Trace the balance on the bank confirmation and/or the beginning balance on 
the cutoff statement to the balance per bank on the bank reconciliation to 
ensure they are the same. 

* Trace checks written and recorded before year-end and included with the cutoff 
bank statement to the list of outstanding checks on the bank reconciliation and 
to the cash disbursements journal in the period or periods prior to the balance 
sheet date. All checks that cleared the bank after the balance sheet date and were 
included in the cash disbursements journal should also be included on the 
outstanding check list. If a check was included in the cash disbursements 
journal, it should be included as an outstanding check if it did not clear before 


Chapter 23 / AUDIT OF CASH BALANCES 741 





anor Types of Audit Tests Used for General Cash in the Bank ) 


Cash in bank 








Beginning balance 
Cash receipts Cash disbursements 


Audited by Audited by 
TOC-T, STOT, and AP TOC-T, STOT, and AP 


Ending balance 


Audited by 
TOC-B, AP, and TDB 


Tests of controls 











Tests of controls ever bank Substantive Analytical Tests of Sufficient 
in transaction | , Zs tests of * details of | _ : 
: reconciliation |+ .__, | +|procedures*| + =| appropriate 
cycles process transactions (AP) balances Renee 
(TOC-T) (TOC-B) (STOT) (TDB) 





*Tests of controls in transaction cycles, substantive tests of transactions, and analytical procedures are 
done for the four transaction cycles included in Figure 23-1 (p. 733). The primary tests of the ending cash 
balance are tests of details of balances. 











the balance sheet date. Similarly, if a check cleared the bank before the balance 
sheet date, it should not be on the bank reconciliation. 
* Investigate all significant checks included on the outstanding check list that have not 
cleared the bank on the cutoff statement. The first step in the investigation should 
Apago': PDF" offtyy Fear ceesgeins to the cash disbursements journal. 
Tffe reaSon for the check not being cashed should be discussed with the client, and 
if the auditor is concerned about the possibility of fraud, the vendor’s accounts 
payable balance should be confirmed to determine whether the vendor has 
recognized the receipt of the cash in its records. In addition, a copy of the cancelled 
check should be examined before the last day of the audit if it becomes available. 
* ‘Trace deposits in transit to the cutoff bank statement. All cash receipts not deposited 
in the bank at the end of the year should be traced to the cutoff bank statement to 
make sure that they were deposited shortly after the beginning of the new year. 
* Account for other reconciling items on the bank statement and bank recon- 
ciliation. These include such items as bank service charges, bank errors and 
corrections, and unrecorded transactions debited or credited directly to the 
bank account by the bank. These reconciling items should be investigated to be 
sure that they have been treated properly by the client. 


Figure 23-5 illustrates how the types of audit tests are used to audit the general cash 
account. Observe in the figure that tests of controls, substantive tests of transactions, and 
analytical procedures are done for each transaction cycle involving the cash account. 


FRAUD-ORIENTED PROCEDURES 


OBJECTIVE 23-4 





Recognize when to extend 
audit tests of the general 
cash account to test further 
for material fraud. 





A major consideration in the audit of the general cash balance is the possibility of 
fraud. The auditor must extend the procedures in the audit of year-end cash to deter- 
mine the possibility of a material fraud when there are inadequate internal controls, 
especially the improper segregation of duties between the handling of cash and the 
recording of cash transactions in the accounting records and the lack of an inde- 
pendently prepared monthly bank reconciliation. 
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In designing procedures for uncovering fraud, auditors should carefully consider 
the nature of the deficiencies in internal control, the type of fraud that is likely to result 
from the deficiencies, the potential materiality of the fraud, and the audit procedures 
that are most effective in uncovering the fraud. 

When auditors are specifically testing for fraud, they should keep in mind that 
audit procedures other than tests of details of cash balances can also be useful. 
Procedures that may uncover fraud in the cash receipts area include: 


* Confirmation of accounts receivable 

* Tests performed to detect lapping 

* Review of the general ledger entries in the cash account for unusual items 

* Comparison of customer orders to sales and subsequent cash receipts 

» Examination of approvals and supporting documentation for bad debts and 
sales returns and allowances 


Similar tests can be used for testing for the possibility of fraudulent cash dis- 
bursements. 

Even with reasonably elaborate fraud-oriented procedures, it is extremely difficult to 
detect thefts of cash, as well as fraudulent financial reporting involving cash, especially 
omitted transactions and account balances. If, for example, a company has illegal offshore 
cash accounts and makes deposits to those accounts from unrecorded sales, it is unlikely 
that an auditor will uncover the fraud. Nevertheless, auditors are responsible for making 
a reasonable effort to detect fraud when they have reason to believe it may exist. The 
following procedures for uncovering fraud are directly related to year-end cash balances: 
extended tests of the bank reconciliation, proofs of cash, and tests of interbank transfers. 


When the auditor believes that the year-end bank reconciliation may be intentionally 
misstated, it is appropriate to perform extended tests of the year-end bank recon- 
ciliation. The extended procedures verify whether all transactions included in the 
journals for the last month of the yApage.PDiitinhaneexsm the 
bank reconciliation and verify whether all items in the bank reconciliation were 
correctly included. Let’s assume that there are material internal control weaknesses and 
the client’s year-end is December 31. Using a common approach, auditors: 


1. Start with the bank reconciliation for November and compare all reconciling 
items with cancelled checks and other documents in the December bank 
statement. 

2. Compare all remaining cancelled checks and deposit slips in the December 
bank statement with the December cash disbursements and receipts journals. 

3. Trace all uncleared items in the November bank reconciliation and the 
December cash disbursements and receipts journals to the client’s December 31 
bank reconciliation to make sure they are included. 

4. Verify that all reconciling items in the December 31 bank reconciliation repre- 
sent items from the November bank reconciliation and December’s journals 
that have not yet cleared the bank. 


In addition to these four tests, the auditor must carry out procedures subsequent to 
the end of the year with the use of the bank cutoff statement. These tests are the same 
as previously discussed. 


Auditors sometimes prepare a proof of cash when the client has material internal 
control weaknesses in cash. The auditor uses a proof of cash to determine whether the 
following were done: 


* All recorded cash receipts were deposited 

* All deposits in the bank were recorded in the accounting records 
* All recorded cash disbursements were paid by the bank 

» All amounts that were paid by the bank were recorded 


Extended Tests of the 
Bank Reconciliation 


Proof of Cash 
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Tests of 
Interbank Transfers 


A proof of cash includes the following four reconciliation tasks: 


1. Reconcile the balance on the bank statement with the general ledger balance at 
the beginning of the proof-of-cash period. 

2. Reconcile cash receipts deposited per the bank with receipts recorded in the 
cash receipts journal for a given period. 

3. Reconcile electronic payments and cancelled checks clearing the bank with 
those recorded in the cash disbursements journal for a given period. 

4. Reconcile the balance on the bank statement with the general ledger balance at 
the end of the proof-of-cash period. 


A proof of cash of this nature is commonly called a four-column proof of cash that 
contains one column for each of the four types of information listed above. A proof of 
cash can be performed for one or more interim months, the entire year, or the last month 
of the year. The concern in an interim-month proof of cash, as shown in Figure 23-6, is 
not with the ending cash balance. Rather, the auditor’s focus is on reconciling the 
amounts recorded in the books with the amounts included in the bank statement. 

When doing a proof of cash, the auditor is combining substantive tests of trans- 
actions and tests of details of balances. A proof of cash receipts is a test of recorded 
transactions, whereas a bank reconciliation is a test of the balance in cash at a point in 
time. A proof of cash is an excellent method of comparing recorded cash receipts and 
disbursements with the bank account and with the bank reconciliation. However, the 
proof of cash disbursements is not effective for discovering checks written for an 
improper amount, fraudulent checks, or other misstatements in which the dollar 
amount appearing on the cash disbursements records is incorrect. Similarly, a proof of 
cash receipts is not useful for uncovering the theft of cash receipts or the recording and 
deposit of an improper amount of cash. 


Embezzlers occasionally cover a theft of cash by a practice known as kiting: trans- 
fcrinpago™ PDFo Einhan eémrorectly recording the transaction. 
Near the balance sheet date, a check is drawn on one bank account and immediately 
deposited in a second account for credit before the end of the accounting period. In 
making this transfer, the embezzler is careful to make sure that the check is deposited 
at a late enough date so that it does not clear the first bank until after the end of the 
period. If the interbank transfer is not recorded until after the balance sheet date, the 
amount of the transfer is recorded as an asset in both banks. Although there are other 
ways to commit this fraud, each involves increasing the bank balance to cover a shortage 
by the use of interbank transfers. 

To test for kiting, as well as for unintentional errors in recording interbank 
transfers, auditors can list all interbank transfers made a few days before and after the 
balance sheet date and trace each to the accounting records for proper recording. 
Figure 23-7 (p. 746) shows an interbank transfer schedule with four interbank transfers 
made shortly before and after the balance sheet date. There are several things that 
should be audited on the interbank transfer schedule. 


* The accuracy of the information on the interbank transfer schedule should be 
verified. The auditor should compare the disbursement and receipt information 
on the schedule to the cash disbursements and cash receipts records to make 
sure that it is accurate. Similarly, the dates on the schedule for transfers that were 
received and disbursed should be compared with the bank statement. Finally, 
cash disbursements and receipts records should be examined to make sure that 
all transfers a few days before and after the balance sheet date have been included 
on the schedule. (The tick mark explanations on the schedule in Figure 23-7 
indicate that these steps have been taken.) 

* The interbank transfers must be recorded in both the receiving and disbursing banks. 
If, for example, there was a $10,000 transfer from Bank A to Bank B but only the 
disbursement was recorded, this is evidence of an attempt to conceal a cash theft. 
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Clawson Industries Schedule _A-5 Date 
Interim Proof of Cash Prepared by AG 97/95/17 
6/30/11 Approved by 20 W174 











Acct. 101 — General account, First National Bank 

















S/S Receipts Disbursements 6/30/11 
Balance per Bank @ 121782.12 627895.20 631111.96 118565.36 
Deposits in transit 
5/31 @ 21720.00 <21720.00> 
6/30 @ 16592.36 16592.36 
Outstanding checks 
5/31 @ <36396.50> <36396.50> 
oe @ 14800.10  <14800.10> 
NSF checks @ <4560.00> <4560.00> 
To allow for effect of a cash disburse- 
ment recorded as a credit item 
in cash receipts journal <8500.00> <8500.00> 
Balance per bank, adjusted 107105.62 609707.56 596455.56 120357.62 
Balance per books, unadjusted 107105.62 609707.56 597957.04 118856.14 
Bank debit memos @® 120.00 <120.00> 
Payroll checks erroneously entered 
in General Disbursements Journal © <1621.48> 1621.48 
Balance per books, adjusted 107105.62 609707.56 596455.56 120357.62 








QD Per 6/30/11 bank statement. 

@ Detailed listing filed belouy traced te subsequent bank satements. 

@ Outttanding-chech list filed below: examined cancelled chechs. 

@ Detailed listing filed belouy all NSF items were redeposited in June and had all cleared as of 6/30/11. 
© Safety deposit rentals; traced to recording via journal entry. 

© ‘haced to journal entry correcting error. 








* The date of the recording of the disbursements and receipts for each transfer must be 
in the same fiscal year. In Figure 23-7, the dates in the two “date recorded in books” 
columns [(4) and (7)] are in the same period for each transfer; therefore, they are 
correct. If a cash receipt was recorded in the current fiscal year and the disburse- 
ment in the subsequent fiscal year, it may be an attempt to cover a cash shortage. 

* Disbursements on the interbank transfer schedule should be correctly included in or 
excluded from year-end bank reconciliations as outstanding checks. In Figure 23-7, 
the 12-31-11 bank reconciliation for the general cash account should include 
outstanding checks for the second and third transfers but not the other two. 
[Compare the dates in columns (4) and (5).] Understatement of outstanding 
checks on the bank reconciliation indicates the possibility of kiting. 
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Clawson Industries Schedule _A-7 
Schedule of Interbank Transfers Prepared by Chent/ DEX 7/10/12 
December 31, 2011 Approved by sy 1/16/12 
Disbursements Receipts 
Check Date Recorded Date Paid Date Recorded Date Received 
No. Bank Amount in Books by Bank Bank in Books by Bank 
(1) (2) (3) (4) (5) (6) (7) (8) 


EFT First National - general $20,642/ 12-26-11 12-26-11 Federal Charter - payroll 12-26-11@ = 12-27-110@ 
#8029 First National - general $37,998/ 4.2 12-28-11 “ 01-02-1200 Federal Charter-savings 12-29-11@  12-29-110@ 
#8038 First National - general $10,000/ 4-2 12-30-11 *% 01-04-1210 Federal Charter - savings 12-30-11@  01-03-120@ 
#8045 First National - general $21,014/¥ 01-02-12 01-04-12 Federal Charter - payroll 01-03-12@  01-04-120@ 


oS Thaced to cath dislurtements records. 

QD thaced to cash receipts records. 

X Chech included as outstanding on bank reconciliation. 

® Chech or EFT (Electronic Funds Transfer) not included as outstanding on bank reconciliation. 
@ Receipt included as a deposit in transit. 

OO thaced ta bank statement. 

D Receipt not included as a deposit in transit. 











* Receipts on the interbank transfer schedule should be correctly included in or 
excluded from year-end bank reconciliations as deposits in transit. In Figure 23-7, 
the 12-31-11 bank reconciliations for the savings and payroll accounts should 
indicate a deposit in transit for the third transfer but not for the other three. 
(Compare the dates for each transfer in the last two columns.) Overstating 
deposits in transit on the bank reconciliation indicates the possibility of kiting. 


Even though audit tests of interbank transfers are usually fraud oriented, they are 
often performed on audits in which there are numerous bank transfers, regardless of 
internal controls. In addition to the possibility of kiting, inaccurate handling of transfers 
can result in a misclassification between cash and accounts payable. The materiality of 
transfers and the relative ease of performing the tests make many auditors believe they 
should always be performed. 


AUDIT OF THE IMPREST PAYROLL BANK ACCOUNT 


OBJECTIVE 23-5 Tests of the payroll bank reconciliation should take only a few minutes if there is an 
imprest payroll account and an independent reconciliation of the bank account, such 
tests of the imprest payroll as that described for the general account. Typically, the only reconciling items are out- 
bank account. standing checks. For most audits, the great majority of those clear shortly after the 
checks are issued. In testing the payroll bank account balances, auditors must obtain 


Design and perform audit 
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the bank reconciliation, a bank confirmation, and a cutoff bank statement. The 
reconciliation procedures are performed in the same manner as those described for 
general cash except that tests of the outstanding checks are normally limited to a 
reasonableness test. Naturally, extended procedures are necessary if the controls are 
inadequate or if the bank account does not reconcile with the general ledger imprest 
cash balance. 


AUDIT OF IMPREST PETTY CASH 


Petty cash is a unique account. Although it is often immaterial in amount, many OBJECTIVE 23-6 
auditors verify petty cash primarily because of the potential for embezzlement and the 
client’s expectation that auditors will examine the account, even when the amount is 





Design and perform audit 
tests of imprest petty cash. 





immaterial. 
The most important internal control for petty cash is the use of an imprest fund that is Internal Controls 
the responsibility of one individual. In addition, petty cash funds should not be mingled Over Petty Cash 


with other receipts, and the fund should be kept separate from all other activities. 
There should also be limits on the amount of any expenditure from petty cash, as well 
as on the total amount of the fund. The types of expenditures that can be made from 
petty cash transactions should be well defined by company policy. 

When a disbursement is made from petty cash, adequate internal controls require 
a responsible official’s approval on a prenumbered petty cash form. The total of the 
actual cash and checks in the fund, plus the total unreimbursed petty cash forms that 
represent expenditures, should equal the total amount of the petty cash fund stated in 
the general ledger. 

When the petty cash balance runs Ana a check payable to the petty cash custodian 
should be written on the general c ApRaga oR DE inER hancex, cash. 
The check should be for the exact amount of the prenumbered vouchers that are 
submitted as evidence of actual expenditures. These vouchers should be verified by the 
accounts payable clerk and cancelled to prevent their reuse. 


The emphasis in verifying petty cash should be on testing controls over petty cash Audit Tests 
transactions rather than the ending balance in the account. Even if the amount of the for Petty Cash 
petty cash fund is small, the potential exists for numerous improper transactions if the 
fund is frequently reimbursed. 
When control risk is assessed as low and few reimbursement payments occur during 
the year, it is common for auditors not to test petty cash, for reasons of immateriality. 
When auditors do test petty cash, the two most common procedures are to count the 
petty cash balance and to carry out detailed tests of one or two reimbursement trans- 
actions to determine that they are properly supported. 


SUMMARY 


In this chapter, we have seen that transactions in most cycles affect the cash account. 
Because of the relationship between transactions in several cycles and the ending cash 
account balance, the auditor typically waits to audit the ending cash balance until the 
results of tests of controls and substantive tests of transactions for all cycles are completed 
and analyzed. Tests of the cash balance normally include tests of the bank reconciliations of 
key cash accounts, such as the general cash account, imprest payroll account, and imprest 
petty cash fund. If auditors assess a high likelihood of fraud in cash, they may perform 
additional tests such as extended bank reconciliation procedures, a proof of cash, or tests of 
interbank transfers. 
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Bank reconciliation—the monthly recon- 
ciliation, usually prepared by client per- 
sonnel, of the differences between the cash 
balance recorded in the general ledger and 
the amount in the bank account 


Branch bank accounts—separate bank 
accounts maintained at local banks by 
branches of a company 


Cash equivalents—excess cash invested in 
short-term, highly liquid investments such 
as time deposits, certificates of deposit, 
and money market funds 


Cutoff bank statement—a partial-period 
bank statement and the related cancelled 
checks, duplicate deposit slips, and other 
documents included in bank statements, 
mailed by the bank directly to the auditor; 
the auditor uses it to verify reconciling 
items on the client’s year-end bank recon- 
ciliation 

General cash account—the primary bank 
account for most organizations; virtually 
all cash receipts and disbursements flow 
through this account at some time 


ESSENTIAL TERMS 


Imprest petty cash fund—a fund of cash 
maintained within the company for small 
cash acquisitions or to cash employees’ 
checks; the fund’s fixed balance is com- 
paratively small and is periodically reim- 


bursed 


Kiting—the transfer of money from one 
bank to another and improperly recording 
the transfer so that the amount is recorded 
as an asset in both accounts; this practice 
is used by embezzlers to cover a theft of 
cash 


Proof of cash—a four-column audit 
schedule prepared by the auditor to 
reconcile the bank’s record of the client’s 
beginning balance, cash deposits, cleared 
checks, and ending balance for the period 
with the client’s records 


Standard bank confirmation form— 
a form approved by the AICPA and 
American Bankers Association through 
which the bank responds to the auditor 
about bank balance and loan information 
provided on the confirmation 


Apago PDF Enhancer 
REVIEW QUESTIONS 


23-1 (Objectives 23-1, 23-2) Explain the relationships among the initial assessed control 
risk, tests of controls and substantive tests of transactions for cash receipts, and the tests of 
details of cash balances. 


23-2 (Objectives 23-1, 23-2) Explain the relationships among the initial assessed control 
risk, tests of controls and substantive tests of transactions for cash disbursements, and the 
tests of details of cash balances. Give one example in which the conclusions reached about 
internal controls in cash disbursements will affect the tests of cash balances. 


23-3 (Objective 23-3) Why is the monthly reconciliation of bank accounts by an inde- 
pendent person an important internal control over cash balances? Which individuals will 
generally not be considered independent for this responsibility? 


23-4 (Objective 23-3) Evaluate the effectiveness and state the shortcomings of the prepara- 
tion of a bank reconciliation by the controller in the manner described in the following 
statement: “When I reconcile the bank account, the first thing I do is review the sorted list 
of returned checks and find which numbers are missing. Next I determine the amount of 
the uncleared checks by referring to the cash disbursements journal. If the bank account 
reconciles at that point, I am all finished with the reconciliation. If it does not, I search for 
deposits in transit, checks from the beginning outstanding check list that still have not 
cleared, other reconciling items, and bank errors until it reconciles. In most instances, I can 
do the reconciliation in 20 minutes.” 


23-5 (Objective 23-3) How do bank confirmations differ from positive confirmations of 
accounts receivable? Distinguish between them in terms of the nature of the information 
confirmed, the sample size, and the appropriate action when the confirmation is not 
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returned after the second request. Explain the rationale for the differences between these 
two types of confirmations. 


23-6 (Objective 23-3) Evaluate the necessity of following the practice described by an 
auditor: “In confirming bank accounts, I insist upon a response from every bank the client 
has done business with in the past 2 years, even though the account may be closed at the 
balance sheet date.” 


23-7 (Objective 23-3) Describe what is meant by a cutoff bank statement and state its 
purpose. 


23-8 (Objective 23-3) Why are auditors usually less concerned about the client’s cash 
receipts cutoff than the cutoff for sales? Explain the procedure involved in testing for the 
cutoff for cash receipts. 


23-9 (Objective 23-2) What is meant by an imprest bank account for a branch operation? 
Explain the purpose of using this type of bank account. 


23-10 (Objective 23-4) Explain the purpose of a four-column proof of cash. List two types 
of misstatements it is meant to uncover. 


23-11 (Objective 23-3) When the auditor fails to obtain a cutoff bank statement, it is 
common to verify the entire statement for the month subsequent to the balance sheet date. 
How is this done and what is its purpose? 


23-12 (Objective 23-4) Distinguish between lapping and kiting. Describe audit procedures 
that can be used to uncover each. 


23-13 (Objective 23-5) Assume that a client with excellent internal controls uses an 
imprest payroll bank account. Explain why the verification of the payroll bank recon- 
ciliation ordinarily takes less time than the tests of the general bank account, even if the 
number of disbursements exceeds those for the general account. 


23-14 (Objective 23-6) Distinguish between the verification of petty cash reimbursements 


and the verification of the balance in ag 6? Spe cag etogg sys more 


important? 


23-15 (Objectives 23-3, 23-4) Why is there a greater emphasis on the detection of fraud in 
tests of details of cash balances than for other balance sheet accounts? Give two specific 
examples that demonstrate how this emphasis affects the auditor’s evidence accumulation 
in auditing year-end cash. 


23-16 (Objective 23-3) Explain why, in verifying bank reconciliations, most auditors 
emphasize the possibility of a nonexistent deposit in transit being included in the recon- 
ciliation and an outstanding check being omitted rather than the omission of a deposit in 
transit and the inclusion of a nonexistent outstanding check. 


23-17 (Objective 23-3) How will a company’s bank reconciliation reflect an electronic 
deposit of cash received by the bank from credit card agencies making payments on behalf 
of customers purchasing products from the company’s online Web site, but not recorded in 
the company’s records? 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


23-18 (Objectives 23-3, 23-4) The following questions deal with auditing year-end cash. 
Choose the best response. 


a. A CPA obtains a January 10 cutoff bank statement for a client directly from the bank. 
Very few of the outstanding checks listed on the client’s December 31 bank recon- 
ciliation cleared during the cutoff period. A probable cause for this is that the client 
(1) is engaged in kiting. 

(2) is engaged in lapping. 
(3) transmitted the checks to the payees after year-end. 
(4) has overstated its year-end bank balance. 
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b 


a 


a 


c. 


. The auditor should ordinarily send confirmation requests to all banks with which the 


client has conducted any business during the year, regardless of the year-end balance, 

because 

(1) this procedure will detect kiting activities that would otherwise not be detected. 

(2) the confirmation form also seeks information about indebtedness to the bank. 

(3) the sending of confirmation requests to all such banks is required by auditing 
standards. 

(4) this procedure relieves the auditor of any responsibility with respect to non- 
detection of forged checks. 


. The usefulness of the standard bank confirmation request may be limited because the 


bank employee who completes the confirmation may 

(1) be unaware of all the financial relationships that the bank has with the client. 

(2) not believe the bank is obligated to verify confidential information to a third party. 

(3) sign and return the confirmation without inspecting the accuracy of the client’s 
bank reconciliation. 

(4) not have access to the client’s bank statement. 


23-19 (Objective 23-4) The following questions deal with discovering fraud in auditing 
year-end cash. Choose the best response. 


. Which of the following is one of the better auditing techniques to detect kiting? 


(1) Review composition of authenticated deposit slips. 

(2) Review subsequent bank statements and cancelled checks received directly from 
the banks. 

(3) Prepare year-end bank reconciliations. 

(4) Prepare a schedule of bank transfers from the client’s books. 











. Which of the following cash transfers results in a misstatement of cash at December 31, 
2011? 
HEDULE 
Apago PDF Enhancer” . 
Disbursements Receipt 
Recorded Paid by Recorded Received 
Transfer in books bank in books by bank 
(1) 12/31/11 1/4/12 12/31/11 12/31/11 
(2) 1/4/12 1/5/12 12/31/11 1/4/12 
(3) 12/31/11 1/5/12 12/31/11 1/4/12 
(4) 1/4/12 1/11/12 1/4/12 1/4/12 





A cash shortage may be concealed by transporting funds from one location to another or 
by converting negotiable assets to cash. Because of this, which of the following is vital? 
(1) Simultaneous bank confirmations. 

(2) Simultaneous bank reconciliations. 

(3) Simultaneous four-column proofs of cash. 

(4) Simultaneous surprise cash counts. 


DISCUSSION QUESTIONS AND PROBLEMS 


23-20 (Objectives 23-3, 23-4) The following are misstatements that might be found in the 
client’s year-end cash balance (assume that the balance sheet date is June 30): 


1. The outstanding checks on the June 30 bank reconciliation were underfooted by 
$2,000. 

2. A loan from the bank on June 26 was credited directly to the client’s bank account. 
The loan was not entered as of June 30. 

3. A check was omitted from the outstanding check list on the June 30 bank recon- 
ciliation. It cleared the bank July 7. 
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4. A check was omitted from the outstanding check list on the bank reconciliation. It 
cleared the bank September 6. 

5. Cash receipts collected on accounts receivable from July 1 to July 5 were included as 
June 29 and 30 cash receipts. 

6. A bank transfer recorded in the accounting records on July 1 was included as a deposit 
in transit on June 30. 

7. A check that was dated June 26 and disbursed in June was not recorded in the cash 
disbursements journal, but it was included as an outstanding check on June 30. 


a. Assuming that each of these misstatements was intentional (fraud), state the most Required 
likely motivation of the person responsible. 


b. What control can be instituted for each fraud to reduce the likelihood of occurrence? 


c. List an audit procedure that can be used to discover each fraud. 


23-21 (Objectives 23-3, 23-4) The following audit procedures are concerned with tests of 
details of general cash balances: 


1. Obtain a standard bank confirmation from each bank with which the client does 
business. 

2. Compare the balance on the bank reconciliation obtained from the client with the 
bank confirmation. 

3. Compare the checks returned along with the cutoff bank statement with the list of 
outstanding checks on the bank reconciliation. 

4. List the check number, payee, and amount of all material checks not returned with 
the cutoff bank statement. 

5. Review minutes of the board of directors meetings, loan agreements, and bank 
confirmation for interest-bearing deposits, restrictions on the withdrawal of cash, 
and compensating balance agreements. 

6. Prepare a four-column proof of cash. 

7. Compare the bank cance oa aes iy th celled check for checks 
dated on or shortly before the a da DE ‘EHHaA ce rr 

8. Trace deposits in transit on the bank reconciliation to the cutoff bank statement and 
the current year cash receipts journal. 


Explain the objective of each. Required 


23-22 (Objective 23-3) You are auditing general cash for the Pittsburgh Supply Company 
for the fiscal year ended July 31, 2011. The client has not prepared the July 31 bank 
reconciliation. After a brief discussion with the owner, you agree to prepare the recon- 
ciliation, with assistance from one of Pittsburgh Supply’s clerks. You obtain the following 











information: 
General Ledger Bank Statement 

Beginning balance 7/1/11 $ 6,400 $ 8,378 
Deposits 25,474 
Cash receipts journal 26,874 

Checks cleared (25,307) 
Cash disbursements journal (23,171) 

July bank service charge (107) 
Note paid directly (6,400) 
NSF check (516) 
Ending balance 7/31/11 $ 10,103 $ 1,522 





June 30 Bank Reconciliation 
Information in General Ledger and Bank Statement 





Balance per bank $8,378 
Deposits in transit 600 
Outstanding checks 2,578 
Balance per books 6,400 
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Required 


Required 


Additional information obtained is as follows: 


1. Checks clearing that were outstanding on June 30 totaled $2,411. 

2. Checks clearing that were recorded in the July disbursements journal totaled $21,120. 

3. A check for $1,130 cleared the bank but had not been recorded in the cash disburse- 

ments journal. It was for an acquisition of inventory. Pittsburgh Supply uses the 
periodic-inventory method. 

4. A check for $646 was charged to Pittsburgh Supply but had been written on a 
different company’s bank account. 

. Deposits included $600 from June and $24,874 for July. 

6. The bank charged Pittsburgh Supply’s account for a nonsufficient check totaling 
$516. The credit manager concluded that the customer intentionally closed its 
account and the owner left the city. The check was turned over to a collection 
agency. 

. A note for $6,000, plus interest, was paid directly to the bank under an agreement 
signed 4 months ago. The note payable was recorded at $6,000 on Pittsburgh Supply’s 
books. 


a. Prepare a bank reconciliation that shows both the unadjusted and adjusted balance 
per books. 


wn 


N 


b. Prepare all adjusting entries. 
c. What audit procedures would you use to verify each item in the bank reconciliation? 


d. What is the cash balance that should appear on the July 31, 2011, financial statements? 


23-23 (Objectives 23-3, 23-4) In the audit of the Regional Transport Company, a large 
branch that maintains its own bank account, cash is periodically transferred to the central 
account in Cedar Rapids. On the branch account’s records, bank transfers are recorded as a 
debit to the home office clearing account and a credit to the branch bank account. 
Similarly, the home office account is recorded as a debit to the central bank account and a 
credit APAGR ORD Ea hhancer Light is the head bookkeeper for both 
the home office and the branch bank accounts. Because he also reconciles the bank 
account, the senior auditor, Cindy Marintette, is concerned about the internal control 
deficiency. 


As a part of the year-end audit of bank transfers, Marintette asks you to schedule the trans- 
fers for the last few days in 2011 and the first few days of 2012. You prepare the following list: 


Date Recordedin Date Recorded in Date Deposited 


the Home Office the Branch Office in the Home Date Cleared 
Amount of Cash Receipts Cash Disbursements Office Bank the Branch 

Transfer Journal Journal Account Bank Account 
$17,000 12-27-11 12-29-11 12-26-11 12-27-11 
28,000 12-28-11 01-02-12 12-28-11 12-29-11 
16,000 01-02-12 12-30-11 12-28-11 12-29-11 
10,000 12-26-11 12-26-11 12-28-11 01-03-12 
21,000 01-02-12 01-02-12 12-28-11 12-31-11 
22,000 01-07-12 01-05-12 12-28-11 01-03-12 
39,000 01-04-12 01-06-12 01-03-12 01-05-12 





a. In verifying each bank transfer, state the appropriate audit procedures you should 
perform. 


b. Prepare any adjusting entries required in the home office records. 


a 


. Prepare any adjusting entries required in the branch bank records. 
d. State how each bank transfer should be included in the December 31, 2011, bank 
reconciliation for the home office account after your adjustments in part b. 


. State how each bank transfer should be included in the December 31, 2011, bank 
reconciliation of the branch bank account after your adjustments in part c. 


oO 
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23-24 (Objective 23-4) The following are various potential misstatements due to errors or 

fraud (1 through 7), and a list of auditing procedures (a through h) the auditor would 

consider performing to gather evidence to determine whether the error or fraud is present. 
Possible Misstatements Due to Errors or Fraud 

1. The auditor suspects that a lapping scheme exists because an accounting department 
employee who has access to cash receipts also maintains the accounts receivable 
ledger and refuses to take any vacation or sick days. 

2. The auditor suspects that the entity is inappropriately increasing the cash reported on its 
balance sheet by drawing a check on one account and not recording it as an outstanding 
check on that account and simultaneously recording it as a deposit in a second account. 

3. The entity’s cash receipts of the first few days of the subsequent year were properly 
deposited in its general operating account after the year-end. However, the auditor 
suspects that the entity recorded the cash receipts in its books during the last week of 
the year under audit. 

4, The auditor noticed a significant increase in the number of times that petty cash was 
reimbursed during the year and suspects that the custodian is stealing from the petty 
cash fund. 

5. The auditor suspects that a kiting scheme exists because an accounting department 
employee who can issue and record checks seems to be leading an unusually 
luxurious lifestyle. 

6. During tests of the reconciliation of the payroll bank account, the auditor notices 
that a check to an employee is significantly larger than other payroll checks. 

7. The auditor suspects that the controller wrote several checks and recorded the cash 
disbursements just before year-end but did not mail the checks until after the first 
week of the subsequent year. 


List of Auditing Procedures 
a. Send a standard bank confirmation confirming the balance in the bank at year-end. 


b. Compare the details of the oR receipts jo tries with the details of the 
corresponding daily deposit slip pago “BDF Enhancér 


c. Count the balance in petty cash at year-end. 
d. Agree gross amount on payroll checks to approved hours and pay rates. 


e. Obtain the cutoff bank statement and compare the cleared checks to the year-end 
reconciliation. 


f. Examine invoices, receipts, and other documentation supporting reimbursement of 
petty cash. 


g. Examine payroll checks clearing after year-end with the payroll journal. 
h. Prepare a bank transfer schedule. 
For each possible misstatement, identify one audit procedure that would be most effective Required 


in providing evidence regarding the potential misstatement. Listed auditing procedures 
may be used once, more than once, or not at all.* 


23-25 (Objective 23-3) In connection with an audit you are given the following worksheet: 
Bank Reconciliation, December 31, 2011 





Balance per ledger December 31, 2011 $27,253.85 
Add: 
Cash receipts received on the last day of December and 

charged to “cash in bank” on books but not deposited 3,715.27 
Debit memo for customer's check returned unpaid (check 

is on hand but no entry has been made on the books) 450.00 
Debit memo for bank service charge for December 35.00 

$31,454.12 


(continued on following page) 


*AICPA adapted. 
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Deduct: 
Checks drawn but not paid by bank (see detailed list below) $3,295.15 
Credit memo for proceeds of a note receivable that had 

been left at the bank for collection but which has not 





been recorded as collected 1,200.00 
Checks for an account payable entered on books as 

$297.50 but drawn and paid by bank as $694.50 397.00 (4,892.15) 
Computed balance 26,561.97 
Unlocated difference 416.44 
Balance per bank (checked to confirmation) $26,978.41 





Checks Drawn but Not Paid by Bank 








No. Amount 
573 $ 267.27 
724 39.92 
903 454.67 
907 291.80 
911 648.29 
913 737.52 
914 529.10 
916 36.00 
917 117.26 
$ 3,295.15 
Required a. Prepare a corrected reconciliation. 


b. Prepare journal entries for items that should be adjusted prior to closing the books.* 


23-26 (Objective 23-4) You are doing the first-year audit of Sherman School District and 
have been assigned responsibility for doing a four-column proof of cash for the month of 
October 2011. You obtain the following information: 


| ARADO, RDF Enhance fp tember 30 $ 10,725 


October 31 5,836 
2. Balance per bank September 30 6,915 
October 31 8,276 
3. Outstanding checks September 30 1,811 
October 31 2,615 
4. Cash receipts for October per bank 28,792 
per books 20,271 
5. Deposits in transit September 30 5,621 
October 31 996 


6. Interest on a bank loan for the month of October, charged by the bank but not 
recorded, was $596. 

. Proceeds on a note of the Jones Company were collected by the bank on October 28 
but were not entered on the books: 


N 


Principal $ 2,900 
Interest 396 


$ 3,296 


. On October 26, a $1,144 check of the Billings Company was charged to Sherman 
School District’s account by the bank in error. 

9. Dishonored checks are not recorded on the books unless they permanently fail to clear 

the bank. The bank treats them as disbursements when they are dishonored and 

deposits when they are redeposited. Checks totaling $1,335 were dishonored in 

October; $600 was redeposited in October and $735 in November. 


Required a. Prepare a four-column proof of cash for the month ended October 31. It should show 
both adjusted and unadjusted cash. 


b. Prepare all adjusting entries. 





co 


*AICPA adapted. 
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INTERNET PROBLEM 23-1: 
CHECK CLEARING FOR THE 21ST CENTURY ACT 


The Check Clearing for the 21st Century Act (Check 21 Act) allows recipients of paper 
checks to create a digital image of the original check, eliminating the need for further 
handling of the actual check. The Federal Reserve Board has created a consumer guide 
(www.federalreserve.gov/pubs/check21/consumer_guide.htm). Locate the guide to answer 
questions about Check 21. 


a. What is a “substitute check”? Does it constitute a legal copy of the check? Required 
b. How does Check 21 affect the payment of your checks? 
c. Do banks have to return actual cancelled checks? Explain. 


Apago PDF Enhancer 
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CHAPTER 


24 





COMPLETING THE AUDIT 





Part 5 includes only one chapter and covers the fourth and final phase of an 
audit: completing the audit. Even when auditors perform the other phases of an 
audit well, if they do a poor job carrying out the completion phase, the quality 
of the audit will be low. When auditors perform the planning phase (phase I) 
and the two testing phases (phases I] and II) well, the completion phase is 
typically relatively easy. 











COMPLETING THE AUDIT 


Good Review Requires More 
Than Looking At Audit Files 


Larry Lenape, an audit senior of Santro, Best & Harmon, assigned staff 
assistant Clawson Little the audit of accounts payable for Westside Industries, 
a large equipment manufacturer. Accounts payable is a major liability account 
for a manufacturing company, and testing accounts payable cutoff is an 
important audit area. Testing primarily involves reviewing the liability 
recorded by the client by examining subsequent payments to suppliers and 
other creditors to ensure that they were correctly recorded. 


Lenape observed that Little was spending a lot of time on the phone, 
apparently on personal matters. Shortly before the audit was completed, 
Little announced that he was leaving the firm. Despite Little’s distractions 
due to his personal affairs, he completed the audit work he was assigned 
within the budgeted time. 


Because of Lenape’s concern about Little’s work habits, he decided to review 
the audit files with extreme care. Every schedule he reviewed was properly 
prepared, with tick marks entered and explained by Little, indicating that he 
had made an extensive examination 
had found the client’s balance to b 
were no payments subsequent to year-end for inventory purchases received 
during the audit period that had not been accrued by the company. 


When Lenape finished the audit, he notified Kelsey Mayburn, the engagement 
audit manager, that the files were ready for her review. She had considerable 
knowledge about equipment manufacturers and also about Westside 
Industries. Mayburn reviewed all of the audit files, including analytical 
procedures performed during the audit. After calculating additional analytical 


BAGS EUR BERS E ee: 





LEARNING OBJECTIVES 


After studying this chapter, 
you should be able to 





a 


24-1 


24-6 


24-7 


24-8 


Design and perform audit tests 
related to presentation and 
disclosure audit objectives. 


Conduct a review for contingent 
liabilities and commitments. 


Obtain and evaluate letters from 
the client's attorneys. 


Conduct a post-balance-sheet 
review for subsequent events. 


Design and perform the final 
steps in the evidence- 
accumulation segment of the 
audit. 


Integrate the audit evidence 
gathered and evaluate the overall 
audit results. 


Communicate effectively with 
the audit committee and 
management. 


Identify the auditor's 
responsibilities when facts 
affecting the audit report are 
discovered after its issuance. 





procedures during her review, she contacted Lenape and told him accounts payable did not seem reasonable to her. She 
asked him to do some additional checking. Lenape went back and looked at all the documents that Little had indicated 
in the audit files that he had inspected. It was quickly apparent that Little had either not looked at the documents or did 
not know what he was doing when he inspected them. There were almost $5 million of purchases applicable to the 
December 31, 2010, audit period that had not been included as liabilities. Mayburn’s review probably saved Santro, Best 


& Harmon significant embarrassment or worse. 








tarting with Chapter 6, the first three phases of the audit process were studied, as outlined by the flow chart in the 

margin. Attention is now given to the fourth and final phase which is shaded in the figure: completing the audit. 
As the chapter-opening case illustrates, the final phase of the audit demands careful and thoughtful review of the 
audit by an experienced and knowledgeable person. In addition to reviewing the results, several other aspects of 
completing the audit are critical to the success of an audit. In this chapter, the seven parts of completing the audit 
outlined by the flow chart in the margin on page 759 are covered. 


PERFORM ADDITIONAL TESTS FOR PRESENTATION AND DISCLOSURE 


OBJECTIVE 24-1 


Design and perform audit 


tests related to presentation 
and disclosure audit 
objectives. 


Summary of the 
Audit Process 





PHASE | 
Plan and design 
an audit approach 


PHASE II 
Perform tests of 
controls and 
substantive tests 
of transactions 


| 
PHASE III 
Perform analytical 
procedures and 
tests of details 
of balances 


ye 
PHASE IV 
Complete the 
audit and issue 
an audit report 





























Chapter 6 described the need to perform procedures to satisfy the three categories of 
audit objectives: transaction-related objectives, balance-related objectives, and 
presentation and disclosure-related objectives. Our discussion of the first three phases 
of the audit explained how auditors design and perform audit tests to obtain sufficient 
appropriate evidence to support each of these categories of audit objectives. Our 
illustrations of transaction cycle testing emphasized performing audit tests to support 
the six transaction-related and the eight balance-related audit objectives. We’ve 
discussed how those procedures also provide evidence about the four presentation and 
disclosure objectives, which are summarized in the first column of Table 24-1. 

As part of phase IV of the audit, auditors evaluate evidence they obtained during 
the first three phases of the audit to determine whether they should perform additional 
procedures for presentation and disclosure-related objectives. Auditors approach 
obtaining evidence for presentation and disclosure objectives consistent with how they 
approach obtaining evidence for transaction-related and balance-related objectives. 


* Perform procedures to obtain an understanding of controls related to presenta- 
tion and disclosure objectives as a part of risk assessment procedures. 

; ApagossPDHirgée nkicl rrcielpsures when the initial assessment of 
control Tisk is below maximum. 

* Perform substantive procedures to obtain assurance that all audit objectives are 
achieved for information and amounts presented and disclosed in the financial 
statements. 


The second column of Table 24-1 includes examples of substantive procedures 
related to the presentation and disclosure objectives. 

Often, procedures for presentation and disclosure-related objectives are integrated 
with the auditor’s tests for transaction-related and balance-related objectives. For 
example, as part of the audit of accounts receivable, auditors evaluate the need to 
separate notes receivable and amounts due from affiliates and trade accounts due from 
customers. They must also determine that current and noncurrent receivables are 
classified separately and any factoring or discounting of notes receivable is disclosed. 

While much of the information presented and disclosed in the financial statements is 
audited as part of the auditor’s testing in earlier phases of the audit, in phase IV auditors 
evaluate evidence obtained during the first three phases of the audit to assess whether 
additional evidence is needed for the presentation and disclosure objectives. In phase IV, 
auditors also evaluate whether the overall presentation of the financial statements and 
related footnotes complies with accounting standards. This includes an evaluation of 
whether individual financial statements reflect the appropriate classification and descrip- 
tion of accounts consistent with requirements and that the information is presented in 
proper form and with the proper terminology required by accounting standards. 

One of the auditor’s primary concerns related to presentation and disclosure- 
related objectives is determining whether management has disclosed all required 
information (completeness objective for presentation and disclosure). To assess risks 
that the completeness objective for presentation and disclosure is not satisfied, 
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TABLE 24-1 Presentation and Disclosure Audit Objectives ) 


Audit Objectives 





Examples of Substantive Procedures 


Review debt contracts to determine that accounts 
receivable are pledged as collateral. 


Occurrence and rights and obligations— 
Disclosed events and transactions have 
occurred and pertain to the entity. 





Use a disclosure checklist to determine if the 
financial statements include all disclosures 
required by accounting standards. 


Completeness—All disclosures that should 
have been included in the financial 
statements have been included. 





Review financial statements to determine if 
assets are properly classified between current 
and non-current categories. Read the footnotes 
for clarity. 


Classification and understandability— 
Financial information is appropriately 
presented and described and disclosures 
are clearly expressed. 





Accuracy and valuation—Financial and other 
information are disclosed fairly and at 
appropriate amounts. 


Reconcile amounts included in the long-term 
debt footnotes to information examined and 
supported in the auditor's long-term debt audit 
working papers. 











auditors consider information obtained during the first three phases of audit testing 
to determine if they are aware of facts and circumstances that should be disclosed. 
Due to the unique nature of disclosures related to contingent liabilities and 
subsequent events, auditors often assess the risks as high that all required informa- 
tion may not be completely disclosed in the footnotes. Audit tests performed in 
earlier audit phases often do not provide sufficient appropriate evidence about 


contingent liabilities and ‘ubsequeA Bago" PDE Enh alt perform 
procedures in every audit to review foPcontrngent habilities and subsequent events as 


part of their phase IV testing. These procedures are discussed next. 


Phase IV— 


Completing the Audit 





Perform additional 
tests for presenta- 
tion and disclosure 








Review for 


contingent liabilities 








Review for 
subsequent events 








Accumulate 
final evidence 








Evaluate results 








Issue audit report 








Communicate with 
audit committee 
and management 











REVIEW FOR CONTINGENT LIABILITIES AND COMMITMENTS 


OBJECTIVE 24-2 


A contingent liability is a potential future obligation to an outside party for an 
unknown amount resulting from activities that have already taken place. Material 
contingent liabilities must be disclosed in the footnotes. Three conditions are required 
for a contingent liability to exist: 

1. There is a potential future payment to an outside party or the impairment of 

an asset that resulted from an existing condition 
2. There is uncertainty about the amount of the future payment or impairment 
3. The outcome will be resolved by some future event or events 


For example, a lawsuit that has been filed but not yet resolved meets all three 
conditions. 

The uncertainty of the future payment can vary from extremely likely to highly 
unlikely. Accounting standards describe three levels of likelihood of occurrence and the 
appropriate financial statement treatment for each likelihood. These requirements are 
summarized in Table 24-2 (p. 760). To evaluate whether the client has applied the 
appropriate treatment, the auditor must exercise considerable professional judgment. 

Contingency footnotes should describe the nature of the contingency to the extent 
it is known and the opinion of legal counsel or management as to the expected outcome. 
Figure 24-1 (p. 760) is an illustration of a footnote for pending litigation and company 
guarantees of debt. 


Conduct a review for 


contingent liabilities and 


commitments. 
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Phase IV— 
Completing the Audit 





Perform additional 
tests for presenta- 
tion and disclosure 








Review for 
contingent liabilities 








Review for 
subsequent events 








Accumulate 
final evidence 








Evaluate results 








Issue audit report 











Communicate with 
audit committee 
and management 








Audit Procedures for 
Finding Contingencies 
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Likelihood of Occurrence and Financial Statement Treatment 


Likelihood of Occurrence of Event 





Financial Statement Treatment 


Remote (slight chance) No disclosure is necessary. 





Reasonably possible (more than remote, 
but less than probable) 


Footnote disclosure is necessary. 





Probable (likely to occur) ° If the amount can be reasonably estimated, 
financial statement accounts are adjusted. 
° If the amount cannot be reasonably estimated, 


footnote disclosure is necessary. 











Auditors are especially concerned about certain contingent liabilities: 

* Pending litigation for patent infringement, product liability, or other actions 
* Income tax disputes 

* Product warranties 

* Notes receivable discounted 

* Guarantees of obligations of others 

* Unused balances of outstanding letters of credit 


Auditing standards make it clear that management, not the auditor, is responsible for 
identifying and deciding the appropriate accounting treatment for contingent liabilities. 
In many audits, it is impractical for auditors to uncover contingencies without manage- 
ment’s cooperation. 

The auditor’s primary objectives in verifying contingent liabilities are: 

» Evaluate the accounting treatment of known contingent liabilities to determine 

Apag QanRDEnt Bnhancenied the contingency (classification 
presentation and disclosure objective). 

* Identify to the extent practical any contingencies not already identified by 

management (completeness presentation and disclosure objective). 


Closely related to contingent liabilities are commitments. They include such things 
as agreements to purchase raw materials or to lease facilities at a certain price and to sell 
merchandise at a fixed price, as well as bonus plans, profit-sharing and pension plans, 
and royalty agreements. The most important characteristic of a commitment is the 
agreement to commit the firm to a set of fixed conditions in the future, regardless of what 
happens to profits or the economy as a whole. Presumably the entity agrees to commit- 
ments to better its own interests, but they may turn out to be less or more advantageous 
than originally anticipated. Companies ordinarily describe all commitments either in a 
separate footnote or combine them with a footnote related to contingencies. 


Many of these potential obligations are verified as an integral part of various segments 
of the audit rather than as a separate activity near the end of the audit. For example, 


fi | Contingent Liability Footnote 


There are various suits and claims pending against the company and its consolidated subsidiaries. 
It is the opinion of the company’s management, based on current available information, that the 
ultimate liability, if any, resulting from such suits and claims will not materially affect the 
consolidated financial position or results of operations of the company and its consolidated 
subsidiaries. 

The company has agreed to guarantee the repayment of approximately $14,000,000 loaned by 
a bank to several affiliated corporations in which the company owns a minority interest. 
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auditors test for unused balances in outstanding letters of credit as a part of confirming 
bank balances and loans from banks. Similarly, auditors consider the possibility of income 
tax disputes as a part of analyzing income tax expense, reviewing the general corres- 
pondence file, and examining revenue agent reports. Even if contingencies are verified 
separately, auditors commonly perform the tests well before the last few days of 
completing the audit to ensure their proper verification. Tests of contingent liabilities 
near the end of the audit are more of a review than an initial search. 

The first step in the audit of contingencies is to determine whether any contingencies 
exist (occurrence presentation and disclosure objective). As you know from studying 
other audit areas, it is more difficult to discover unrecorded transactions or events than 
to verify recorded information. Once the auditor knows that contingencies exist, 
evaluating their materiality and the footnote disclosures can ordinarily be satisfactorily 
resolved. 

The following are some audit procedures commonly used to search for contingent 
liabilities, but not all are applicable to every audit: 


* Inquire of management (orally and in writing) about the possibility of unrecorded 
contingencies. In these inquiries, the auditor must be specific in describing the 
different kinds of contingencies that may require disclosure as reminders to 
management of contingencies they overlooked or do not fully understand. If 
management overlooked a contingency or does not fully comprehend accounting 
disclosure requirements, the inquiry can be helpful to identify required dis- 
closures. At the completion of the audit, auditors typically ask management to 
make a written statement as a part of the letter of representation (discussed later 
in this chapter) that it is aware of no undisclosed contingent liabilities. Naturally, 
inquiries of management are not useful in uncovering the intentional failure to 
disclose contingencies. 

* Review current and previous years internal revenue agent reports for income tax 
settlements. The reports may, pag Gas PDE nEnhaneesKeettled 
disagreements. If a review has been in progress for a long time, there is an increased 
likelihood of a tax dispute. 

* Review the minutes of directors’ and stockholders’ meetings for indications of 
lawsuits or other contingencies. 

* Analyze legal expense for the period under audit and review invoices and state- 
ments from legal counsel for indications of contingent liabilities, especially 
lawsuits and pending tax assessments. 

* Obtain a letter from each major attorney performing legal services for the client 
as to the status of pending litigation or other contingent liabilities. This procedure 
is examined in more depth shortly. 

* Review audit documentation for any information that may indicate a potential 
contingency. For example, bank confirmations may indicate notes receivable 
discounted or guarantees of loans. 

* Examine letters of credit in force as of the balance sheet date and obtain a con- 
firmation of the used and unused balances. 


If auditors conclude that there are contingent liabilities, they must evaluate the signifi- 
cance of the potential liability and the nature of the disclosure needed in the financial 
statements to obtain evidence about the occurrence and rights and obligations presen- 
tation and disclosure objective. In some instances, the potential liability is sufficiently 
well known to be included in the statements as an actual liability. In other instances, 
disclosure may be unnecessary if the contingency is highly remote or immaterial. 
CPA firms often obtain a separate evaluation of the potential liability from its own 
legal counsel, especially highly material ones, rather than relying on management or 
management’s attorneys. Because they are advocates for the client, the client’s attorneys 
may lose perspective in evaluating the likelihood of losing the case and the amount of 


Evaluation of Known 
Contingent Liabilities 
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Audit Procedures for 
Finding Commitments 


Inquiry of 
Client’s Attorneys 


OBJECTIVE 24-3 





Obtain and evaluate letters 
from the client's attorneys. 





the potential judgment. For those contingencies that require disclosure, the auditor 
also reviews the draft footnote to ensure that the disclosed information is understandable 
and fairly states the conditions of the contingency. 


The search for unknown commitments is usually performed as a part of the audit of 
each audit area. For example, in verifying sales transactions, the auditor should be alert 
for sales commitments. Similarly, commitments for the purchase of raw materials or 
equipment can be identified as a part of the audit of each of these accounts. The auditor 
should also be aware of the possibility of commitments when reading minutes, 
contracts and correspondence files. 


Inquiry of the client’s attorneys is a major procedure auditors rely on for evaluating 
known litigation or other claims against the client and identifying additional ones. The 
auditor relies on the attorney’s expertise and knowledge of the client’s legal affairs to 
provide a professional opinion about the expected outcome of existing lawsuits and the 
likely amount of the liability, including court costs. The attorney is also likely to know 
of pending litigation and claims that management may have overlooked. 

Many CPA firms analyze legal expense for the entire year and have the client send a 
standard inquiry letter to every attorney the client has been involved with in the 
current or preceding year, plus any attorney the firm occasionally engages. In some 
cases, this involves a large number of attorneys, including some who deal in aspects of 
law that are far removed from potential lawsuits. 

The standard inquiry to the client’s attorney, prepared on the client’s letterhead 
and signed by one of the company’s officials, should include the following: 

* A list including (1) pending threatened litigation and (2) asserted or unasserted 

claims or assessments with which the attorney has had significant involvement. 
This list is typically prepared by management, but management may request 
that the attorney prepare the list. 

. ApagouwPDPo Enhancerion or comment about the progress of 
each item listed. The desired information includes the legal action the client 
intends to take, the likelihood of an unfavorable outcome, and an estimate of 
the amount or range of the potential loss. 

* A request of the law firm to identify any unlisted pending or threatened legal 
actions or a statement that the client’s list is complete. 

* A statement informing the attorney of the attorney’s responsibility to inform 
management of legal matters requiring disclosure in the financial statements and to 
respond directly to the auditor. If the attorney chooses to limit a response, reasons 
for doing so are to be included in the letter. 


Figure 24-2 provides an example of a typical standard letter sent to the attorney 
for return directly to the CPA’s office. Notice the first paragraph requests that the 
attorney communicate about contingencies up to approximately the date of the 
auditor's report. 

Attorneys in recent years have become reluctant to provide certain information to 
auditors because of their own exposure to legal liability for providing incorrect or 
confidential information. To learn more about attorneys’ concerns, read the boxed 
feature “The Legal View” on page 764. The nature of the refusals by attorneys to provide 
auditors with complete information about contingent liabilities falls into two categories: 

1. The attorneys refuse to respond due to a lack of knowledge about matters 

involving contingent liabilities. 

2. The attorneys refuse to disclose information that they consider confidential. 


For example, the attorney might be aware of a violation of a patent agreement that 
could result in a significant loss to the client if it were known (unasserted claim). Such 
an instance falls under the second category. The inclusion of the information in a 
footnote could actually cause the lawsuit and therefore be damaging to the client. 
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Typical Inquiry of Attorney 





HILLSBURG HARDWARE CO. 
2146 Willow St. 
Gary, Indiana 46405 


March 1, 2012 


Bailwick & Bettle, Attorneys 
11216 Michigan Avenue 
Chicago, IL 60606 


Our auditors, Berger and Anthony, CPAs (P.O. Box 8175, Gary, Indiana 46405), are conducting an 
audit of our financial statements for the fiscal year ended December 31, 2011. In connection 
with their audit, we have prepared and furnished to them a description and evaluation of certain 
contingencies, including those attached, involving matters with respect to which you have been 
engaged and to which you have devoted substantive attention on behalf of the company in the 
form of legal consultation or representation. For the purpose of your response to this letter, we 
believe that as to each contingency an amount in excess of $100,000 would be material, and in 
total, $700,000. However, determination of materiality with respect to the overall financial 
statements cannot be made until our auditors complete their audit. Your response should 
include matters that existed at December 31, 2011, and during the period from that date to the 
date of the completion of their audit, which is anticipated to be on or about March 15, 2012. 
Please provide to our auditors the following information: 


(1) Such explanation, if any, that you consider necessary to supplement the listed 
judgments rendered or settlements made involving the company from the beginning 
of this fiscal year through the date of your reply. 

(2) Such explanation, if any, that you consider necessary to supplement the listing of 
pending or threatened litigation, including an explanation of those matters as to 
which your views may differ from those stated and an identification of the omission of 
any pending or threatened litigation, claim, and assessment or a statement that the 
list of such matters is complete. 

Such explanation, if any, that you consider necessary to supplement the attached 
information concerning unasserted claims and assessments, including an explanation 
of those matters as to which your views may differ from those stated. 


We understand that whenever, in the course of performing legal services for us with 
respect to a matter recognized to involve an unasserted possible claim or assessment that may 
call for financial statement disclosure, you have formed a professional conclusion that we should 
disclose or consider disclosure concerning such possible claim or assessment, as a matter of 
professional responsibility to us, you will so advise us and will consult with us concerning the 
question of such disclosure and the applicable requirements of accounting standards. Please 
specifically confirm to our auditors that our understanding is correct. 

Please specifically identify the nature of and reasons for any limitations in your response. 


Yours very truly, 
Hillsburg Hardware Co. 


ne oe 


Rick Chulick, Pres. 














If an attorney refuses to provide the auditor with information about material 
existing lawsuits (asserted claims) or unasserted claims, auditors must modify their 
audit report to reflect the lack of available evidence (a scope limitation, which requires a 
qualified or disclaimer of opinion). This requirement in the auditing standards has the 
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THE LEGAL VIEW 





The lawyer is the expert on litigation, yet 
differences in lawyers’ and CPAs’ responsibilities 
with respect to common clients have resulted in 
contentious difficulties. Although CPAs are 
responsible for determining there is “adequate 
disclosure” under accounting standards ... lawyers 
are responsible for “winning the case.” Because 
information provided by lawyers may affect a case 
adversely, these responsibilities may conflict. 
Many lawyers believe that, despite a client's 
request that they provide the auditor with infor- 
mation, they should be less than candid in letters 
to CPAs because of concern their replies may 
® Impair the client-lawyer confidentiality 
privilege 
® Disclose a client confidence or secret 
® Prejudice the client's defense of a claim 
Constitute an admission by the client 


outcome—either likelihood or amount of loss. The 
net effect is CPAs generally can obtain relatively 
complete responses on the existence of litigation 
and the dates when the underlying cause occurred ... 
but less complete responses on the likelihood of 
an unfavorable outcome and the amount of 
potential loss. 

In addition to an implicit hesitancy to provide 
evidential matter on likelihood and amount of 
loss, the ABA statement gives lawyers definitions 
of probable and remote that are different from 
those in accounting standards: 

Remote. The ABA says an unfavorable outcome 
is remote if the prospects for the client not 
succeeding in its defense are judged to be 
extremely doubtful and the prospects of success 
by the claimant are judged to be slight. 

® Probable. The ABA says an unfavorable 


outcome for the client is probable if the 
claimant's prospects of not succeeding are 
judged to be extremely doubtful and the 
client's prospects for success in its defense 
are judged to be slight. 


The authoritative guidance for lawyers ... 
warns lawyers they must be careful in communi- 
cations with auditors. Indeed, the first sentence 
of the ABA statement says, “The public interest 
in protecting the confidentiality of lawyer-client 
communications is fundamental.” 

The ABA statement also says lawyers normally 
should refrain from expressing judgments on 


Source: Excerpted from an article by Bruce K. Behn 
and Kurt Pany, “Limitations of Lawyers’ Letters,” 
Journal of Accountancy (February 1995), pp. 62-63. 





effect of requiring management to give its attorneys permission to provide contingent 
liability information to auditors and to encourage attorneys to cooperate with auditors 
in ADAG. OnkDBo er 

As directed by the Sarbanes—Oxley Act, rules require attorneys serving public companies 
to report material violations of federal securities laws committed by the company. An attor- 
ney must report violations to the public company’s chief legal counsel or chief executive 
officer. If the legal officer or CEO fails to appropriately respond, the attorney must report 
violations to the company’s audit committee. Responding to these requirements, the 
American Bar Association subsequently amended its attorney—client confidentiality rules 
to permit attorneys to breach confidentiality if a client is committing a crime or fraud. 


REVIEW FOR SUBSEQUENT EVENTS 


OBJECTIVE 24-4 





Conduct a post-balance- 
sheet review for subsequent 
events. 





764 


The third part of completing the audit included in the sidebar is the review for subse- 
quent events. The auditor must review transactions and events that occurred after the 
balance sheet date to determine whether any of these transactions or events affect the fair 
presentation or disclosure of the current period statements. The auditing procedures 
required by auditing standards to verify these transactions and events are commonly 
called the review for subsequent events or post-balance-sheet review. 

The auditor’s responsibility for reviewing subsequent events is normally limited to 
the period beginning with the balance sheet date and ending with the date of the 
auditor’s report. Because the date of the auditor’s report corresponds to the completion 
of the important auditing procedures in the client’s office, the subsequent events 
review should be completed near the end of the audit.! Figure 24-3 shows the period 
covered by a subsequent events review and the timing of that review. 

lWhen the auditor’s name is associated with a registration statement under the Securities Act of 1933, the 


auditor’s responsibility for reviewing subsequent events extends beyond the date of the auditor’s report to the 
date the registration becomes effective. 
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— Period Covered by Subsequent Events Review ) 











Clients en ding Audit Date client 
balance sheet report issues financial 
date date statements 
12-31-11 Salq12 3-26-12 





Period to which review 
for subsequent events applies 


Period for processing 
the financial statements 


The auditor is responsible for reviewing for subsequent events occurring between 12-31-11 
and 3-11-12, but not later than the audit report date. Most subsequent events audit 
procedures are performed near the audit report date. 











Two types of subsequent events require consideration by management and evaluation 
by the auditor: those that have a direct effect on the financial statements and require 
adjustment of the current year’s financial statement amounts and those that have no 
direct effect on the financial statement amounts but for which disclosure is required. 


Those That Have a Direct Effect on the Financial Statements and Require 
Adjustment Some events that occur after the balance sheet date provide additional 
information to management that helps them determine the fair presentation of account 
balances as of the balance sheet date. Information about those events helps auditors in 
verifying the balances. For example, if the auditor is having difficulty determining the 
correct valuation of inventory becauge_ of obsolesc om sale of raw material inven- 
tory as scrap in the subsequent peri AGO..RY re tS Fhtory as 
of the balance sheet date. 

Subsequent period events, such as the following, require an adjustment of account 
balances in the current year’s financial statements if the amounts are material: 


* Declaration of bankruptcy by a customer with an outstanding accounts receivable 
balance because of the customer’s deteriorating financial condition 

* Settlement of litigation at an amount different from the amount recorded on 
the books 

* Disposal of equipment not being used in operations at a price below the current 
book value 

* Sale of investments at a price below recorded cost 


When subsequent events are used to evaluate the amounts included in the year- 
end financial statements, auditors must distinguish between conditions that existed at 
the balance sheet date and those that came into being after the end of the year. The 
subsequent information should not be incorporated directly into the statements if the 
conditions causing the change in valuation took place after year-end. For example, assume 
one type of a client’s inventory suddenly becomes obsolete because of a technology 
change after the balance sheet date. The sale of the inventory at a loss in the subsequent 
period is not relevant in the valuation of inventory for obsolescence in this case. 

Auditors of accelerated filer public companies must inquire about and consider any 
information about subsequent events that materially affects the effectiveness of internal 
control over financial reporting as of the end of the fiscal period. If auditors conclude 
that the events reflect a material weakness that existed at year-end, they must give an 
adverse opinion on internal control over financial reporting. If they are unable to 
determine the effect of the subsequent event on the effectiveness of internal control, 
they must disclaim their opinion on internal control. 


Types of 
Subsequent Events 
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Those That Do Not Have a Direct Effect on the Financial Statements but for 
Which Disclosure Is Required Subsequent events of this type provide evidence of 
conditions that did not exist at the date of the balance sheet being reported on but are 
so significant that they require disclosure even though they do not require account 
adjustment. Ordinarily, these events can be adequately disclosed by the use of footnotes, 
but occasionally, one may be so significant as to require disclosure in supplemental 
financial statements that include the effect of the event as if it had occurred on the balance 
sheet date. An example is an extremely material merger. 

Events or transactions occurring in the subsequent period that may require dis- 
closure rather than an adjustment in the financial statements include: 


* A decline in the market value of securities held for temporary investment or resale 

* The issuance of bonds or equity securities 

* A decline in the market value of inventory as a consequence of government 
action barring further sale of a product 

* The uninsured loss of inventories as a result of fire 

> A merger or an acquisition 


Auditors of accelerated filer public companies may also identify events related to 
internal control over financial reporting that arose subsequent to year-end. If the auditor 
determines that these subsequent events have a material effect on the company’s internal 
control over financial reporting, the auditor’s report must include an explanatory para- 
graph either describing the event and its effect or directing the reader to a disclosure in 
management’s report on internal control of the event and its effect. 


There are two categories of audit procedures for the subsequent events review: 


1. Procedures normally integrated as a part of the verification of year-end account 
balances 


2.”%P ads 4 d Nets fet the purpose of discovering events or trans- 
AB at 40) E ath Penk events 

The first category includes cutoff and valuation tests done as a part of the tests of details 
of balances. For example, auditors examine subsequent period sales and acquisition 
transactions to determine whether the cutoff is accurate. Auditors also test the collecti- 
bility of accounts receivable by reviewing subsequent period cash receipts to evaluate the 
valuation of the allowance for uncollectible accounts. Procedures for cutoff and valuation 
have been discussed sufficiently in preceding chapters and are not repeated here. 

The second category of tests are performed specifically to obtain information to 


incorporate into the current year’s account balances or footnotes as tests of the complete- 
ness presentation and disclosure objective. These tests include the following: 


Review Records Prepared Subsequent to the Balance Sheet Date Auditors 
should review journals and ledgers to determine the existence and nature of significant 
transactions related to the current year. If journals are not kept up-to-date, auditors 
should review documents that will be used to prepare the journals. 

Auditors of public companies that are accelerated filers must inquire about and 
examine statements issued during the subsequent events review period, such as 
relevant internal audit reports and regulatory agency reports on the company’s internal 
control over financial reporting. 


Review Internal Statements Prepared Subsequent to the Balance Sheet Date In 
the review, auditors should emphasize changes in the business compared to results for 
the same period in the year under audit and changes after year-end. They should pay 
careful attention to major changes in the business or environment in which the client is 
operating. Auditors should discuss the interim statements with management to determine 
whether they are prepared on the same basis as the current period statements, and also 
inquire about significant changes in the operating results. 
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Examine Minutes Issued Subsequent to the Balance Sheet Date Auditors must 
examine the minutes of stockholders and directors meetings subsequent to the balance 
sheet date for subsequent events affecting the current period financial statements. 


Correspond with Attorneys As discussed earlier in the chapter, auditors correspond 
with attorneys as a part of the search for contingent liabilities. Auditors normally 
request the attorney to date and mail the letter as of the expected completion date of 
field work to fulfill the auditors’ responsibility for subsequent events. 


Inquire of Management Inquiries vary from client to client, but normally include 
significant changes in the assets or capital structure of the company after the balance 
sheet date, the current status of items that were not completely resolved at the balance 
sheet date, and unusual adjustments made subsequent to the balance sheet date. Public 
company auditors must also include inquiries of management about any changes in 
internal control over financial reporting made subsequent to the end of the fiscal period. 

Inquiries of management about subsequent events must be done with appropriate 
client personnel to obtain meaningful answers. For example, it is not useful for the 
auditor to discuss tax or union matters with an accounts receivable supervisor. Depending 
on the information desired, auditors usually make inquiries of the controller, vice 
presidents, and the president. 


Obtain a Letter of Representation The letter of representation written by the 
client’s management to the auditor formalizes statements made by management about 
different matters throughout the audit, including discussions about subsequent events. 
This letter is mandatory and includes other relevant matters. This letter is discussed in 
the following section. 


Occasionally, the auditor determines that a subsequent event that affects the current Dual Dating 
period financial statements occurred after the field work was completed but before the 

audit report was issued. The source of such information is typically management or the 

media. For example, what if an audit A Pag OedDE: Enhance Aditor’s 

last day of field work? Using the dates in Figure 24-3 on page 765, assume the acquisi- 

tion occurred on March 23, when the last day of field work was March 11. In that 

situation, auditing standards require the auditor to extend audit tests for the newly 

discovered subsequent event to make sure that it is correctly disclosed. The auditor has 

two equally acceptable options for expanding subsequent events tests: 


1. Expand all subsequent events tests to the new date 
2. Restrict the subsequent events review to matters related to the new subsequent 
event 


For the first option, auditors simply change the audit report date to the new date. For the 
second option, the auditor issues a dual-dated audit report, meaning that the audit report 
includes two dates: the first date for the completion of field work, except for the specific 
exception, and the second date, which is always later, for the exception. In the example, 
assume the auditor returned to the client’s premises to perform audit tests pertaining only 
to the acquisition and completes those tests on March 31. The audit report will be dual- 
dated as follows: March 11, 2012, except for note 17, as to which the date is March 31, 2012. 





FINAL EVIDENCE ACCUMULATION 


In addition to the review for subsequent events, the auditor has several final evidence OBJECTIVE 24-5 
accumulation responsibilities that apply to all cycles. Five types of final evidence 


: : ‘ , ; : Design and perform the 
accumulation are discussed in this section: perform final analytical procedures, S i 


: : ; : final steps in the evidence- 
evaluate the goilng-concern assumption, obtain a management representation letter, accumulation segment of 


consider information accompanying the basic financial statements, and read other the audit. 
information in the annual report. Each of these is done late in the audit. 
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Perform Final 
Analytical Procedures 


Evaluate Going- 
Concern Assumption 


Obtain Management 
Representation Letter 


Auditing standards require auditors to perform analytical procedures during the 
completion of the audit. They are useful as a final review for material misstatements or 
financial problems not noted during other testing and to help the auditor take a final 
objective look at the financial statements. It is common for a partner to do the analytical 
procedures during the final review of audit documentation and financial statements. 
Typically, a partner has a good understanding of the client and its business because of 
ongoing relationships. This knowledge combined with effective analytical procedures 
help the partner identify possible oversights in an audit. The opening story in the audit 
of Westside Industries illustrates this point. 

When performing analytical procedures during the final review stage, the partner 
generally reads the financial statements, including footnotes, and considers: 


1. The adequacy of evidence gathered about unusual or unexpected account 
balances or relationships identified during planning or while conducting the audit. 

2. Unusual or unexpected account balances or relationships that were not previously 
identified. 


Results from final analytical procedures may indicate that additional audit evi- 
dence is necessary. 


Auditing standards require the auditor to evaluate whether there is a substantial doubt 
about a client’s ability to continue as a going concern for at least one year beyond the 
balance sheet date. Auditors make that assessment initially as a part of planning but may 
revise it after obtaining new information. For example, an initial assessment of going 
concern may need revision if the auditor discovers during the audit that the company has 
defaulted on a loan, lost its primary customer, or decided to dispose of substantial assets 
to pay off loans. Auditors use analytical procedures, discussions with management about 
potential financial difficulties, and their knowledge of the client’s business gained 
throughout the audit to assess the likelihood of financial failure within the next year. 
ARDAGOre:PDE- enhan GEM status is desirable after all evidence 
has been accumulated and proposed audit adjustments have been incorporated into the 
financial statements. When auditors have reservations about the going-concern assump- 
tion, they must evaluate management’s plans to avoid bankruptcy and the feasibility of 
achieving these plans. Making the final decision whether to issue a report with a going- 
concern explanatory paragraph can be time-consuming and difficult. (For more 
discussion of going-concern explanatory paragraphs, see pages 52-53 in Chapter 3.) 


Auditing standards require the auditor to obtain a letter of representation documen- 
ting management’s most important oral representations made during the audit. The 
letter is prepared on the client’s letterhead, addressed to the CPA firm, and signed by 
high-level corporate officials, usually the president and chief financial officer. While the 
letter implies that it has originated with the client, it is common practice for the auditor 
to prepare the letter and request the client to type it on the company’s letterhead and 
sign it. Refusal by a client to prepare and sign the letter requires a qualified opinion or 
disclaimer of opinion. The letter should be dated no earlier than the date of the auditor’s 
report to make sure that there are adequate representations about subsequent events. 
The three purposes of the client letter of representation are: 


1. To impress upon management its responsibility for the assertions in the financial 
statements. It is easy for management to forget that they are responsible, not 
the auditor, for the fair presentation of financial statements, especially in 
smaller companies that lack personnel with expertise in accounting. 

2. To remind management of potential misstatements or omissions in the financial 
statements. For example, if the letter of representation includes a reference to 
pledged assets and contingent liabilities, honest management may be reminded 
of its unintentional failure to disclose the information adequately, which helps 
satisfy the completeness presentation and disclosure objective. To fulfill this 
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objective, the letter of representation should be sufficiently detailed to act as a 
reminder to management. 

3. To document the responses from management to inquiries about various aspects 
of the audit. This provides written documentation of client representations in 
the event of disagreement or a lawsuit between the auditor and client. Because 
it is more formal than oral communication, a letter of representation also 
helps reduce misunderstandings between management and the auditor. 


Auditing standards suggest four categories of specific matters that should be 
included. The four categories, with examples of each, are: 
1. Financial statements 
» Management’s acknowledgment of its responsibility for the fair presentation 
of the financial statements 
» Management’s belief that the financial statements are fairly presented in con- 
formity with applicable accounting standards 
2. Completeness of information 
» Availability of all financial records and related data 
* Completeness and availability of all minutes of meetings of stockholders, 
directors, and committees of directors 
3. Recognition, measurement, and disclosure 
» Management’s belief that the effects of any uncorrected financial statement 
misstatements are immaterial to the financial statements 
* Information concerning fraud involving (a) management, (b) employees who 
have significant roles in internal control, or (c) others where the fraud could 
have a material effect on the financial statements 
* Information concerning related party transactions and amounts receivable 
from or payable to related parties 
* Unasserted claims or assessments that the entity’s lawyer has advised are proba- 
ble of assertion and must bARAGD aE ce Baa (GEEndards 
4. Subsequent events 
* Bankruptcy of a major customer with an outstanding account receivable at 
the balance sheet date 
» A merger or acquisition after the balance sheet date 


PCAOB Standard 5 requires the auditor to obtain written representations from 
management about its responsibility for internal control over financial reporting and 
management’s conclusion about the effectiveness of internal control over financial 
reporting as of the end of the fiscal period. Auditors of public companies may obtain a 
combined representation letter for both the audit of the financial statements and the 
audit of internal control. 

A client representation letter is a written statement from a nonindependent source 
and therefore cannot be regarded as reliable evidence. However, the letter does provide 
documentation that management has been asked certain questions to make sure that 
management understands its responsibilities and to protect the auditor if management 
files claims against the auditor. 

In some audits, the auditor may find other evidence that contradicts statements in 
the letter of representation. In such cases, the auditor should investigate the circum- 
stances and consider whether representations in the letter are reliable. 


Clients often include additional information beyond the basic financial statements in 
materials prepared for management or outside users. Auditing standards refer to this 
additional information as supplementary information in relation to the financial state- 
ments as a whole. Figure 24-4 (p. 770) illustrates the basic financial statements and 
additional supplementary information. 

Auditing standards intentionally refrain from defining or restricting supplemen- 
tary information to enable companies to individualize the information to meet the 
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needs of statement users. However, several types of information are commonly included 
in the additional information section, such as detailed comparative statements supporting 
the totals on the primary financial statements for accounts such as cost of goods sold 
and operating expenses. 

Auditors must clearly distinguish their audit and reporting responsibility for the 
primagX: rebstaPpy Rs afd tphyapnl emenyery information. Usually, the auditor 
has not performed a sufficiently detailed audit to justify an opinion on the additional 
information. In some instances, however, the auditor may be engaged by the client to 
report on the supplementary information accompanying the basic financial statements. 
To complete that engagement, the supplementary information must be derived from 
the accounting records used to generate the basic financial statements and involve the 
same time period as the basic financial statements. Additionally, the auditor cannot have 
issued an adverse opinion or disclaimer of opinion on the basic financial statements. 

When reporting on supplementary information, the auditor users the same materi- 
ality as that used in forming an opinion on the basic financial statements. As a result, 
the additional procedures required are less extensive than if the auditor were issuing an 
opinion on the information taken by itself. 

Auditor reporting on supplementary information can be either in an explanatory 
paragraph following the opinion paragraph in the auditor’s report on the financial state- 
ments or in a separate report on the supplementary information. If the auditor’s report 
on the audited financial statements contains an adverse opinion or a disclaimer of opinion, 
the auditor is precluded from issuing an opinion on the supplementary information. 

The following is an example of an explanatory paragraph reporting on supple- 
mentary information in relation to the financial statements as a whole: 


Our audit was conducted for the purpose of forming an opinion on the financial 
statements as a whole. The accompanying information on pages x through y is 
presented for purposes of additional analysis and is not a required part of the 
financial statements. Such information is the responsibility of management and was 
derived from and relates directly to the underlying accounting and other records used 
to prepare the financial statements. The information has been subjected to the 
auditing procedures applied in the audit of the financial statements and certain 
additional procedures, including comparing and reconciling such information directly 
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to the underlying accounting and other records used to prepare the financial state- 
ments or to the financial statements themselves, and other additional procedures in 
accordance with auditing standards generally accepted in the United States of 
America. In our opinion, the information is fairly stated in all material respects in 
relation to the financial statements as a whole. 


If the auditor concludes that the supplementary information is materially mis- 
stated in relation to the financial statements as a whole, the auditor should request 
management to revise the supplementary information. If management does not make 
the necessary modifications, the auditor should modify the auditor’s opinion on the 
supplementary information and describe the misstatement in the auditor’s report. If a 
separate report is being issued on the supplementary information, the auditor should 
withhold the auditor’s report on the supplementary information. 

Sometimes additional information is required by accounting standards, which 
auditing standards refer to as required supplementary information. Required supplemen- 
tary information is not part of the basic financial statements; however, a designated 
accounting standards setter considers the information to be an essential part of finan- 
cial reporting. When required supplementary information accompanies the basic 
financial statements, auditing standards require the auditor to perform certain additional 
procedures that are limited to inquiry of management about the methods of preparing 
the information and comparison of the information for consistency with management’s 
responses to the auditor’s inquiries, the basic financial statements, and to information 
the auditor obtains during the audit of the basic financial statements. Because these 
limited procedures do not provide sufficient evidence to provide any assurance about 
the required supplementary information, the auditor’s report on the basic financial 
statements includes an explanatory paragraph that contains a disclaimer of opinion 
about the required supplementary information. 


Auditing standards requires the udaApagolPDPmBirhaneeynnual Read Other 
reports pertaining directly to the financial Statements. For example, assume that the Information in the 


president’s letter in the annual report refers to an increase in earnings per share from Annual Report 
$2.60 to $2.93. The auditor is required to compare that information with the financial 
statements to make sure it corresponds. 

Auditor responsibility to read other information included in annual reports pertains 
only to information that is not a part of the financial statements but is published with 
them. Examples are the president’s letter and explanations of company activities 
included in annual reports of nearly all publicly held companies. It usually takes auditors 
only a few minutes to make sure that the nonfinancial statement information is con- 
sistent with the statements. If auditors conclude that a material inconsistency exists, they 
should request the client to change the information. If the client refuses, which would be 
unusual, the auditor should include an explanatory paragraph in the audit report or 
withdraw from the engagement. 


EVALUATE RESULTS 


After performing all audit procedures in each audit area, including the review for OBJECTIVE 24-6 
contingencies and subsequent events and accumulating final evidence, the auditor 
must integrate the results into one overall conclusion about the financial statements. 





Integrate the audit evidence 


: . . : : : : gathered and evaluate the 
Ultimately, the auditor must decide whether sufficient appropriate audit evidence has overall audit results. 


been accumulated to warrant the conclusion that the financial statements are stated in 
accordance with accounting standards applied on a basis consistent with those of the 
preceding year. Similarly, when issuing a report on internal control, auditors must also 
arrive at an overall conclusion about the effectiveness of internal control over financial 
reporting. The five main aspects of evaluating the results are discussed next. 





Chapter 24 / COMPLETING THE AUDIT 771 





Completing the Audit Checklist 





. Internal control 





1. Examination of prior year’s audit documentation 
a. Were last year’s audit files examined for areas of emphasis in the current year audit? 
b. Was the permanent file reviewed for items that affect the current year? 


a. Has internal control been adequately understood? 
b. Is the scope of the audit adequate in light of the assessed control risk? 


c. Have all significant deficiencies and material weaknesses been reported in writing to those 
charged with governance? 
. General documents 
a. Were all current year minutes and resolutions reviewed, abstracted, and followed up? 
b. Has the permanent file been updated? 
c. Have all major contracts and agreements been reviewed and abstracted, copied, or 
downloaded to ascertain that the client complies with all existing legal requirements? 











Sufficient 
Appropriate Evidence 


Evidence Supports 
Auditor's Opinion 
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To make a final evaluation as to whether sufficient appropriate evidence has been 
accumulated, the auditor reviews the audit documentation for the entire audit to deter- 
mine whether all material classes of transactions, accounts and disclosures have been 
adequately tested, considering all circumstances of the audit. An important part the 
review is to make sure that all parts of the audit program have been accurately completed 
and documented, and that all audit objectives have been met. The auditor must decide 
whether the audit program is adequate, considering problem areas identified as the audit 
progressed. For example, if misstatements were discovered during tests of sales, the initial 
plans for tests of details of accounts receivable may have been insufficient. 

As_an aid in deciding whether the audit evidence is adequate, auditors often use a 
compipaAg@dRDEicnhancex, of items that may have been over- 
looked. Figure 24-5 illustrates part of a completing the audit checklist. 

If auditors conclude that sufficient evidence has not been obtained to decide whether 
the financial statements are fairly presented, they have two choices: accumulate addi- 
tional evidence or issue either a qualified opinion or a disclaimer of opinion. 


An essential part of evaluating whether the financial statements are fairly stated involves 
the auditor’s review of their summary of misstatements found in the audit. When any 
one misstatement is material, auditors should propose that the client correct the financial 
statements. It may be difficult to determine the appropriate amount of adjustment 
because the exact amount of the misstatement may be unknown if it involves an estimate 
or includes sampling error. Nevertheless, the auditor must decide on the required 
adjustment. (In some audits there may be more than one material misstatement.) 

In addition to individually material misstatements, there are often several imma- 
terial misstatements that the client did not adjust. Auditors must combine individually 
immaterial misstatements to evaluate whether the combined amount is material. 
They can keep a record of these misstatements and combine them in different ways, 
but many auditors use an unadjusted misstatement audit schedule or summary of 
possible misstatements. An example of an unadjusted misstatement worksheet is given 
in Figure 24-6. 

The schedule in Figure 24-6 includes both known misstatements that the client has 
decided not to adjust and projected misstatements, including sampling error, and total 
possible misstatements for several financial statement categories. The bottom left 
portion of the audit schedule, under the heading “Conclusions,” includes a comparison 
of possible overstatements and understatements to materiality. A summary of this audit 
schedule is often included with management’s representation that the uncorrected 
misstatements are immaterial. 
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FIGURE 24-6 
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Hillsburg Hardware Co. 
Summary of Possible Misstatements 
12/31/11 


Audit File 
Source 
B-4 Understated allowance for 
uncollectible accounts 
C-8 Accounts receivable/Sales cutoff 
misstatements 
D-2 Difference between physical 
inventory and book figures 
H-7/2 Unrecorded liabilities 
V-10 Repairs expense items that 
should have been capitalized 
Totals 
Conclusions 


The net effects of the above items are as follows: 





[EA] Estimated based on analytical procedures. 
[A] Actual population misstatements. 
[P] Estimated population misstatements based on the sample, including sampling error. 


Schedule _A-3 _ Date 
Prepared by LF 3/15/12 
Approved by JA 3/15/12 


POSSIBLE MISSTATEMENT—OVERSTATEMENT 








(UNDERSTATEMENT) 

Type of Total Current Noncurrent Current Income 
Misstatement Amount Assets Assets Liabilities Before Tax 
[EA] 95,000 95,000 95,000 
[P] 60,000 (60,000) (60,000) 
[Al 120,000 (120,000) (120,000) 
[P] 285,000 (100,000) (85,000) (285,000) 100,000 
[Al 90,000 (90,000) (90,000) 
(185,000) (175,000) (285,000) (75,000) 





None of these aggregate effects or the individual items 
has a material effect on the financial statements in 








EE 


Materiality total or with respect to the components they pertain 
Current assets (185,000) 1,531,000 to. On this basis, adjustment of any or all of the items 
Total assets (360,000) 1,841,000 is passed. : ; 
Income before taxes (75,000) 442,000 Leslie Franklin 


3/15/12 








If auditors believe that there is sufficient evidence but they conclude that the financial 
statements are not fairly presented, they again have two choices: The statements must be 
revised to the auditor’s satisfaction or either a qualified or an adverse opinion must be issued. 
Notice that the options here are different from those in the case of insufficient evidence. 


Before completing the audit, auditors must make a final evaluation of whether the dis- 
closures in the financial statements satisfy all presentation and disclosure objectives. As 


Financial Statement 
Disclosures 


we discussed at the beginning of this chapter, auditors must design and perform audit 
procedures to obtain evidence that the four presentation and disclosure objectives are 


satisfied. 


As part of the final review for financial statement disclosures, many CPA firms 
require the completion of a financial statement disclosure checklist for every audit. 
These questionnaires are designed to remind the auditor of common disclosure 
problems in financial statements and to facilitate the final review of the entire audit by 
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Audit Documentation 
Review 


Independent Review 





Financial Statement Disclosure Checklist: Property, Plant, ) 
and Equipment 


1. Are the following disclosures included in the financial statements or notes: 
a. Balances of major classes of depreciable assets (land, building, equipment, and so forth) 
at the balance sheet date? 
b. Allowances for depreciation, by class or in total, at the balance sheet date? 
c. General description of depreciation methods for major classes of PP&E? 
d. Total amount of depreciation charged to expense for each income statement presented? 
e. Basis of evaluation? 
2. Are carrying amounts of property mortgaged and encumbered by indebtedness disclosed? 
3. Are details of sale and leaseback transactions during the period disclosed? 
4. Is the carrying amount of property not a part of operating plant—for example, idle or held for 
investment or sale—segregated? 
5. Has consideration been given to disclosure of fully depreciated capital assets still in use and 
capital assets not presently in use? 














an independent partner. Figure 24-7 illustrates a partial financial statement disclosure 
checklist. Naturally, a checklist is not sufficient to replace the auditor’s knowledge of 
the proper application of accounting standards for the circumstances of the audit. 


There are three reasons why an experienced member of the audit firm must thoroughly 
review audit documentation at the completion of the audit: 


1. To evaluate the performance of inexperienced personnel. A considerable portion 
of most audits is performed by audit personnel with fewer than four or five 
years of experience. These people may have sufficient technical training to 
conduct an adequate audit, but their lack of experience affects their ability to 
make sound professional judgments in complex situations. 

.Apages DE in enhance rps firm’s standard of performance. 
Within any CPA firm, the quality of staff performance varies considerably, but 
careful review by top-level personnel in the firm helps to maintain a uniform 
quality of auditing. 

3. To counteract the bias that often enters into the auditor’s judgment. Auditors 
must attempt to remain objective throughout the audit, but they may lose 
proper perspective on a long audit when complex problems need to be solved. 


Except for a final independent review, which is discussed shortly, the review of 
audit documentation should be conducted by someone who is knowledgeable about 
the client and the circumstances in the audit. Therefore, the auditor’s immediate 
supervisor normally conducts the initial review of audit files prepared by another 
auditor. For example, the least experienced auditor’s work is ordinarily reviewed by the 
audit senior. The senior’s immediate superior, who is normally a supervisor or manager, 
reviews the senior’s work and also reviews, less thoroughly, the schedules of the 
inexperienced auditor. Finally, the partner assigned to the audit must ultimately review 
all audit documentation, but the partner reviews those prepared by the supervisor or 
manager more thoroughly than the others. While performing the review, each reviewer 
has discussions with the auditor responsible for preparing the audit documentation to 
learn how significant audit issues were resolved. Except for the final independent 
review, most audit documentation review is done as each segment of the audit is 
completed. 


At the completion of larger audits, it is common to have the financial statements and 
the entire set of audit files reviewed by a completely independent reviewer who has not 
participated in the audit, but is a member of the audit firm doing the audit. An 
independent review, sometimes referred to as an engagement quality review, is 
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UNRECORDED In March 2002, the SEC announced it had 
completed its investigation of the accounting 
ADJUSTMENTS practices at Waste Management, Inc. and had filed 
PROVE COSTLY _ Sits against the company and several of its top 
executives charging them with perpetrating a 
TO AUDIT FIRM massive financial statement fraud lasting more 


than five years. The SEC alleged that management 
manipulated the company’s financial results using 
a multitude of improper accounting practices to 
meet predetermined earnings targets. 

As part of the investigation, the SEC noted that 
Waste Management's auditors, Arthur Andersen, 
had identified the company’s improper accounting 
practices and quantified much of the impact of 
those practices on the company’s financial 
statements. According to SEC filings, Andersen 
annually presented company management with 
“Proposed Adjusting Journal Entries (PAJEs)” to 
correct errors that understated expenses and 
overstated earnings in the company’s financial 
statements. Management consistently refused to 
make the adjustments called for by the PAJEs, 
and, instead, entered into an agreement with 


Andersen to write off the accumulated errors over 
periods of up to 10 years. However, as time 
progressed, management never complied with 
the terms of their secret agreement. 

The SEC eventually settled charges with 
Andersen and four of its partners related to the 
1992 through 1996 audited financial statements. 
Andersen agreed to pay a penalty of $7 million, 
the largest ever assessed against an accounting 
firm at the time. Commenting on the SEC’s 
actions, Richard Walker, SEC Director of 
Enforcement, noted: 

“Arthur Andersen and its partners failed to 
stand up to company management and thereby 
betrayed their ultimate allegiance to Waste 
Management's shareholders and the investing 
public. Given the positions held by these partners 
and the duration and gravity of the misconduct, the 
firm itself must be held responsible for the false 
and misleading audit reports.’ 

Source: Beasley, Buckless, Glover, and Prawitt, 

Auditing Cases: An Interactive Learning Approach, 

4th Edition, pp. 103-110, published by Prentice Hall. 





required for SEC engagements, including the review of interim financial information 
and the audit of internal controls. This reviewer often takes an adversarial position to 
make sure the conduct of the audit was adequate. The audit team must be able to 
justify the evidence it has accumulated and the conclusions it reached on the basis of 


the circumstances of the audit. Ap ago PDF Enh ancer 


Figure 24-8 summarizes evaluating whether there is sufficient appropriate evidence 
and whether the evidence supports the opinion on the financial statements. It 
shows that the auditor evaluates the sufficiency and appropriateness of the evidence 
by first evaluating achieved audit risk, by account and by cycle, and then making 
the same evaluation for the overall financial statements. The auditor also evaluates 
whether the evidence supports the audit opinion by first estimating misstatements 
in each account and then for the overall financial statements. In practice, the 
evaluation of achieved audit risk and estimated misstatement are made at the same 
time. On the basis of these evaluations, the audit report is issued for the financial 
statements. 
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ISSUE THE AUDIT REPORT 


The auditor should wait to decide the appropriate audit report to issue until all 
evidence has been accumulated and evaluated, including all steps of completing the 
audit discussed so far. Because the audit report is the only thing that most users see in 
the audit process, and the consequences of issuing an inappropriate report can be 
severe, it is critical that the report be correct. 

In most audits, the auditor issues an unqualified report with standard wording. 
Firms usually have an electronic template of this report and need to change only the 
name of the client, title of the financial statements, and date. 

When a CPA firm decides that a standard unqualified report is inappropriate, 
there will almost certainly be extensive discussions among technical partners in the 
CPA firm and often with client personnel. Most CPA firms have comprehensive audit 
reporting manuals to assist them in selecting the appropriate wording of the report 
they decide to issue. 


COMMUNICATE WITH THE AUDIT COMMITTEE AND MANAGEMENT 


OBJECTIVE 24-7 





Communicate effectively 
with the audit committee 
and management. 





Communicate Fraud 
and Illegal Acts 


Communicate Internal 
Control Deficiencies 


Other 
Communications 
with Audit Committee 


After the audit is completed, several potential communications from the auditor may 
be sent to the audit committee or others charged with governance, including com- 
munication of detected fraud and illegal acts, internal control deficiencies, other 
communications with the audit committee, and management letters. The first three of 
these communications are required by auditing standards to make certain that those 
charged with governance, which is often the audit committee and senior management, 
are informed of audit SDE and auditor recommendations. The fourth item, manage- 


ment Apaige@en BDEinibnhanr@egnanagement. 


Auditing standards require the auditor to communicate all fraud and illegal acts to the 
audit committee or similarly designated group, regardless of materiality. The purpose 
is to assist the audit committee in performing its supervisory role for reliable financial 
statements. 


As discussed in Chapter 10, the auditor must also communicate in writing significant 
internal control deficiencies and material weaknesses in the design or operation of 
internal control to those charged with governance. In larger companies, this communi- 
cation is made to the audit committee and in smaller companies, it may be made to the 
owners or senior management. 


Auditing standards require the auditor to communicate certain additional information 
obtained during the audit to those charged with governance, which is generally the 
audit committee. The purpose of this required communication is to keep the audit 
committee, or others charged with governance, informed about significant and 
relevant information for the oversight of the financial reporting process and to provide 
an opportunity for the audit committee to communicate important matters to the 
auditor. Thus, the auditing standard requirements are designed to encourage two-way 
communications between the auditor and those charged with governance. There are 
four principal purposes of this required communication: 


1. To communicate auditor responsibilities in the audit of financial statements. 
This communication includes discussion by the auditor that the audit of 
financial statements is designed to obtain reasonable, rather than absolute, 
assurance about material misstatements in the financial statements. For 
audits of financial statements that do not include an audit of internal control 
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over financial reporting, the communication also indicates that the auditor is 
not providing an opinion on the effectiveness of internal control, in addition 
to other limitations of an audit of financial statements. 

2. To provide an overview of the scope and timing of the audit. The purpose of this 
required communication is to provide a high-level overview, such as the 
auditor’s approach to addressing significant risks and consideration of internal 
control, and timing of the audit. Details of the nature and timing of audit 
procedures is not appropriate to avoid compromising the effectiveness and 
predictability of the audit. 

3. To provide those charged with governance with significant findings arising during 
the audit. These communications might include discussion of material, 
corrected misstatements detected during the audit, the auditor’s view of quali- 
tative aspects of significant accounting practices and estimates, and significant 
difficulties encountered during the audit, including disagreements with 
management, among other matters. 

4. To obtain from those charged with governance information relevant to the audit. 
The audit committee or others charged with governance, such as the full board 
of directors, may share strategic decisions that may affect the nature and 
timing of the auditor’s procedures. 


Communications about significant findings arising during the audit are normally 
made in writing. Communications about other matters may be made orally or in 
writing, with all oral communications documented in the audit files. Communications 
should be made timely to allow those charged with governance to take appropriate 
actions. Generally, communications about the auditor’s responsibilities and the audit 
scope and timing occur early in an audit, while communications about significant 
findings usually occur throughout the entire engagement period. 

The Sarbanes—Oxley Act of 2002 includes additional communication requirements 
for auditors of public companies. For. OditPDEst Qe Ernative 
treatments of financial information within requirements of accounting standards that 
have been discussed with management, ramifications of the alternative disclosures and 
treatments, and the treatment preferred by the auditor. As the audit is completed, the 
auditor should determine that the audit committee is informed about the initial selection 
of and changes in significant accounting policies or their application during the current 
audit period, as well as the reasons for any changes. The auditor should also communi- 
cate information about methods used to account for any significant unusual transactions 
and the effect of significant accounting policies in controversial or emerging areas. 


A management letter is intended to inform client personnel of the CPA’s recommen- 
dations for improving any part of the client’s business. Most recommendations focus 
on suggestions for more efficient operations. The combination of the auditor’s experience 
in various businesses and a thorough understanding gained in conducting the audit 
places the auditor in a unique position to provide assistance to management. 

Many CPA firms write a management letter for every audit to demonstrate to 
management that the firm adds value to the business beyond the audit service pro- 
vided. Their intent is to encourage a better relationship with management and to suggest 
additional tax and permitted management services that the CPA firm can provide. 

A management letter differs from a letter reporting significant deficiencies in 
internal control, which was discussed in Chapter 10. The latter is required when there 
are significant deficiencies or material weaknesses in internal control, and must follow 
a prescribed format and be sent in accordance with the requirements of auditing 
standards. A management letter is optional and is intended to help the client operate its 
business more effectively. 

Each management letter should be developed to meet the style and preferences of 
the CPA firm and the needs of the client. Some auditors combine the management 
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letter with the letter about significant deficiencies and material weaknesses. On smaller 
audits, it is common for the auditor to communicate operational suggestions orally 
rather than by a management letter. 


SUBSEQUENT DISCOVERY OF FACTS 


OBJECTIVE 24-8 


Identify the auditor's 
responsibilities when facts 


affecting the audit report 
are discovered after its 
issuance. 





After the auditor issues the audit report and completes all communications with 
management and the audit committee, the audit is finished. Usually, the next major 
contact between the auditor and client occurs when the planning process of the next 
year’s audit begins. 

Although it rarely happens, auditors sometimes learn after the audited financial 
statements have been issued that the financial statements are materially misstated. Examples 
are the inclusion of material nonexistent sales, the failure to write off obsolete inventory, 
or the omission of an essential footnote. 

When this subsequent discovery of facts occurs, the auditor has an obligation to 
make certain that users who are relying on the financial statements are informed about 
the misstatements. (If the auditor had known about the misstatements before the audit 
report was issued, the auditor would have insisted that management correct the 
misstatements or, alternatively, a different audit report would have been issued.) It does 
not matter whether the failure to discover the misstatement was the fault of the auditor 
or the client. In either case, the auditor’s responsibility remains the same. Although 
subsequent discovery of facts is not part of completing the audit, it is included in this 
chapter because it is easier to understand in this context. 

If the auditor discovers that the statements are misleading after they have been issued, 
the most desirable action is to request that the client issue an immediate revision of the 
financial statements that includes an explanation of the reasons for the revision. If a 
subse@FAAGA’s BDEal BahanCeR*pleted before the revised statements 
would be issued, it is acceptable to disclose the misstatements in the subsequent period’s 
statements. When pertinent, the client should inform the SEC and other regulatory 
agencies of the misstated financial statements. The auditor is responsible to make certain 
that the client has taken the appropriate steps to inform users of the misstated statements. 

If the client refuses to disclose the misstated statements, the auditor must inform 
the board of directors. The auditor must also notify regulatory agencies having juris- 
diction over the client that the statements are no longer fairly stated and also, when 
practical, each person who relies on the financial statements. If the stock is publicly 
held, it is acceptable to request the SEC and the stock exchange to notify stockholders. 

The subsequent discovery of facts requiring the recall or reissuance of financial 
statements arises only from business events that existed before the date of the auditor’s 
report. For example, a revision of the financial statements is not required if an account 
receivable is believed to be collectible after an adequate review of the facts at the date of 
the audit report, but the customer subsequently files bankruptcy. If the customer had 
filed for bankruptcy before the audit report date, however, there is a subsequent 
discovery of facts. 

The auditor’s responsibility for subsequent events review ends on the date of the 
completion of the field work. Auditors have no responsibility to search for subsequent 
facts, but if they discover that issued financial statements are incorrectly stated, they 
must take action to correct them. In most cases, subsequent discovery of facts occurs 
when auditors discover a material misstatement in issued financial statements during 
the subsequent year’s audit, or when the client reports a misstatement to the auditor. 

Figure 24-9 illustrates the periods covered by the review for subsequent events, 
processing the financial statements, and subsequent discovery of facts after the audit 
report date. As you review the figure, note that auditors have no responsibility to 
review subsequent events after the audit report date. If auditors discover subsequent 
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. 
Review for Subsequent Events and Subsequent Discovery 
of Facts 
Client’s ending Audit Date client 
balance sheet report issues financial 
date date statements 
| | 
12-31-11 3-11-12 3-26-12 
Period to which Period for Period in which 
review for subsequent processing subsequent discovery 
events applies the financial of facts is made 
statements 
= 4 








facts after the audit report date (3-11-12), but before the financial statements are issued 
(3-26-12), they will require that the financial statements be revised before they are 
issued. Auditors will also follow one of the two options discussed in the “Dual Dating” 
section, page 767. 


SUMMARY 


The completion phase of the audit is critical to ensuring a quality audit. In this phase, 
auditors perform additional tests for presentation and disclosure, including reviewing for 
contingencies and subsequent events. Auditors also review the sufficiency of the audit 
evidence and the decisions reached to determine whether they support the audit opinion. 


Auditors then communicate with heApagoUtPDFumwrhancercrtant 


audit findings and other matters. 


ESSENTIAL TERMS 


Commitments—agreements that the entity 
will hold to a fixed set of conditions, such 
as the purchase or sale of merchandise at a 
stated price, at a future date, regardless of 
what happens to profits or to the economy 
as a whole 


Completing the audit checklist—a reminder 
to the auditor of aspects of the audit that 
may have been overlooked 


Contingent liability—a potential future 
obligation to an outside party for an un- 
known amount resulting from activities 
that have already taken place 


Dual-dated audit report—the use of one 
audit report date for normal subsequent 
events and a later date for one or more 
subsequent events that come to the 
auditor’s attention after the field work has 
been completed 


Financial statement disclosure checklist— 
a questionnaire that reminds the auditor 


of disclosure problems commonly en- 
countered in audits and that facilitates 
final review of the entire audit by an inde- 
pendent partner 


Independent review—a review of the 
financial statements and the entire set of 
audit files by a completely independent 
reviewer to whom the audit team must 
justify the evidence accumulated and the 
conclusions reached 


Inquiry of the client’s attorneys—a letter 
from the client requesting that legal counsel 
inform the auditor of pending litigation 
or any other information involving legal 
counsel that is relevant to financial state- 
ment disclosure 


Letter of representation—a written com- 
munication from the client to the auditor 
formalizing statements that the client has 
made about matters pertinent to the audit 


Chapter 24 / COMPLETING THE AUDIT 


7719 


780 


Management letter—an optional letter 
written by the auditor to a client’s manage- 
ment containing the auditor’s recommen- 
dations for improving any aspect of the 
client’s business 


Other information included in annual 
reports—information that is not a part of 
the financial statements but is pub- 
lished with them; auditors must read 
this information for inconsistencies with 
the financial statements 


Review for subsequent events—the audit- 
ing procedures performed by auditors to 
identify and evaluate subsequent events; 
also known as a post-balance-sheet review 


Review of audit documentation—a review 
of the completed audit files by another 
member of the audit firm to ensure quality 
and counteract bias 


Subsequent discovery of facts—auditor 
discovery that the financial statements are 
materially misstated after they have been 
issued 


Subsequent events—transactions and 
other pertinent events that occurred after 
the balance sheet date that affect the fair 
presentation or disclosure of the state- 
ments being audited 


Unadjusted misstatement audit schedule— 
a summary of immaterial misstatements 
not adjusted at the time they were found, 
used to help the auditor assess whether the 
combined amount is material; also known 
as a summary of possible misstatements 


Unasserted claim—a potential legal claim 
against a client where the condition for a 
claim exists but no claim has been filed 


REVIEW QUESTIONS 


24-1 (Objective 24-1) Identify and describe the four presentation and disclosure audit 
objectives. 


24-2. (Objective 24-1) Describe the purpose of a financial statement disclosure checklist 
and explain how it helps the auditor determine if there is sufficient appropriate evidence 


for aA Pago PDF Bnhancear 


24-3 (Objective 24-2) Distinguish between a contingent liability and an actual liability and 
give three examples of each. 


24-4 (Objective 24-2) In the audit of the James Mobley Company, you are concerned 
about the possibility of contingent liabilities resulting from income tax disputes. Discuss 
the procedures you could use for an extensive investigation in this area. 


24-5 (Objective 24-2) Explain why an auditor is interested in a client’s future commitments 
to purchase raw materials at a fixed price. 


24-6 (Objective 24-3) Explain why the analysis of legal expense is an essential part of every audit. 


24-7 (Objectives 24-2, 24-3) During the audit of the Merrill Manufacturing Company, Ralph 
Pyson, CPA, has become aware of four lawsuits against the client through discussions with 
the client, reading corporate minutes, and reviewing correspondence files. How should Pyson 
determine the materiality of the lawsuits and the proper disclosure in the financial statements? 


24-8 (Objective 24-3) Distinguish between an asserted and an unasserted claim. Explain 
why a client’s attorney may not reveal an unasserted claim. 


24-9 (Objective 24-3) Describe the action that an auditor should take if an attorney refuses 
to provide information that is within the attorney’s jurisdiction and may directly affect the 
fair presentation of the financial statements. 


24-10 (Objective 24-4) Distinguish between the two general types of subsequent events 
and explain how they differ. Give two examples of each type. 


24-11 (Objectives 24-3, 24-4) In obtaining letters from attorneys, Bill Malano’s aim is to 
receive the letters as early as possible after the balance sheet date. This provides him with a 
signed letter from every attorney in time to properly investigate any exceptions. It also 
eliminates the problem of a lot of unresolved loose ends near the end of the audit. Evaluate 
Malano’s approach. 
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24-12 (Objective 24-4) What major considerations should the auditor take into account in 
determining how extensive the review of subsequent events should be? 


24-13 (Objective 24-4) Identify five audit procedures normally done as a part of the review 
for subsequent events. 


24-14 (Objectives 24-4, 24-8) Distinguish between subsequent events occurring between 
the balance sheet date and the date of the auditor’s report, and subsequent discovery of 
facts existing at the date of the auditor’s report. Give two examples of each and explain the 
appropriate action by the auditor in each instance. 


24-15 (Objective 24-5) Miles Lawson, CPA, believes that the final summarization is the 
easiest part of the audit if careful planning is followed throughout the audit. He makes sure 
that each segment of the audit is completed before he goes on to the next. When the last 
segment of the audit is completed, he is finished with the audit. He believes this may cause 
each part of the audit to take a little longer, but he makes up for it by not having to do the 
final summarization. Evaluate Lawson’s approach. 


24-16 (Objectives 24-1, 24-5, 24-6) Compare and contrast the accumulation of audit 
evidence and the evaluation of the adequacy of the disclosures in the financial statements. 
Give two examples in which adequate disclosure could depend heavily on the accumulation 
of evidence and two others in which audit evidence does not normally significantly affect 
the adequacy of the disclosure. 


24-17 (Objectives 24-5, 24-7) Distinguish between a client letter of representation and a 
management letter and state the primary purpose of each. List some items that might be 
included in each letter. 


24-18 (Objective 24-5) Explain what is meant by information accompanying basic financial 
statements. Provide two examples of such information. What levels of assurance may the 
CPA offer for this information? 


24-19 (Objective 24-5) What is mearm by readin “p angal information in annual 
reports? Give an example of the type Apage., D too AACS © 
24-20 (Objective 24-6) Distinguish between regular audit documentation review and 


independent review and state the purpose of each. Give two examples of potential findings 
in each of these two types of review. 


24-21 (Objective 24-7) Describe matters that the auditor must communicate to audit 
committees of public companies. 


MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


24-22 (Objective 24-2) The following questions deal with contingent liabilities. Choose the 
best response. 


a. The audit step most likely to reveal the existence of contingent liabilities is 
(1) a review of vouchers paid during the month following the year-end. 
(2) an inquiry directed to legal counsel. 

(3) accounts payable confirmations. 
(4) mortgage-note confirmation. 


b. Which of the following would be least likely to be included in a standard inquiry to 

the client’s attorney? 

(1) A list provided by the client of pending litigation or asserted or unasserted claims 
with which the attorney has had some involvement. 

(2) A request for the attorney to opine on the correct accounting treatment associated 
with an outstanding claim or pending lawsuit outcome. 

(3) A request that the attorney provide information about the status of pending litigation. 

(4) A request for the attorney to identify any pending litigation or threatened legal 
action not identified on a list provided by the client. 
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c. When a contingency is resolved subsequent to the issuance of audited financial state- 


ments, which correctly contained disclosure of the contingency in the footnotes based 
on information available at the date of issuance, the auditor should 

(1) take no action regarding the event. 

(2) insist that the client issue revised financial statements. 

(3) inform the audit committee that the report cannot be relied on. 

(4) inform the appropriate authorities that the report cannot be relied on. 


24-23 (Objectives 24-5, 24-7) The following questions concern communications between 
management, those charged with governance, and the auditor. Choose the best response. 
a. A principal purpose of a letter of representation from management is to 


(1) serve as an introduction to company personnel and an authorization to examine 
the records. 

(2) discharge the auditor from legal liability for the audit. 

(3) confirm in writing management’s approval of limitations on the scope of the audit. 

(4) remind management of its primary responsibility for financial statements. 


. The date of the management representation letter should coincide with the 


(1) balance sheet date. 

(2) date of the auditor’s report. 

(3) date of the latest subsequent event referred to in the notes to the financial statements. 
(4) date of the engagement agreement. 


c. Which of the following is not a required item to be communicated by the auditor to 


the audit committee or others charged with governance? 

(1) Information about the auditor’s responsibility in an audit of financial statements. 
(2) Information about the overall scope and timing of the audit. 

(3) Recommendations for improving the client’s business. 

(4) Significant findings arising from the audit. 


d. A management letter 


(1) is ete} audit or nificant deficiencies and material weaknesses in 
Apade. PoP Enhancér 


(2) fete a s representations to the auditor documenting statements 
made by management to the auditor during the audit about matters affecting the 
financial statements. 

(3) is mandatory in all audits and must be dated the same date as the audit report. 

(4) contains recommendations from the auditor designed to help the client improve 
the efficiency and effectiveness of its business. 


24-24 (Objective 24-4) The following questions deal with review of subsequent events. 
Choose the best response. 
a. Subsequent events for reporting purposes are defined as events that occur subsequent 


to the 

(1) balance sheet date. 

(2) date of the auditor’s report. 

(3) balance sheet date but before the date of the auditor’s report. 

(4) date of the auditor’s report and concern contingencies that are not reflected in the 
financial statements. 


b. An example of an event occurring in the period of the auditor’s field work subsequent 


to the end of the year being audited that normally will not require disclosure in the 
financial statements or auditor’s report is 

(1) serious damage to the company’s plant from a widespread flood. 

(2) issuance of a widely advertised capital stock issue with restrictive covenants. 

(3) settlement of a large liability for considerably less than the amount recorded. 

(4) decreased sales volume resulting from a general business recession. 


. Ruffin has audited the financial statements of Weaver Corporation for the year ended 


December 31, 2011. The auditor completed the audit work on February 22, 2012 and dated 
the audit report as of that date. The report was delivered to management for inclusion in 
its financial statements submitted by Weaver Corporation to its banker on February 27, 
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2012. Ruffin archived all its working papers for the audit on March 1, 2012. Under the 
circumstances, Ruffin is responsible for reviewing subsequent events occurring through 
(1) December 31, 2011. (3) February 27, 2012. 

(2) February 22, 2012. (4) March 1, 2012. 


24-25 (Objective 24-5) The following questions concern information accompanying basic 
financial statements. Choose the best response. 

a. The Form 10-K filed by management of a public company includes a section on manage- 
ment’s discussion and analysis (MD&A) in addition to the annual financial statements. 
Which of the following best describes the auditor’s responsibility for the MD&A 
information? 

(1) The auditor must perform sufficient appropriate audit procedures to opine on 
the MD&A information. 
The auditor has no responsibilities related to the MD&A disclosures. 
The auditor must read the MD&A information to determine if there is any material 
inconsistency with the audited financial statements. 
(4) The auditor must provide a disclaimer of opinion related to the MD&A information. 


(2 
(3 


a St 


b. Ansman, CPA, has been requested by a client, Rainco Corp., to prepare information in 
addition to the basic financial statements for this year’s audit. Which of the following 
is the best reason for Rainco’s requesting the additional information? 

(1) To provide an opinion about the supplemental information when certain items 
are not in accordance with accounting standards. 

(2) To provide Rainco’s creditors a greater degree of assurance as to the financial 
soundness of the company. 

(3) To provide Rainco’s management with information to supplement and analyze 
the basic financial statements. 

(4) To provide the documentation required by the SEC in anticipation of a public 
offering of Rainco’s stock. 


c. Management of Thurman Corpeation j OOP OF ENA fet ipforma- 
tion in documents that include fint@tin¢faP sta ahi e ended 
December 31, 2011. Management has asked its audit firm, Wally, CPAs, whether they 
can report on the supplementary information. Which of the following conditions 
would preclude Wally, CPAs from conducting this engagement? 

(1) The supplementary information is derived from the accounting records used to 
generate the basic financial statements. 

(2) The supplementary information covers the period January 1, 2011 through 
February 15, 2012. 

(3) Wally’s opinion of the basic financial statements was unqualified. 

(4) When evaluating supplementary information, Wally plans to use the same 
materiality threshold as that used in the audit of the basic financial statements. 


DISCUSSION QUESTIONS AND PROBLEMS 


24-26 (Objective 24-1, 24-2) Elizabeth Johnson, CPA, has completed the audit of notes 
payable and other liabilities for Valley River Electrical Services and now plans to audit con- 
tingent liabilities and commitments. 

a. Distinguish between contingent liabilities and commitments and explain why both Required 
are important in an audit. 

b. Describe how Johnson’s testing in phases I-III of the audit of notes payable might help 
her obtain evidence about the four presentation and disclosure objectives. 

c. Identify three useful audit procedures for uncovering contingent liabilities that 
Johnson will likely perform in the normal conduct of the audit, even if she had no 
responsibility for uncovering contingencies. 

d. Identify three other procedures Johnson is likely to perform specifically for the pur- 
pose of identifying undisclosed contingencies. 
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24-27 (Objective 24-2) In an audit of the Marco Corporation as of December 31, 2011, the 
following situations exist. No entries have been made in the accounting records in relation 
to these items. 

1. During the year 2011, the Marco Corporation was named as a defendant in a suit for 
damages by the Dalton Company for breach of contract. An adverse decision to the 
Marco Corporation was rendered and the Dalton Company was awarded $4,000,000 
damages. At the time of the audit, the case was under appeal to a higher court. 

2. On December 23, 2011, the Marco Corporation declared a common stock dividend 
of 1,000 shares with a par value of $1,000,000 of its common stock, payable 
February 2, 2012, to the common stockholders of record December 30, 2011. 

3. The Marco Corporation has guaranteed the payment of interest on the 10-year, first 
mortgage bonds of the Newart Company, an affiliate. Outstanding bonds of the 
Newart Company amount to $5,500,000 with interest payable at 5% per annum, due 
June 1 and December 1 of each year. The bonds were issued by the Newart Company 
on December 1, 2009, and all interest payments have been met by that company with 
the exception of the payment due December 1, 2011. The Marco Corporation states 
that it will pay the defaulted interest to the bondholders on January 15, 2012. 

a. Define contingent liability. 

b. Describe the audit procedures you would use to learn about each of the situations listed. 

c. Describe the nature of the adjusting entries or disclosure, if any, you would make for 
each of these situations.* 


24-28 (Objective 24-3) In analyzing legal expense for the Boastman Bottle Company, Mary 
Little, CPA, observes that the company has paid legal fees to three different law firms during 
the current year. In accordance with her CPA firm’s normal operating practice, Little requests 
standard attorney letters as of the balance sheet date from each of the three law firms. 

On the last day of field work, Little notes that one of the attorney letters has not yet been 
received. The second letter contains a statement to the effect that the law firm deals 
exclusiyely in register] entaand refuses to comment on any lawsuits or other legal 
“faire RAO THe RE att BAG|R Ghat there is an outstanding unpaid bill 
due from the client and recognizes the existence of a potentially material lawsuit against the 
client but refuses to comment further to protect the legal rights of the client. 

a. Evaluate Little’s approach to sending the attorney letters and her follow-up on the responses. 
b. What should Little do about each of the letters? 


24-29 (Objective 24-4) The following unrelated events occurred after the balance sheet 
date but before the audit report was prepared: 


1. The granting of a retroactive pay increase 

2. Declaration of a stock dividend 

3. Sale of a fixed asset at a substantial profit 

4, Determination by the federal government of additional income tax due for a prior year 
5. Filing of an antitrust suit by the federal government 


a. Explain how each of the items might have come to the auditor’s attention. 


b. Discuss the auditor’s responsibility to recognize each of these in connection with the 
report.* 


24-30 (Objectives 24-4, 24-8) The field work for the June 30, 2011, audit of Tracy Brewing 
Company was finished August 19, 2011, and the completed financial statements, accom- 
panied by the signed audit reports, were mailed September 6, 2011. In each of the highly 
material independent events (a through i), state the appropriate action (1 through 4) for 
the situation and justify your response. The alternative actions are as follows: 

1. Adjust the June 30, 2011, financial statements. 

2. Disclose the information in a footnote in the June 30, 2011, financial statements. 

3. Request the client to recall the June 30, 2011, statements for revision. 

4. No action is required. 


*AICPA adapted. 
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The events are as follows: 

a. On December 14, 2011, the auditor discovered that a debtor of Tracy Brewing went 
bankrupt on July 15, 2011, due to declining financial health. The sale had taken place 
January 15, 2011. 

b. On December 14, 2011, the auditor discovered that a debtor of Tracy Brewing went 
bankrupt on October 2, 2011. The sale had taken place April 15, 2011, but the amount 
appeared collectible at June 30, 2011, and August 19, 2011. 

c. On August 15, 2011, the auditor discovered that a debtor of Tracy Brewing went 
bankrupt on August 1, 2011. The most recent sale had taken place April 2, 2010, and 
no cash receipts had been received since that date. 

d. On August 6, 2011, the auditor discovered that a debtor of Tracy Brewing went bank- 
rupt on July 30, 2011. The cause of the bankruptcy was an unexpected loss of a major 
lawsuit on July 15, 2011, resulting from a product deficiency suit by a different customer. 

e. On August 6, 2011, the auditor discovered that a debtor of Tracy Brewing went bank- 
rupt on July 30, 2011, for a sale that took place July 3, 2011. The cause of the bankruptcy 
was a major uninsured fire on July 20, 2011. 


an) 


. On July 20, 2011, Tracy Brewing settled a lawsuit out of court that had originated in 
2008 and is currently listed as a contingent liability. 

g. On September 14, 2011, Tracy Brewing lost a court case that had originated in 2010 
for an amount equal to the lawsuit. The June 30, 2011, footnotes state that in the 
opinion of legal counsel there will be a favorable settlement. 

h. On July 20, 2011, a lawsuit was filed against Tracy Brewing for a patent infringement 

action that allegedly took place in early 2011. In the opinion of legal counsel, there is a 

danger of a significant loss to the client. 


_ 


. On May 31, 2011, the auditor discovered an uninsured lawsuit against Tracy Brewing 
that had originated on February 28, 2011. 


24-31 (Objective 24-5) Leslie Morga re ett ion.for the 
oABage PDR: Ri naHee 


president and controller to sign. It cont rences t followi 
1. Inventory is fairly stated at the lower of cost or market and includes no obsolete items. 
2. All actual and contingent liabilities are properly included in the financial statements. 
3. All subsequent events of relevance to the financial statements have been disclosed. 


a. Why is it desirable to have a letter of representation from the client concerning these Required 
matters when the evidence accumulated during the course of the audit is meant to verify 
the same information? 


b. To what extent is the letter of representation useful as audit evidence? Explain. 


c. List several other types of information commonly included in a letter of representation. 


24-32 (Objective 24-5) As a part of the audit of Ren Gold Manufacturing Company, a non- 
public company, management requests basic financial statements and separately, the same 
basic financial statements accompanied by additional information. Management informs 
you that the intent is to use the basic financial statements for bankers, other creditors, and 
the two owners who are not involved in management. The basic financial statements 
accompanied by the additional information are to be used only by management. Manage- 
ment requests the inclusion of specific information but asks that no audit work be done 
beyond what is needed for the basic financial statements. The following is requested: 
1. A schedule of insurance in force. 
2. The auditor’s feelings about the adequacy of the insurance coverage. 
3. An aged trial balance of accounts receivable and evaluation of the adequacy of the 
allowance for uncollectible accounts. 
4. A summary of fixed asset additions. 
5. Material weaknesses in internal control and recommendations to improve internal 
control. 
6. A 5-year summary of the most important company ratios, with the appropriate ratios 
to be determined at the auditor’s discretion. 
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7. A schedule of notes payable accompanied by interest rates, collateral, and a payment 
schedule. 


a. What is the difference between basic financial statements and additional information? 
b. What are the purposes of additional information accompanying basic financial statements? 


c. For the previously listed items (1 through 7), state which ones could appropriately be 
included as additional information. Give reasons for your answer. 

d. Identify three other items that may appropriately be included as additional information. 

e. Assume that an unqualified opinion is proper for the basic financial statements report, 
that no testing was done beyond that required for the basic financial statements 
report, and that only appropriate information is included in the additional informa- 
tion. Write the proper auditor’s report. 


24-33 (Objective 24-6) The following items were discovered during the December 31, 2011 

audit of the financial statements of Westmoreland Corporation: 

1. The company’s financial statements did not include an accrual for bonuses earned by 
senior management in 2011 but payable in March 2012. The aggregate bonus amount 
was $125,000. 

2. Equipment originally costing $725,000 that was fully depreciated with a remaining 
residual value of $60,000 was sold for $85,000 on December 29, 2011. The purchaser 
agreed to pay for the equipment by January 15, 2012. 

. Based on close examination of the client’s aged accounts receivable trial balance and 
correspondence files with customers, the auditor determined that management’s 
allowance for bad debts is overstated by $44,000. 

4. Expenses totaling $52,000 associated with the maintenance of equipment were 
inappropriately debited to the equipment account. 

. Marketing expenses of $43,000 were incorrectly classified as cost of goods sold. 

6. The company received new computer equipment on January 3, 2012 that was ordered 
and shipped F.O.B. shipping point to Westmoreland on December 27, 2011. No 
Apa OonkRDEed amM@e Mat was financed by a long-term note 
payable due in full June 30, 2013. 

a. Prepare an Unadjusted Misstatement Audit Schedule using the following format (see 

Figure 24-6 on page 773 as an example): 


1S) 


wn 


Possible Misstatement - Overstatement (Understatement) 





Total Current Noncurrent Current Noncurrent Income 
Amount Assets Assets Liabilities Liabilities Before Tax 





b. Balance sheet and income statement materiality for the audit of Westmoreland financial 
statements is $75,000. What is your conclusion about the financial statements if the 
audit findings are not corrected by Westmoreland management before you issue the 
audit report? 


24-34 (Objective 24-7) In a letter to the audit committee of the Cline Wholesale Company, 
Jerry Schwartz, CPA, informed them of material weaknesses in the control of inventory. In a 
separate letter to senior management, he elaborated on how the material weaknesses could 
result in a significant misstatement of inventory by the failure to recognize the existence of 
obsolete items. In addition, Schwartz made specific recommendations in the management 
letter on how to improve internal control and save clerical time by installing a computer 
system for the company’s perpetual records. Management accepted the recommendations 
and installed the system under Schwartz’s direction. For several months, the system worked 
beautifully, but unforeseen problems developed when a master file was erased. The cost of 
reproducing and processing the inventory records to correct the error was significant, and 
management decided to scrap the entire project. The company sued Schwartz for failure to 
use adequate professional judgment in making the recommendations. 

a. What is Schwartz’s legal and professional responsibility in the issuance of manage- 

ment letters? 


b. Discuss the major considerations that will determine whether he is liable in this situation. 
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24-35 (Objective 24-6) In your audit of Aviary Industries for calendar year 2011, you found 

a number of matters that you believe represent possible adjustments to the company’s 

books. These matters are described below. Management’s attitude is that “once the books 

are closed, they’re closed,” and management does not want to make any adjustments. 

Planning materiality for the audit was $100,000, determined by computing 5% of expected 

income before taxes. Actual income before taxes on the financial statements prior to any 

adjustments is $1,652,867. 
Possible adjustments: 

1. Several credit memos that were processed and recorded after year-end relate to sales 

and accounts receivable for 2011. These total $26,451. 

2. Inventory cutoff tests indicate that $25,673 of inventory received on December 30, 2011, 
was recorded as purchases and accounts payable in 2012. These items were included in 
the inventory count at year-end and therefore were included in ending inventory. 

. Inventory cutoff tests also indicate several sales invoices recorded in 2011 for goods 
that were shipped in early 2012. The goods were included in inventory even though 
they were set aside in a separate shipping area. The total amount of these shipments 
was $41,814. 

. The company wrote several checks at the end of 2011 for accounts payable that were 
held and not mailed until January 15, 2012. These totaled $43,671. Recorded cash and 
accounts payable at December 31, 2011, are $2,356,553 and $2,666,290, respectively. 

. The company has not established a reserve for obsolescence of inventories. Your tests 
indicate that such a reserve is appropriate in an amount somewhere between $15,000 
and $30,000. 

. Your review of the allowance for uncollectible accounts indicates that it may be 
understated by between $35,000 and $55,000. 


a. Determine the adjustments that rApage™ ‘PDE RAHA e tyiements 
agnOu. ected by eachra 


to be fairly presented. Include the and accounts a justment. 
b. Why may Aviary Industries’ management resist making these adjustments? 


1S) 


eS 


wn 


a 


c. Explain what you consider the most positive way of approaching management personnel 
to convince them to make your proposed changes. 

d. Describe your responsibilities related to unadjusted misstatements that management 
has determined are immaterial individually and in the aggregate. 

e. Assuming Aviary Industries is an accelerated filer public company, describe how the 
noted adjustments might impact your audit report on internal control over financial 
reporting. 


INTERNET PROBLEM 24-1: AUDIT COMMITTEE RESPONSIBILITIES 


Audit committees of public companies have many responsibilities in today’s financial 
reporting environment. Visit the website of Microsoft Corporation (www.microsoft.com) 
and locate the Audit Committee’s Charter under the “Investor Relations” link to answer 
the following questions. 
a. What is the primary purpose of the Microsoft Audit Committee? 
b. What responsibility, if any, does the Audit Committee have in regards to the engage- 
ment of the external auditor? 

. Ata minimum, how often will the Audit Committee meet in a given year? 

d. Review the Audit Committee Responsibilities Calendar and briefly describe the nature 
of items included in the Audit Committee’s review with Finance management and 
the independent auditor upon completion of the audit. 

e. With whom does the Audit Committee meet in executive session? Describe your 
views about why these sessions are conducted. 


a 
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CHAPTERS 


25 -26 





OTHER ASSURANCE AND 
NONASSURANCE SERVICES 





Chapter 1 introduced assurance and nonassurance services offered by CPA firms 
and other types of auditors. Assurance services other than audits have become 
increasingly important to both CPA firms and other auditors. The two chapters 
in Part 6 expand on that discussion. 
e Chapter 25 deals with assurance and nonassurance services, both 
traditional and emerging, that CPA firms offer. 
e Chapter 26 covers services performed most often by governmental and 
internal auditors, including internal financial auditing, governmental 
financial auditing, and operational auditing. 














-_ 25 


ASSURANCE SERVICES 


After studying this chapter, 


Skepticism Applies To All Types Of Engagements you should beableta 

Barnhart Construction Company was a contractor specializing in apartment Be eeaderctandiiivellaveliol asetranee 
complexes in the Southwest. The owner of the construction company, David and evidence requirements for 
Barnhart, reached an agreement with a promoter named Alton Leonard to review and compilation services. 
serve as a contractor on three construction projects Leonard was currently 25-2 Describe special engagements 
marketing. One problem with the agreement was that Barnhart would not to review interim financial 
receive final payment for the construction work until all the partnership units intel matoniouenDiic companies 
were sold. 25-3 Distinguish AICPA attestation 


standards from auditing 
standards and know the type 


The first partnership offering was completely sold and Barnhart was paid. SPCR gaaS mentatte Witfeh They 


Unfortunately, the next two partnerships were not completely sold. To solve apply. 
this problem, Barnhart loaned money to relatives and key employees who 

: : 25-4 Understand the nature of 
bought the necessary interests for the partnerships to close so that Barnhart WebTrust and SysTrust assurance 
would receive the final payment. services. 


25-5 Describe engagements to report 


Renee Lathrup, CPA, a sole practitioner, was engaged to conduct a review of ee aie at eptiine 


Barnhart Construction’s financial statements. She noticed that the accounting organizations. 

records showed loans receivable fr a | PEPoyRMRAMIce TY 25-6 Understand special engagements 
viduals named Barnhart. She also obsétved that the loans were made just to attest to prospective financial 

before the second and third partnerships closed and that they were in statements. 

multiples of $15,000, the cost of a partnership unit. Renee asked Barnhart to 25-7 Define agreed-upon procedures 

explain what happened. Barnhart told Renee, “When | received the money engagements. 

from the first partnership escrow, | wanted to do something nice for relatives 25-8 Describe other audit and limited 
and employees who had been loyal to me over the years.’ He told Renee, assurance engagements related 


to historical financial statements. 








“This is just my way of sharing my good fortune with the ones | love. The 
equality of the amounts is just a coincidence.” 





When Renee considered the reasonableness of this scenario, she found it hard to believe. First, the timing was odd. 
Second, the amounts seemed to be an unusual coincidence. Third, if he really had wanted to do something special for 
these folks, why didn’t he give them something, rather than loan them money? Renee asked that the promoter, Leonard, 
send her detailed information on the subscriptions for each partnership. Leonard refused, stating that he was under legal 
obligation to keep all information confidential. When Renee pressed Barnhart, he also refused further cooperation, 
although he did say he would “represent” to Renee that the loans had nothing to do with closing the partnerships so 
that he could get his money. At this point, Renee withdrew from the engagement. 


p to this chapter, the book has primarily focused on audits of historical financial statements prepared in 

accordance with applicable accounting standards. Now, other types of assurance services offered by CPAs 
involving historical financial statements are discussed, such as reviews of historical financial statements and limited 
assurance engagements involving historical financial statements to meet specific needs of financial statement users. 
The chapter also examines assurance services for several types of attestation engagements that do not involve 
historical financial statements, such as reports on service organizations, WebTrust and SysTrust engagements, and 
reports on forecasted financial statements. 


REVIEW AND COMPILATION SERVICES 





OBJECTIVE 25-1 





Understand the level of 


assurance and evidence 
requirements for review 


and compilation services. 





Many nonpublic companies have their financial statements reviewed or compiled by a 
CPA, instead of having them audited. The opening story about Barnhart Construction 
Company is an example of a review service. A company’s management may believe that 
an audit is unnecessary because no bank or regulatory agency requires one and manage- 
ment sees no need for audited statements for internal use. Instead, the company may 
engage the CPA to assist in the preparation of financial statements, either for internal 
use or to provide to creditors or lenders under loan agreements. Depending on the size 
of the loan, a lender may require compiled or reviewed financial statements, rather 
than an audit. A review provides limited assurance on the financial statements, whereas 
a compilation provides no expressed assurance. 

The standards for compilations and reviews of financial statements, called State- 
ments on Standards for Accounting and Review Services (SSARS), are issued by the 
Accounting and Review Services Committee of the AICPA. This committee has 
authority equivalent to the Auditing Standards Board for services involving unaudited 
financial statements of nonpublic companies. Because they are not doing audits, SSARS 
refer to CPAs performing review and compilation services as accountants, not auditors. 

Bape OsuPDPokr harreietyns and reviews is considerably below 
that of audits, Tess evidence is required for these services and they can be provided at a 
lower fee than an audit. Figure 25-1 illustrates the difference in evidence accumulation 
and level of assurance for audits, reviews, and compilations. The amount of evidence 
and assurance needed for each engagement is not defined by the profession and there- 
fore depends on the accountant’s judgment. 

Because review and compilation services provide less assurance than audits, the 
accountant should establish an understanding with the client about the services to be 
provided through a written engagement letter. The understanding should include a 























Relationship Between Evidence Accumulation and Assurance 
Attained 
High 
(Audit) 
Level 
of Limited 
Assurance (Review) 
Attained 
| 
None 
(Compilation) | 
Minimal Significant Extensive 
(Compilation) (Review) (Audit) 
Amount of Evidence Accumulated 
= —4 
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description of the objectives of the engagement, management’s responsibilities, the 
accountant’s responsibilities, the type and limitations of the service to be provided, and 
a description of the compilation or review report expected to be issued. The require- 
ments for review and compilation services are now discussed in greater detail. 


A review service (SSARS review) engagement allows the accountant to express limited 
assurance that the financial statements are in accordance with applicable accounting 
standards, including appropriate informative disclosures, or other comprehensive basis 
of accounting (OCBOA), such as the cash basis of accounting. CPAs must be independent 
of the client for review service engagements. 


Procedures Suggested for Reviews The evidence for a review engagement consists 
primarily of inquiries of management and analytical procedures, substantially fewer procedures 
than those required for an audit. For reviews, accountants do not obtain an understanding 
of internal control, test controls, assess fraud risk, or do substantive tests of transactions or 
tests of balances, such as confirmation of receivables or physical examination of inventory. 

SSARS require the accountant to obtain evidence that consists of the following for 
a review engagement: 


* Obtain knowledge of the accounting principles and practices of the client’s industry. The 
accountant can study AICPA industry guides or other sources to obtain industry 
knowledge. The level of knowledge for reviews can be somewhat less than for an audit. 

* Obtain knowledge of the client. The information should be about the nature of 
the client’s business transactions, its accounting records and employees, the 
accounting principles and practices used by the client, and the content of the 
financial statements. The level of knowledge can be less than for an audit. 

* Make inquiries of management. Inquiry is the most important review procedure. 
The objective is to determine whether the financial statements are fairly pre- 
sented, assuming that management does not intend to deceive the accountant. 
Inquiries must be made of thApagide RPDEsknhancterovolve 


discussions, such as the following illustrative inquiries: 


1. Describe your procedures for recording, classifying, and summarizing 
transactions and disclosing information in the statements. 

2. What unusual or significant transactions occurred this year including impor- 
tant actions taken at meetings of stockholders and the board of directors? 

3. Is each account on the financial statements prepared in conformity with 
accounting standards and consistently applied? 

4. Do you have knowledge of an actual or suspected fraud? 


* Perform analytical procedures. Based on the accountant’s understanding of the 
industry and knowledge of the client, the accountant designs and performs 
analytical procedures. These identify relationships and individual items that appear 
to be unusual. The appropriate analytical procedures are no different from the ones 
already studied (in Chapters 7 and 8 and in chapters dealing with tests of details of 
balances). As unusual trends are noted, the accountant engages in further inquiries 
with client personnel to obtain explanations for any unexpected relationships. 

* Obtain letter of representation. The accountant is required to obtain a letter of 
representation from members of management who are knowledgeable about 
financial matters. 

* Prepare documentation. The accountant should prepare documentation that is 
sufficient in detail to provide a clear understanding of the work performed, the 
review evidence obtained and its source, and the conclusions reached. Docu- 
mentation should include the engagement letter, analytical procedures performed, 
significant matters covered in the inquiries with management, significant findings 
and issues, communications with management or others regarding possible 
fraud, and the representation letter. 


Review Services 
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a Example of Review Report ) 


We have reviewed the accompanying balance sheet of Archer Technologies, Inc., as of December 31, 
2011, and the related statements of income, retained earnings, and cash flows for the year then 
ended. A review includes primarily applying analytical procedures to management's financial 
data and making inquiries of company management. A review is substantially less in scope than 
an audit, the objective of which is the expression of an opinion regarding the financial statements 
as a whole. Accordingly, we do not express such an opinion. 

Management is responsible for the preparation and fair presentation of the financial statements 
in accordance with accounting principles generally accepted in the United States of America and 
for designing, implementing, and maintaining internal control relevant to the preparation and 
fair presentation of the financial statements. 

Our responsibility is to conduct the review in accordance with Statements on Standards for 
Accounting and Review Services issued by the American Institute of Certified Public Accountants. 
Those standards require us to perform procedures to obtain limited assurance that there are no 
material modifications that should be made to the financial statements. We believe that the 
results of our procedures provide a reasonable basis for our report. 

Based on our review, we are not aware of any material modifications that should be made to 
the accompanying financial statements in order for them to be in conformity with accounting 
principles generally accepted in the United States of America. 














Based on these procedures, the accountant may become concerned that informa- 
tion is incorrect, incomplete, or otherwise unsatisfactory. If so, additional procedures 
should be performed before the accountant issues a standard review services report. 


Form of Report Figure 25-2 provides an example of the review report when the 
accountant has completed a review engagement and decides that no material changes 
to the financial statements are needed. In addition to the required report title, the 
standard review report includes four paragraphs that include the following: 


i Apag OrkDEpknhancewiyh explicitly notes that the accountant 
has conducted a review and identifies the entity and period of financial state- 
ments subject to the review. The first paragraph also includes a statement that 
a review primarily consists of analytical procedures and inquiries and is 
substantially less in scope than an audit. 

2. The second paragraph specifies that management is responsible for the 
preparation and fairness of the financial statements and for designing, imple- 
menting, and maintaining internal controls relevant to financial reporting. 

3. The third paragraph notes that the accountant’s responsibility is to conduct a 
review of management’s financial statements in accordance with SSARS and 
that those standards require the accountant to perform procedures to obtain 
limited assurance that there are no material modifications that should be made 
to the financial statements. 

4. The fourth paragraph expresses limited assurance in the form of negative 
assurance that “we are not aware of any material modifications that should be 
made to the accompanying financial statements” in order for them to be in 
conformity with applicable accounting standards. 


The date of the review report should be the date on which the accountant has 
accumulated review evidence sufficient to provide a reasonable basis for the report 
conclusion. Each page of the financial statements reviewed should include the reference 
“See independent accountant’s review report.” 


Failure to Follow Applicable Accounting Framework If a client has failed to 
follow applicable accounting standards in a review engagement, the report must be 
modified. (Accounting standards are the same for all historical financial statements, 
including reviews.) The report should disclose the effects of the departure as determined 
by management or the accountant’s review procedures. Even if the effects have not 
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been determined, the disclosure must appear in the report in a separate paragraph. The 
following provides an example of suggested wording: 


As disclosed in note X to the financial statements, accounting principles generally 
accepted in the United States of America require that land be stated at cost. 
Management has informed us that the company has stated its land at appraised 
value and that, if generally accepted accounting principles generally accepted in the 
United States of America had been followed, the land account and stockholders’ 
equity would have been decreased by $500,000. 


A compilation service engagement is defined in SSARS as one in which accountants 
prepare financial statements and present them to a client or third party without 
providing any CPA assurance about those statements. Many CPA firms prepare monthly, 
quarterly, or annual financial statements for their clients. These statements are usually 
for internal use by management, although they may also be provided to external users. 
The CPA is not required to be independent to perform a compilation and the financial 
statements can be issued without additional disclosures such as footnotes. 

When accountants submit financial statements and expect them to be used by a third 
party, they are required to, at least, issue a compilation report that accompanies the 
statements. It is not permissible for the accountant to prepare and present financial 
statements to a client that plans to provide them to external users without, at a minimum, 
having satisfied the requirements for a compilation engagement, including the issuance of a 
compilation report. When the accountant does not expect the financial statements to be used 
by a third party, the CPA does not have to issue a compilation report, as long as the CPA 
documents in the engagement letter with the client an understanding regarding the services 
to be performed and a restriction that the financial statements are for management’s use only. 


Requirements for Compilation Compilation does not absolve accountants of 
responsibility, as they are always responsible for exercising due care in penonmne all 


duties. In a compilation engagemenypagotuPDE ach np hsa theceeoyring 


Establish an understanding with the client in a written engagement letter about the 
ete of the engagement, type and limitations of the services to be provided 
including acknowledgement that the accountant does not obtain any assurance about 
the financial statements, and a description of the report, if a report is to be issued. 

* Possess knowledge about the accounting principles and practices of the client’s 
industry. 

* Know the client, including the nature of its business transactions, accounting 
principles and practices used by the client, and content of its financial statements 
(the knowledge can be less than that for a review). 

* Make inquiries to determine whether the client’s information is satisfactory. 

* Read the compiled financial statements and be alert for any obvious omissions 
or errors in arithmetic and in the application of accounting standards. 

* Prepare documentation in sufficient detail to provide a clear understanding of 
the work performed. 


Accountants do not have to make other inquiries or perform other procedures to 
verify information provided by client personnel. But if they become aware that the 
statements are not fairly presented, they should obtain additional information. If the 
client refuses to provide the information, the accountant should withdraw from the 
compilation engagement. 


Form of Report SSARS define three types of compilation reports. The use of each 
depends on whether management elects to include all the required disclosures with the 
financial statements and whether the accountant is independent. 
1. Compilation with full disclosure. A compilation of this type requires disclosures 
in accordance with accounting standards, the same as for audited financial 
statements or reviews, as illustrated by Figure 25-3 (p. 794). 


Compilation Services 
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(pore Compilation Report with Full Disclosure 





Accountant's Compilation Report 


We have compiled the accompanying balance sheet of Williams Company as of December 31, 2011, 
and the related statements of income, retained earnings, and cash flows for the year then ended. 
We have not audited or reviewed the accompanying financial statements and, accordingly, do not 
express an opinion or provide any assurance about whether the financial statements are in 
accordance with accounting principles generally accepted in the United States of America. 

Management is responsible for the preparation and fair presentation of the financial statements 
in accordance with accounting principles generally accepted in the United States of America and 
for designing, implementing, and maintaining internal control relevant to the preparation and 
fair presentation of the financial statements. 

Our responsibility is to conduct the compilation in accordance with Statements on Standards 
for Accounting and Review Services issued by the American Institute of Certified Public Accoun- 
tants. The objective of a compilation is to assist management in presenting financial information 
in the form of financial statements without undertaking to obtain or provide any assurance that 
there are no material modifications that should be made to the financial statements. 








Compilation that omits substantially all disclosures. Figure 25-4 shows the appro- 
priate wording that the accountant adds after the conclusion paragraph of the 
standard compilation report when the accountant compiles statements without 
disclosures. In this example, management has also elected not to present the 
statement of cash flows. This type of compilation is acceptable if the report 
indicates the lack of disclosures and the absence of disclosures is not, to the CPA’s 
knowledge, undertaken with the intent to mislead users. Typically, this type of 
statement is used primarily for management purposes. 


3. Compilation without independence. A CPA firm can issue a compilation report 


it, Or @ny di res even if it is not independent of the client, as 
ApAad oF t ie Saha cS ct. When the accountant lacks inde- 
pendence, an additional paragraph must be added as the last paragraph of the 
report that states: “We are not independent with respect to Williams Company.” 


For all three types of compilation reports, the following elements are also required: 


i ie Compilation That Omits Substantially All Disclosures 


A report title that says “Accountant’s Compilation Report.” 

The date of the accountant’s report is the date of completion of the compilation. 
Each page of the financial statements compiled by the accountant should state 
“See accountant’s compilation report.” 

If the client fails to follow accounting standards, the auditor must include the 
same modifications in the compilation report that are used in a review report. 








We have compiled the accompanying balance sheet of Williams Company as of December 31, 
2011, and the related statements of income and retained earnings for the year then ended, in 
accordance with Statements on Standards for Accounting and Review Services issued by the 
American Institute of Certified Public Accountants. 

A compilation is limited to presenting in the form of financial statements information that is 
the representation of management. We have not audited or reviewed the accompanying financial 
statements and, accordingly, do not express an opinion or any other form of assurance on them. 

Management has elected to omit substantially all of the disclosures and the statement of 
cash flows required by accounting principles generally accepted in the United States of America. 
If the omitted disclosures were included in the financial statements, they might influence the 
users conclusions about the co mpany’s financial position, results of operations, and cash flows. 
Accordingly, the financial statements are not designed for those who are not informed about 
such matters. 
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REVIEW OF INTERIM FINANCIAL INFORMATION FOR PUBLIC COMPANIES 


The SEC requires that quarterly financial statements be reviewed by the company’s OBJECTIVE 25-2 
external auditor prior to the company’s filing of the Form 10-Q with the SEC. The 
SEC also requires a footnote in the annual audited financial statements disclosing 





Describe special engage- 


: : ments to review interim 
quarterly sales, gross profit, income, and earnings per share for the past two years. financial information for 


Typically, the footnote in the annual statements is labeled unaudited. At a minimum, public companies. 





the CPA firm must perform review procedures of the footnote information. Because 
the same CPA firm does both the annual audit and the public company interim 
financial statement review, they are referred to as auditors, not accountants for the 
interim review. 

Like reviews under SSARS, a public company interim review includes five require- 
ments for review service engagements. The auditor must: (1) obtain knowledge of the 
accounting principles of the client’s industry, (2) obtain knowledge of the client, (3) make 
inquiries of management, (4) perform analytical procedures, and (5) obtain a letter of 
representation. 

Also like SSARS reviews, reviews for public companies do not provide a basis for 
expressing positive opinion level assurance. Ordinarily, auditors perform no tests of the 
accounting records, independent confirmations, or physical examinations. However, 
the two types of reviews differ in several areas. Below are the key differences: 

* Because an annual audit is also performed for the public company client, the 
auditor must obtain sufficient information about the client’s internal control for 
both annual and interim financial information. 

* Similarly, because the client is audited annually, the auditor’s knowledge of the 
results of these audit procedures is used in considering the scope and results of 
the inquiries and analytical procedures for the review. 

* Under SSARS, the auditor mp EGO tidtterkra 74 Gres ters and 
stockholders’ meetings; for a public COmpany, the auditor reads the minutes of 
those meetings. 

* The auditor must also obtain evidence that the interim financial information agrees 
or reconciles with the accounting records for a public company interim review. 
For example, the auditor might compare the interim financial information to 
the general ledger. 


A public company interim review is performed following standards of the PCAOB 
and the review report makes no reference to SSARS. See Figure 25-5 for an example of 


Example of a Report for Interim Financial Statements for a 
Public Company 


Report of Independent Registered Public Accounting Firm 





We have reviewed the consolidated balance sheet of Rainer Company and consolidated sub- 
sidiaries as of September 30, 2011, and the related statements of earnings, retained earnings, 
and cash flows for the three-month and nine-month periods then ended. These financial 
statements are the responsibility of the company’s management. 

We conducted our review in accordance with the standards of the Public Company Accounting 
Oversight Board (United States). A review of interim financial information consists principally of 
applying analytical procedures and making inquiries of persons responsible for financial and 
accounting matters. It is substantially less in scope than an audit conducted in accordance with 
the standards of the Public Company Accounting Oversight Board, the objective of which is the 
expression of an opinion regarding the financial statements taken as a whole. Accordingly, we 
do not express such an opinion. 

Based on our review, we are not aware of any material modifications that should be made to 
the accompanying interim financial statements for them to be in conformity with accounting 
principles generally accepted in the United States of America. 
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such a report. Each page of the interim financial information which accompanies the 
report should be clearly marked as “unaudited.” 

If the auditor determines the interim statements violate accounting standards, the 
report should be modified. The language of the modification is similar to that used in 
a review under SSARS, except that the auditor should state the effect of the departure, 
if the amount can be determined. 

The quarterly data reviewed by the auditor and included as a footnote in the annual 
audited statements should be labeled “unaudited.” However, a separate review report for 
this information is not required. 


ATTESTATION ENGAGEMENTS 


OBJECTIVE 25-3 


Distinguish AICPA attestation 
standards from auditing 


standards and know the type 
of engagements to which 


they apply. 





Attestation Standards 


Types of Attestation 
Engagements 





Chapter 1 described assurance services as independent professional services that 
improve the quality of information for decision makers. Individuals who are respon- 
sible for making business decisions seek assurance services to help improve the 
reliability and relevance of the information on which they base their decisions. One 
category of assurance services provided by CPAs is attestation services. 

CPAs have increasingly been asked to perform a variety of audit-like services, 
known as attest services, for different purposes. In an attestation engagement, the CPA 
reports on the reliability of information or an assertion made by another party. An 
example is when a bank requests a CPA to report in writing whether an audit client has 
adhered to all requirements of a loan agreement. 


The AICPA has issued 11 attestation standards that parallel the 10 generally accepted 
auditing standards (GAAS), as shown in Table 25-1. The attestation standards are stated 
in sufficiently general terms to enable CPAs to bi them to any attestation engagement, 


includ: es serpepy 
AB Igo E 42) nae iar ricer standards and the 10 GAAS are in 


general attestation standards 2 and 3. Standard 2 requires that the CPA have adequate 
knowledge of the subject matter over which there is attestation. For example, for CPAs 
to attest to a company’s compliance with environmental protection laws, they need a 
thorough knowledge of the laws and methods that companies use to assure compliance. 
Standard 3 requires that the CPA be able to evaluate the subject matter against criteria 
that are suitable and available to users. Again, using the example of environmental 
protection laws, measurement difficulties or the lack of specific criteria may make it 
difficult for the CPA to conclude whether there is compliance. 

To provide additional guidance for doing attestation engagements, the Auditing 
Standards Board of the AICPA issues Statements on Standards for Attestation 
Engagements (SSAE). These are normally called attestation standards. The Auditing 
Standards Board attempts to distinguish between issues that should be addressed 
by auditing standards and those that should be addressed by attestation standards, 
even though both are attestations. In general, auditing standards apply to attesta- 
tions that deal with providing assurance on historical financial statements, including 
one or more parts of those statements. These may include audits of financial statements 
prepared in accordance with accounting standards or some other comprehensive 
basis of accounting, audits of only a balance sheet, and audits of individual accounts. 

All other forms of attestation are addressed in the attestation standards (an 
exception is reviews of historical financial statements of a nonpublic entity, which are 
addressed in SSARS and were discussed earlier in the chapter). Attestation standards 
are established by the Auditing Standards Board following the same process used for 
auditing standards. (Attestation standards are labeled as AT rather than AU.) 


The Auditing Standards Board decided not to attempt to define the potential bound- 
aries of attestation engagements except in conceptual terms because new services are 
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Attestation Standards 


Comparison of Attestation Standards and Generally Accepted Auditing Standards 


Generally Accepted Auditing Standards 





1. The practitioner must have adequate technical training 
and proficiency to perform the attestation engagement. 

2. The practitioner must have adequate knowledge of the 
subject matter. 

3. The practitioner must have reason to believe that the 
subject matter is capable of evaluation against criteria 
that are suitable and available to users. 

4. The practitioner must maintain independence in mental 
attitude in all matters relating to the engagement. 

5. Due professional care shall be exercised in the planning 
and performance of the engagement and the preparation 
of the report. 


General Standards 


1. The auditor must have adequate technical training and proficiency 
to perform the audit. 


2. The auditor must maintain independence in mental attitude in all 
matters relating to the audit. 

3. The auditor must exercise due professional care in the performance 
of the audit and the preparation of the report. 





1. The practitioner must adequately plan the work and must 
properly supervise any assistants. 


2. The practitioner must obtain sufficient evidence to provide 
a reasonable basis for the conclusion that is expressed in 
the report. 


Standards of Field Work 


1. The auditor must adequately plan the work and must properly 
supervise any assistants. 

2. The auditor must obtain a sufficient understanding of the entity 
and its environment, including its internal control to assess the 
risk of material misstatement whether due to error or fraud, and 
to design the nature, timing, and extent of further audit procedures. 

3. The auditor must obtain sufficient appropriate audit evidence by 
performing audit procedures to afford a reasonable basis for an 
opinion regarding the financial statements under audit. 





1. The practitioner must identify the subject matter or assertion 
being reported on and state the character of the engagement 
in the report. 

2. The practitioner must state the practitioner's conclusion about 
the subject matter or the assertion in relation to the criteria 
against which the subject matter was evaluated in the report. 


3. The practitioner must state all of the practitioner's significant 
reservations about the engagement, the subject matter, and, 
if applicable, the assertion related thereto in the report. 


4. The practitioner must state in the report that the report is 
intended solely for the information and use of the specified 
parties under the following circumstances: 

— When the criteria used to evaluate the subject matter are 
determined by the practitioner to be appropriate only for 
a limited number of parties who either participated in their 
establishment or can be presumed to have an adequate 
understanding of the criteria. 

— When the criteria used to evaluate the subject matter are 
available only to specified parties. 

— When reporting on subject matter and a written assertion 
has not been provided by the responsible party. 

— When the report is on an attestation engagement to apply 
agreed-upon procedures to the subject matter. 





Standards of Reporting 


1. The auditor must state in the auditor's report whether the financial 
statements are presented in accordance with generally accepted 
accounting principles. 

2. The auditor must identify in the auditor's report those circumstances 
in which such principles have not been consistently observed in the 
current period in relation to the preceding period. 

3. When the auditor determines that informative disclosures are not 
reasonably adequate, the auditor must so state in the auditor's report. 


4. The auditor must either express an opinion regarding the financial 


statements, taken as a whole, or state that an opinion cannot be 
expressed. When the auditor cannot express an overall opinion, the 
auditor must state the reasons therefor in the auditor's report. In all 
cases where an auditor's name is associated with financial statements, 
the auditor should clearly indicate the character of the auditor's work, 
if any, and the degree of responsibility the auditor is taking in the 
auditor's report. 
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Levels of Service 


likely to arise. For example, PricewaterhouseCoopers has been attesting to the balloting 
for the Miss America contest for decades, but attesting to compliance with environ- 
mental protection laws started only in recent years. 

The AICPA and the Canadian Institute of Chartered Accountants (CICA) have 
jointly developed assurance services related to e-commerce and information technology. 
These groups of services, known as WebTrust and SysTrust, are performed under the 
attestation standards. In addition, the AICPA has developed specific attestation standards 
in the following areas: 

* Prospective financial statements 

* Reports on internal controls at service organizations 

* Pro forma financial information 

* Reports on internal control over financial reporting for private companies 

* Compliance with laws and regulations 

» Agreed-upon procedures engagements 

* Management’s discussion and analysis 


Standards are necessary for these types of engagements because CPAs already 
perform these services in sufficiently large numbers to need more specific guidance than 
the general attestation standards provide. However, the absence of specific standards for 
a type of service does not imply that it is inappropriate to provide such a service. 


The attestation standards define three levels of engagements and related forms of 
conclusions: 

1. Examinations 

2. Reviews 

3. Agreed-upon procedures 


In addition, compilation engagements are defined for prospective financial statements. 

An examination SpE. ina Roe sitive conclusion. In this type of report, the CPA 
makeAPAGRAekRY AECRKotation of the assertions, taken as a 
whole, conforms to the fiat criteria. Figure 25-6 shows an examination report 
written under the general guidance of the attestation standards. This is for an engage- 
ment to determine that the rate of return on a hypothetical portfolio, based on a 
brokerage firm’s buy-sell recommendations, is correct as represented in the firm’s 
promotional materials. A report on an examination is unrestricted as to distribution 
by the client after it is issued. This means that a client can distribute the information 
widely, including to prospective investors, and for sales and marketing purposes. 


Example of an Examination Report under the Attestation ) 
Standards 


To Management 
Akron Securities, Inc. 








We have examined the accompanying statement for investment performance statistics of the 
Akron Securities Model Portfolio for the year ended December 31, 2011. Akron Securities’ 
management is responsible for the statement of investment performance statistics. Our respon- 
sibility is to express an opinion based on our examination. 

Our examination was conducted in accordance with attestation standards established by the 
American Institute of Certified Public Accountants and, accordingly, included examining, on a 
test basis, evidence supporting Akron Securities Model Portfolio’s statement for investment 
performance statistics and performing such other procedures as we considered necessary in the 
circumstances. We believe that our examination provides a reasonable basis for our opinion. 

In our opinion, the schedule referred to above presents, in all material respects, the investment 
performance statistics of Akron Securities Model Portfolio for the year ended December 31, 
2011, based on the actual results that would have been obtained if the buy-and-sell recommen- 
dations for the portfolio were followed as described in the buy-sell recommendations set forth 
in Note 1. 
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. 
= Types of Engagements and Related Reports 
Amount of Level of Form of 
Type of Engagement Evidence Assurance Conclusion _ Distribution 
Examination Extensive High Positive General 
Review Significant Moderate Negative General 
Agreed-upon procedures Varying Varying Findings Limited 
= — 











In a review, the CPA provides a negative assurance conclusion. For a negative 
assurance report, the CPA’s report states whether any information came to the CPA’s 
attention to indicate that the assertions are not presented in all material respects in con- 
formity with the applicable criteria. A review report is also unrestricted in its distribution. 
Review engagements are prohibited for most services where specified attestation 
standards have been issued, such as prospective financial statements, because of the 
difficulty of setting standards for the limited assurance provided by reviews. 

In an agreed-upon procedures engagement, all procedures the CPA will perform 
are agreed upon by the CPA, the responsible party making the assertions, and the 
specific persons who are the intended users of the CPA's report. The degree of assurance 
included in such a report varies with the specific procedures agreed to and performed. 
Accordingly, such reports are limited in their distribution to only the involved parties, 
who know the procedures the CPA will perform and the level of assurance resulting 
from them. The report should include a statement of what procedures management and 
the CPA agreed to and what the CPA found in performing the procedures. 

Figure 25-7 summarizes the reporting levels for attestation engagements. Next we 
discuss four common types of engkpag oO WDEeHnhanieednidards 
have been issued: WebTrust and SysTrust services, reports on controls of service 
organizations, prospective financial statements, and agreed-upon procedures. 


WEBTRUST AND SYSTRUST SERVICES 


Most organizations rely heavily on the use of information technologies to conduct OBJECTIVE 25-4 





business, including the use of the Internet to buy and sell goods and services. As more 

; ’ ; : ; Understand the nature of 
reliance is placed on information systems, businesspeople often demand greater WebTrust and SysTrust 
assurances about their accuracy, availability, and security. WebTrust and SysTrust are assurance services, 





examples of attestation services developed to address these assurance needs. 


In a WebTrust attestation engagement, a client engages a CPA to provide reasonable WebTrust Services 
assurance that a company’s Web site complies with certain Trust Services principles and 

criteria for one or more aspects of e-commerce activities. A site that meets the Trust 

Services principles is eligible to display the WebTrust electronic seal on its transaction or 

order page, which is intended to give users of the site assurance about the site’s credi- 

bility. At least once every 12 months, the CPA firm updates its testing of the e-commerce 

aspects to ensure that the client’s site continues to comply with the Trust Services 

principles and criteria. The CPA firm also updates its report. If the site does not 

comply, the seal can be revoked. 

The WebTrust service is a specific service developed under the broader Trust Services 
principles and criteria jointly issued by the AICPA and CICA. When performing 
WebTrust assurance services, the CPA firm assesses whether the company’s Web site 
complies with the five Trust Services principles, which are shown in Table 25-2 (p. 800). 
These Trust Services principles represent broad statements of objectives. To provide 
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> 
a) Five Trust Services Principles 


Principle The entity discloses and maintains compliance with its 





Security security practices, ensuring that the system is protected against unauthorized 
access (both physical and logical). 





Availability availability practices, ensuring that the system is available for operation and 
use as committed or agreed. 





Processing Integrity processing integrity, ensuring that system processing is complete, accurate, 
timely, and authorized. 


Online Privacy online privacy practices, ensuring that personal information obtained as a 
result of e-commerce is collected, used, disclosed, and retained as 
committed or agreed. 





Confidentiality confidentiality practices, ensuring that information designated as confidential 
is protected as committed or agreed. 











more specific guidance, there are related Trust Services criteria for each of the five 
principles. A company must conform to these criteria to obtain and maintain its 
WebTrust seal. 


SysTrust Services As organizations become more dependent on information technology, the security, 
availability, and accuracy of computer systems are critical. An unreliable system can 
trigger a chain of business events that negatively affect the company, its customers, 
suppliers, and other business partners. The SysTrust service provides assurance to 


mana pag the bo De org, or third parties about the reliability of informa- 
(ion sAPAGO., BRE. EnHARG Ren, 


Ina ae oo. the SysTrust licensed CPA evaluates a company’s com- 
puter system using Trust Services principles and criteria and determines whether 
controls over the system exist. The CPA then does tests to determine whether those 
controls were operating effectively during a specified period. If the system meets the 
requirements of the Trust Services principles and criteria, an examination-level 
unqualified attestation report is issued under AICPA attestation standards. The report 
may address a single Trust Services principle or any combination of Trust Services 
principles. 

An organization may request a SysTrust engagement for a system that is in the 
preimplementation phase. For this type of engagement, the CPA reports on the 
suitability of the design of controls, and the report covers a point in time rather than a 
period of time. 


REPORTS ON CONTROLS AT SERVICE ORGANIZATIONS 





OBJECTIVE 25-5 Chapter 12 highlighted that many clients outsource some or all of their IT needs to an 
: independent computer service organization rather than maintain an internal IT 
Describe engagements to f : h : ; ty : é Ce cal hh + 
report on internal controls unction or data center. Int ose situations, the auditor faces difficulty when obtaining 
at service organizations. an understanding of the client’s internal control because many of the controls reside at 





the service organization, and the auditor cannot assume that the controls are adequate 
because they are provided by an independent IT provider. It has become increasingly 
common for the service center to engage a CPA firm to obtain an understanding and 
test internal controls of the service organization and issue a report for use by all 
customers and their independent auditors. 
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These engagements have historically been referred to as SAS 70 engagements 
because the guidance for service auditors was contained in that auditing standard. The 
Auditing Standards Board recently moved the guidance for service auditors from 
auditing standards to the attestation standards. Those standards provide guidance for 
service auditors who are engaged by a service organization to issue one of two types of 
reports: 


1. Report ona description of a service organization’s system and the suitability of 
the design of controls (Type 1 report). 

2. Report ona description of a service organization’s system and the suitability of 
the design and operating effectiveness of controls (Type 2 report). 


In a Type 1 report, the service auditor expresses an opinion about the fairness of 
the description of the service organization’s system and an opinion about the suitability 
of the design of controls in that system. The service auditor obtains and reads the 
system description prepared by the organization’s management and assesses whether 
the description is fairly presented. In making that assessment, the service auditor 
evaluates whether management used suitable criteria in preparing and presenting the 
service organization’s system description. For example, the service auditor would 
evaluate whether the organization’s description includes information about procedures 
by which transactions are initiated, authorized, recorded, processed, corrected, and 
reported for user entities and the related accounting records prepared to support those 
processes. 

In a Type 1 engagement, the service auditor also performs procedures to obtain 
sufficient available evidence to obtain reasonable assurance about the suitability of the 
design of controls. In making that determination, the service auditor evaluates whether 
controls have been designed to address risks threatening the achievement of control 
objectives and whether those controls, if operating as described, provide reasonable 
assurance that those risks would notprevent achie of contxol objectives. 

In a Type 2 engagement, the AGP bere 3 RG rating 
effectiveness of the controls at the service organization, in addition to procedures per- 
formed in the Type 1 engagement. When testing controls at the service organization, 
the service auditor performs tests of controls using procedures similar to those 
described in earlier chapters to obtain sufficient appropriate evidence about the 
operating effectiveness of those controls throughout the period under audit. The 
service auditor’s Type 2 report contains the two opinions about the description and 
suitability of the design of controls that are provided in a Type 1 report, plus an addi- 
tional opinion about the operating effectiveness of controls throughout the period. 


PROSPECTIVE FINANCIAL STATEMENTS 


As implied by the term, prospective financial statements refer to predicted or expected OBJECTIVE 25-6 
financial statements in some future period (income statement) or at some future date 
(balance sheet). An example is management’s predictions of the income statement and 





Understand special engage- 


: ments to attest to prospective 
balance sheet one year in the future. financial statements. 





Most CPAs believe there are significant opportunities and potential risks for 
auditors to provide credibility to prospective financial information. It is widely 
accepted that users want reliable prospective information to aid their decision making. 
If auditors can improve the reliability of the information, information risk may be 
reduced in the same way it is in audits of historical financial statements. The risks arise 
because the actual results obtained in the future may differ significantly from the 
results predicted in the prospective financial statements. Regulators, users, and others 
may criticize and even sue auditors, even if the prospective statements were fairly 
stated, given the information available when they were prepared. 
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Forecasts 
and Projections 


Use of Prospective 
Financial Statements 


Types of Engagements 


POTENTIAL 
LEGAL LIABILITY 
IN PROSPECTIVE 


FINANCIAL 
STATEMENTS 


AICPA attestation standards define two general types of prospective financial statements: 


1. Forecasts are prospective financial statements that present an entity’s expected 
financial position, results of operations, and cash flows, to the best of the respon- 
sible party’s knowledge and belief. Banks commonly require this information as 
a part of loan applications. 

2. Projections are prospective financial statements that present an entity’s financial 
position, results of operations, and cash flows, to the best of the responsible party’s 
knowledge and belief, given one or more hypothetical assumptions. For example, 
projected financial statements might assume the company is able to increase 
the price of its primary product by 10 percent with no reduction in units sold. 


There is considerable literature available to management to help them prepare 
both forecasts and projections. This literature, along with guidance for independent 
accountants, is presented in the AICPA Guide for Prospective Financial Statements, 
which includes criteria against which an attestation engagement can be compared. 


Prospective financial statements are prepared for one of two audiences: 
1. General use statements are prepared for use by any third party, such as the 
inclusion of a financial forecast in a prospectus for the sale of hospital bonds. 
2. Limited use statements are prepared solely for third parties with whom the 
responsible party is dealing directly, such as the inclusion of a financial projection 
in a bank loan application document. 


Forecasts can be provided for both general and limited use. However, projections are 
restricted to the latter, because limited users are in a better position to understand the 
prospective statements and related assumptions than other parties. For example, a potential 
venture capital investor can ask the responsible party about hypothetical assumptions in a 
projection, whereas a removed user, such as a reader of a company prospectus, cannot. 
Because ‘Apag users may have_difficulty interpreting hypothetical assumptions without 
obtai rAR AGA ik i PDF. Bahancen their general use. There is an excep- 


tion to this rule: a projection may be issued as a supplement to a forecast for general use. 


AICPA attestation standards prohibit a CPA firm from performing a review of a forecast 
or projection, because a review service implies the CPA can be “moderately satisfied” 
about both the computational accuracy of the projections and the assumptions on 
which the projection is based. To avoid confusion among users, the AICPA created more 
specific attestation standards, prescribing the following types of engagements for 
prospective financial statements: 
» An examination engagement in which the CPA obtains satisfaction as to the 
completeness and reasonableness of all the assumptions. 
* Acompilation engagement in which the CPA is primarily involved with the compu- 
tational accuracy of the statements, and not the reasonableness of the assumptions. 
» An agreed-upon procedures engagement in which the CPA and all users of the 
statements agree on specific, limited attestation procedures. 


Only an examination of prospective statements is included in this chapter. 





A partner in one of the Big Four CPA firms incurred to defend against lawsuits involving 
stated that his firm has decided not to do these engagements. The firm discovered that 
assurance engagements for prospective legal costs exceeded revenues. The partner 
financial statements because of litigation said, “You don’t have to be a rocket scientist 
costs. He reported that his firm calculated to conclude that if legal costs exceed 

their total revenues (not profits) from all revenues it’s a bad business. Users sue 
prospective financial statement when actual profits are less favorable than 
engagements and also calculated all legal those projected regardless of what the CPA 
costs, including partner and staff time firm’s report says.” 
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= Example of a Report on a Forecast ) 


Independent Accountant's Report 





We have examined the accompanying forecasted balance sheet, statements of income, retained 
earnings, and cash flows of Allstar, Inc., as of December 31, 2012, and for the year then ending. 
Allstar’s management is responsible for the forecast. Our responsibility is to express an opinion 
on the forecast based on our examination. 

Our examination was conducted in accordance with attestation standards established by the 
American Institute of Certified Public Accountants and, accordingly, included such procedures 
as we considered necessary to evaluate both the assumptions used by management and the 
preparation and presentation of the forecast. We believe that our examination provides a 
reasonable basis for our opinion. 

In our opinion, the accompanying forecast is presented in conformity with guidelines for 
presentation of a forecast established by the American Institute of Certified Public Accountants, 
and the underlying assumptions provide a reasonable basis for management's forecast. 
However, there will usually be differences between the forecasted and actual results, because 
events and circumstances frequently do not occur as expected, and those differences may be 
material. We have no responsibility to update this report for events and circumstances occurring 
after the date of this report. 

EE — 











AICPA attestation standards clearly state that CPAs are not attesting to the accuracy of 
the prospective financial statements. Instead, they examine the underlying assumptions 
and the preparation and presentation of the forecast or projection. For examinations of 
forecasts and projections, there are four elements: 

1. Evaluating the preparation of the prospective financial statements 

2. Evaluating the support underlying the assumptions 

3. Evaluating the presentation of the prospective financial statements for con- 


formity with AICPA presentation guidelines 
4, Issuing an examination repaxPAGO PDF Enhancer 


These elements are based on accumulating evidence about the completeness and 
reasonableness of the underlying assumptions, as disclosed in the prospective 
financial statements. To make the evaluation, the CPA needs to become familiar with 
the client’s business and industry, identify the significant matters on which the client’s 
future results are expected to depend (“key factors”), and determine that appropriate 
assumptions have been included with respect to these key factors. 

Figure 25-8 illustrates a report on an examination of a forecast with an unqualified 
opinion. As the figure shows, the CPA’s report on an examination of prospective financial 
statements is similar to the standard audit report for audited financial statements 
except for wording differences due to the unique labeling of the prospective financial 
statements and the inclusion of statements by the CPA about these three key distinctions: 

1. A statement that the prospective results may not be achieved. 

2. A statement that the CPA assumes no responsibility to update the report for 

events and circumstances occurring after the date of the report. 

3. The date of the examination report (because the report is a forecast, the date of 

the forecasted balance sheet is after the report date). 


Examination 
of Prospective 
Financial Statements 


AGREED-UPON PROCEDURES ENGAGEMENTS 


When the auditor and management or a third-party user agree that the audit will be 
limited to certain specific audit procedures, it is referred to as an agreed-upon procedures 
engagement. Many CPAs refer to these as procedures and findings engagements because 
the resulting reports emphasize the specific audit procedures performed and the findings 
of those completed procedures. 


OBJECTIVE 25-7 


Define agreed-upon 
procedures engagements. 








Chapter 25 / OTHER ASSURANCE SERVICES 803 


Agreed-upon procedures engagements appeal to CPAs because management, or a 
third-party user, specifies the procedures they want done. Imagine the difficulty a CPA 
firm faces if it is asked to issue an opinion to a federal agency that a company complied 
with federal affirmative action laws for a 2-year period under compliance attestation 
standards. Now assume that the federal agency is willing to specify 10 audit procedures the 
CPA firm will do to satisfy the agency. Obviously, the latter engagement will be much easier 
to manage. Assuming the CPA firm and federal agency can agree on the procedures, many 
CPA firms are willing to perform the procedures and issue a report of the related findings. 

AU 622 in the auditing standards and AT 601 in the attestation standards are the 
primary professional standards addressing agreed-upon procedures engagements. They are 
called mirror standards, because of their similarities, but auditing standards deal with finan- 
cial statement items, while attestation standards deal with nonfinancial statement matters. 

In an agreed-upon procedures engagement under attestation standards, a CPA 
might calculate the internal rate of return, beta risk for measuring volatility, and other 
relevant information of interest to investors for a mutual fund. For engagements under 
auditing standards, CPAs might do agreed-upon procedures on the gross sales account 
for a lease agreement. For example, retail stores commonly contract for such engage- 
ments when the store leases from the building owner on the basis of a percent of gross 
sales. A report for such an engagement describes the procedures agreed upon and the 
findings resulting from the procedures. 


OTHER AUDITS OR LIMITED ASSURANCE ENGAGEMENTS 


OBJECTIVE 25-8 





Describe other audit and 
limited assurance engage- 
ments related to historical 
financial statements. 





Other Comprehensive 
Basis of Accounting 


Now that we have discussed compilation and review services for nonpublic companies, 
as well as reviews of interim financial information for public companies, we will 
examine other types of audit_and attestation services that fall within the auditing 
standAPAage nk DEits BRAANGExK-ial statements in accordance with 
GAAP or IFRS. Some of these services include: audits of financial statements prepared 
on another comprehensive basis of accounting (OCBOA), audits of specified elements, 
accounts, or items; and debt compliance letters. 


Auditors often audit statements prepared on a basis other than GAAP or IFRS. 
Auditing standards apply to these audit engagements, but the reporting requirements 
differ somewhat from those described in Chapter 3. Bases other than GAAP or IFRS for 
which reports may be issued include: 


* Cash or modified cash basis. With cash basis accounting, only cash receipts and 
disbursements are recorded. Under the modified cash basis of accounting, the cash 
basis is followed except for certain items, such as fixed assets and depreciation. 
Physicians and attorneys often follow this accounting method. 

* Basis used to comply with the requirements of a regulatory agency. Common 
examples include the uniform system of accounts required of railroads, utilities, 
and some insurance companies. 

* Income tax basis. The same measurement rules used for filing tax returns are 
often used for financial statement preparation, even though this is not in 
accordance with GAAP or IFRS. Many small businesses use this method. 

* A definite set of criteria having substantial support. An example is the price-level 
basis of accounting. The method of accounting must be applied to all material 
items in the financial statements. 


Auditors usually do these audits in the same way as when clients follow GAAP or 
IFRS. Naturally, the auditor must fully understand the accounting basis that the client is 
required to follow. For example, in auditing a railroad, complex accounting requirements 
require the auditor to have specialized accounting knowledge to conduct the audit. 
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— Example of a Report on Income Tax Basis ) 


Independent Auditor's Report 





We have audited the accompanying statements of assets, liabilities, and capital—income tax 
basis of Triangle Partnership as of December 31, 2011 and 2010, and the related statements of 
revenue and expenses—income tax basis and changes in partners’ capital accounts—income tax 
basis for the years then ended. These financial statements are the responsibility of the 
Partnership's management. Our responsibility is to express an opinion on these financial state- 
ments based on our audits. 

We conducted our audits in accordance with generally accepted auditing standards. Those 
standards require that we plan and perform the audit to obtain reasonable assurance about 
whether the financial statements are free of material misstatement. An audit includes examining, 
on a test basis, evidence supporting the amounts and disclosures in the financial statements. 
An audit also includes assessing the accounting principles used and significant estimates made 
by management, as well as evaluating the overall financial statement presentation. We believe 
that our audits provide a reasonable basis for our opinion. 

As described in Note X, these financial statements were prepared on the basis of accounting 
the Partnership uses for income tax purposes, which is a comprehensive basis of accounting 
other than generally accepted accounting principles. 

In our opinion, the financial statements referred to above present fairly, in all material 
respects, the assets, liabilities, and capital of Triangle Partnership as of December 31, 2011 and 
2010, and its revenue and expenses and changes in partners’ capital accounts for the years then 
ended, on the basis of accounting described in Note X. 











When clients follow a comprehensive basis other than GAAP or IFRS, the auditor 
must make sure the statements clearly indicate that they are prepared using another 
basis of accounting. If the statements imply that GAAP is followed, the reporting 
requirements covered in Chapter 3 apply. Consequently, terms such as balance sheet 
and statement of operations must w f= oyPDPoRnhance rch as 

“statement of assets and liabilities arisfag frdm cash transactions” is appropriate for a 
cash basis statement. Figure 25-9 is an example of a report prepared on a partnership 
following the income tax basis of accounting. 


Auditors are often asked to audit and issue reports on specific aspects of financial state- 
ments. A common example is a report on the audit of sales of a retail store in a shopping 
center to be used as a basis for rental payments. Other common examples include 
reports on royalties, profit participation, and provision for income taxes. The authority 
for auditing specified elements, accounts, or items is AU 623 (Special Reports). 

CPA firms typically do audits for specified elements, accounts, or items. This type 
of audit is much like an ordinary audit of financial statements except it is applied to 
less than the full financial statements. There are two main differences in audits of 
specified elements, accounts, or items and audits of complete financial statements: 


1. Materiality is defined in terms of the elements, accounts, or items being audited 
rather than for the overall statements. The effect is to ordinarily require more 
evidence than if the item being verified is just one of many parts of the state- 
ments. For example, if the sales account is being reported on separately, a smaller 
misstatement will be considered material than it is when sales are one of many 
accounts in a full financial statement audit. 

2. The first standard of reporting under GAAS does not apply because the presen- 
tation of elements, accounts, or items is not a financial statement prepared in 
accordance with applicable accounting standards. 


Auditors must extend their audit efforts to include other elements, accounts, or items 
that are interrelated with those that are being audited. For example, in expressing an 
opinion on sales, the auditor must also consider the effect of accounts receivable on sales. 


Specified Elements, 
Accounts, or Items 
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Debt Compliance 
Letters and 
Similar Reports 





fiemeaene Example of Debt Compliance Report ) 


Independent Auditor's Report 





We have audited, in accordance with generally accepted auditing standards, the balance sheet of 
Bollert Company as of December 31, 2011, and the related statements of income, retained earnings, 
and cash flows for the year then ended, and have issued our report thereon dated February 16, 
2012. 

In connection with our audit, nothing came to our attention that caused us to believe that the 
Company failed to comply with the terms, covenants, provisions, or conditions of sections | to IX, 
inclusive, of the Indenture dated July 21, 2009, with First Bank insofar as they relate to accounting 
matters. However, our audit was not directed primarily toward obtaining knowledge of such 
noncompliance. 

This report is intended solely for the information and use of the boards of directors and 
managements of Bollert Company and First Bank and should not be used for any other purpose. 











Clients occasionally enter into loan agreements that require them to provide the lender 
with a report from a CPA about the existence or nonexistence of some condition. For 
example, a bank may require a company to maintain a certain dollar amount of 
working capital at a specified date and to obtain an audit report that states whether the 
company complied with the stated working capital requirements. 

Auditors may issue reports on debt compliance and similar engagements as 
separate reports or, by adding a paragraph after the opinion paragraph, as part of a 
report that expresses their opinion on the financial statements. In either case, the 
auditor must observe the following matters in such engagements: 

* Auditors must be qualified to evaluate whether the client has met the provisions 

in the engagement. In the audit of a debt compliance agreement, auditors are 
APY" PDE «J ah Weincipal and interest payments were 
de when due, whether the proper limitations were maintained on dividends, 
working capital, and debt ratios, and whether the accounting records were 
adequate for conducting an ordinary audit. However, auditors are not qualified 
to determine whether the client has properly restricted its business activities to 
the requirements of an agreement or if it has title to pledged property. These are 
legal questions and the Code of Professional Conduct prohibits the auditor from 
practicing as an attorney in such circumstances. 

* The auditor should provide a debt compliance letter only for a client for whom the 
auditor has done an audit of the overall financial statements. A debt compliance 
letter on a matter such as the existence of a current ratio of 2.5 or better would 
be difficult to accomplish without having conducted a complete financial 
statement audit. 

* The auditor’s opinion is a negative assurance, stating that nothing came to the 
auditor’s attention that would lead the auditor to believe there was noncompliance. 


Figure 25-10 provides an example of a separate report on debt compliance. Note 
that the final paragraph restricts distribution of the report to the directly affected parties. 


SUMMARY 


This chapter described many of the other services offered by CPAs. The types of services 
offered continue to grow and expand as society demands assurance on new and different 
types of information. Depending on the nature of the service, the guidance for performing 
the service may come from auditing standards, accounting and review services standards, 
or attestation standards. Table 25-3 provides a summary and examples of the primary 
categories of services discussed in this chapter. 
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TABLE 25-3 Primary Categories of Other Assurance Services Engagements 





Type of Engagement 


Audits of historical financial statements 
prepared in accordance with accounting 
standards 


Example 


Audit of General Mills’ financial statements 


Source of Authoritative Support 


Auditing standards 





Attestation engagements under the 
attestation standards 


Attestation of General Mills’ e-commerce 
system availability 


Attestation standards and Trust Services 
availability principles and criteria 





Reviews or compilations of historical 
financial statements prepared in 
accordance with accounting standards 


Review of Ron’s Shoe Store’s quarterly 
financial statements 


Accounting and review services standards for 
nonpublic companies; auditing standards 
for public companies 





Audits or limited assurance engagements 
other than audits, reviews, or compilations 
of historical financial statements prepared 
in accordance with accounting standards 





Audit of Ron’s Shoe Store’s ending balance 


in inventory 


Auditing standards 








TS 


Agreed-upon procedures engagement— 
an engagement in which the procedures 
to be performed are agreed upon by the 
CPA, the responsible party making the 
assertions, and the intended users of the 
CPA's report; the CPA’s report is ay 
in the form of a negative assurance Pp 
Attestation engagement—a type of as- 
surance service in which the CPA firm 
issues a report about the reliability of 
subject matter or of an assertion that is 
the responsibility of another party 


Compilation service—a nonaudit engage- 
ment in which the accountant undertakes 
to present, in the form of financial state- 
ments, information that is the representation 
of management, without undertaking to 
express any assurance on the statements 


Examination—an attest engagement that 
results in positive assurance as to whether 
or not the assertions under examination 
conform with the applicable criteria 


Forecasts—prospective financial statements 
that present an entity’s expected financial 
position, results of operations, and cash 
flows for future periods, to the best of the 
responsible party’s knowledge and belief 


Projections—prospective financial state- 
ments that present an entity’s financial 
position and results of operations and cash 
flows for future periods, to the best of the 
responsible party’s knowledge and belief, 
given one or more hypothetical assumptions 


ag 


Prospective financial statements—finan- 
cial statements that deal with expected 
future data rather than with historical data 


Public company interim review—reviews 
of interim, unaudited financial informa- 


oO" PDF EnHant: panies 


meet their reporting responsibilities to 
regulatory agencies 


Review—an attestation engagement that 
results in a negative assurance as to the 
CPA's awareness of any information indi- 
cating that the assertions are not presented 
in conformity with the applicable criteria 


Review service (SSARS review)—a review 
of unaudited financial statements designed 
to provide limited assurance that no material 
modifications need be made to the state- 
ments in order for them to be in conformity 
with accounting standards or, if appli- 
cable, with another comprehensive basis 
of accounting 


Statements on Standards for Accounting 
and Review Services (SSARS)—standards 
issued by the AICPA Accounting and 
Review Services Committee that govern 
the CPA's association with unaudited finan- 
cial statements of nonpublic companies 


Statements on Standards for Attestation 
Engagements (SSAE)—statements issued 
by the AICPA to provide a conceptual 
framework for various types of attestation 
services 
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SysTrust—an attestation service designed WebTrust—an attestation service designed 


to provide reasonable assurance that to provide reasonable assurance that a 
a company’s computer system complies company’s Web site complies with Trust 
with Trust Services principles and Services principles and criteria for busi- 
criteria ness-to-consumer electronic commerce 


REVIEW QUESTIONS 


25-1 (Objective 25-1) What is meant by the term level of assurance? How does the level of 
assurance differ for an audit of historical financial statements, a review, and a compilation? 


25-2 (Objective 25-1) What is negative assurance? Why is it used in a review engagement 
report? 


25-3 (Objective 25-1) Distinguish between compilation and review of financial statements. 
What is the level of assurance for each? 


25-4 (Objective 25-1) Distinguish the three forms of compilation reports that a CPA can 
provide to clients. 


25-5 (Objective 25-1) List five things that are required of an auditor by SSARS for a 
compilation. 


25-6 (Objective 25-1) What steps should auditors take if during a compilation engagement 
they become aware that the financial statements are misleading? 


25-7 (Objective 25-1) What procedures should the auditor use to obtain the information 
necessary to give the level of assurance required of reviews of financial statements? 


25-8 (Objective 25-1) What should auditors do if during a review of financial statements 
they discover that saan oe standards are not being followed? 


25-9 Ape Wrnhanterces between the review reports for a 
private c Igo’ Ore DE and for the interim financial statements of a public company? 
25-10 (Objective 25-2) Explain why a review of interim financial statements for a public 
company may provide a greater level of assurance than an SSARS review. 


25-11 (Objective 25-3) Define what is meant by attestation standards. Distinguish between 
attestation standards and auditing standards. 


25-12 (Objective 25-4) List the five Trust Services principles and explain whether a 
WebTrust licensed CPA can report on an entity’s compliance with those principles indi- 
vidually or in combination. 


25-13 (Objective 25-4) Describe the purpose of a SysTrust assurance services engagement. 


25-14 (Objective 25-5) An audit client has engaged a third party service organization to 
host its payroll software package on servers located at the service organization. What 
options do you have to obtain assurance about the controls embedded in the payroll 
application? 


25-15 (Objective 25-6) Explain what is meant by prospective financial statements and 
distinguish between forecasts and projections. What four things are involved in an 
examination of prospective financial statements? 


25-16 (Objective 25-8) State the reporting requirements for statements prepared on a basis 
other than GAAP. 


25-17 (Objective 25-8) The Absco Corporation has requested that Herb Germany, CPA, 
provide a report to the Northern State Bank as to the existence or nonexistence of certain 
loan conditions. The conditions to be reported on are the working capital ratio, dividends 
paid on preferred stock, aging of accounts receivable, and competence of management. 
This is Herb’s first experience with Absco. Should Herb accept this engagement? Sub- 
stantiate your answer. 
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MULTIPLE CHOICE QUESTIONS FROM CPA EXAMINATIONS 


25-18 (Objective 25-1) The following are miscellaneous questions about compilation and 
review services. Choose the best response. 


a. It is acceptable for a CPA to be associated with financial statements when not inde- 
pendent with respect to the client and still issue a substantially unmodified report for 
which of the following: 

(1) Audits of companies following GAAP. 

(2) Audits of companies on a comprehensive basis of accounting other than GAAP. 
(3) Review of financial statements following GAAP. 

(4) Compilation of financial statements following GAAP. 


b. A CPA is performing review services for a small, closely held manufacturing company. 
As a part of the follow-up of a significant decrease in the gross margin for the current 
year, the CPA discovers that there are no supporting documents for $40,000 of disburse- 
ments. The chief financial officer assures her that the disbursements are proper. What 
should the CPA do? 

(1) Include the unsupported disbursements without further work in the statements 
on the grounds that she is not doing an audit. 

(2) Modify the review opinion or withdraw from the engagement unless the unsup- 
ported disbursements are satisfactorily explained. 

(3) Exclude the unsupported disbursements from the statements. 

(4) Obtain a written representation from the chief financial officer that the disburse- 
ments are proper and should be included in the current financial statements. 


c. Which of the following best describes the responsibility of the CPA in performing 

compilation services for a company? 

(1) The CPA has to satisfy only himself or herself that the financial statements were 
prepared in conformity with accounting standards. 

(2) The CPA must understand HARAGOsinRDEF a BARAIGE Nd read 
the financial statements for reasonableness. 

(3) The CPA should obtain an understanding of internal control and perform tests of 
controls. 

(4) The CPA is relieved of any responsibility to third parties. 


25-19 (Objectives 25-3, 25-6) The following questions concern attestation engagements. 
Choose the best response. 


a. Which of the following professional services is considered an attestation engagement? 
(1) A management consulting engagement to provide IT advice to a client. 
(2) An income tax engagement to prepare federal and state tax returns. 
(3) An engagement to report on compliance with statutory requirements. 
(4) A compilation of financial statements from a client’s accounting records. 


b. A Type | service auditor’s report on internal controls at a service organization 

(1) includes an opinion about the suitability of the design of controls at the service 

organization. 

(2) is based on the performance of tests of controls and substantive tests of trans- 
actions at the service organization. 
contains an opinion about the operating effectiveness of internal controls at the 
service organization. 
(4) provides an opinion about the fair presentation of the service organization’s 

financial statements in accordance with accounting standards. 
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c. Which of the following statements concerning prospective financial statements is correct? 
(1) Only a financial forecast is normally appropriate for limited use. 
(2) Any type of prospective financial statement is normally appropriate for limited use. 
(3) Only a financial projection is normally appropriate for general use. 
(4) Any type of prospective financial statement is normally appropriate for general use. 
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25-20 (Objective 25-8) The following questions concern reports issued by auditors, other 
than those on historical financial statements. Choose the best response. 
a. An auditor is reporting on cash basis financial statements. These statements are best 
referred to in the opinion of the auditor by which of the following descriptions? 
(1) Cash receipts and disbursements and the assets and liabilities arising from cash 
transactions. 
(2) Financial position and results of operations arising from cash transactions. 
(3) Balance sheet and income statements resulting from cash transactions. 
(4) Cash balance sheet and the source and application of funds. 
b. Which of the following statements with respect to an auditor’s report expressing an 
opinion on a specific item on a financial statement is correct? 
(1) Such a report can be expressed only if the auditor is also engaged to audit the 
entire set of financial statements. 
(2) Materiality must be related to the specific item rather than to the financial state- 
ments taken as a whole. 
(3) The attention devoted to the specified item is usually less than it would be if the 
financial statements taken as a whole were being audited. 
(4) The auditor who has issued an adverse opinion on the financial statements taken as a 
whole can never express an opinion on a specified item in these financial statements. 
c. When asked to perform an audit to express an opinion on one or more specified elements, 
accounts, or items of a financial statement, the auditor 
(1) may not describe auditing procedures applied. 
(2) should advise the client that the opinion can be issued only if the financial state- 
ments have been audited and found to be fairly presented. 
(3) may assume that the first standard of reporting with respect to GAAP does not apply. 
(4) should comply with the request only if they constitute a major portion of the financial 
statements on which an auditor has disclaimed an opinion based on an audit. 


DISCUSSION QUESTIONS AND PROBLEMS 





25-21 (Objective 25-1) Evaluate the following comments about compiled financial state- 
ments: “When CPAs associate their name with compiled financial statements, their only 
responsibility is to the client and that is limited to the proper summarization and presen- 
tation on the financial statements of information provided by the client. The opinion 
clearly states that the auditor has not conducted an audit and does not express an opinion on 
this fair presentation. If users rely on compiled financial statements, they do so at their own 
risk and should never be able to hold the CPA responsible for inadequate performance. Users 
should interpret the financial statements as if they had been prepared by management.” 


25-22 (Objective 25-1) You are doing a review services and related tax work engagement 
for Murphy Construction Company. You have made extensive inquiries of management 
about their financial statements and have concluded that management has an excellent 
understanding of its business and is honest, but lacking in knowledge of technical account- 
ing issues. In doing the review you determine the following: 


1. Repairs and maintenance expense has increased significantly compared to the preceding 
year. The president states that this seems to have been a year with a lot of repairs, in 
part because their equipment is getting older. 

2. Property tax expense is the same as last year even though Murphy purchased a new 
building, including the land. The president states that there are no real estate taxes 
on the new building and land until next year. 

3. Based on your knowledge of the construction industry you know that the pipes 
Murphy uses in construction have had a decrease in selling price to construction 
companies near the end of the current year. The president states that even though 
they have a large pipe inventory it will all be used in the next year or two, so the 
current price doesn’t matter because they won't need to buy any. 
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4, Accounts receivable has increased almost 25% compared to the previous year, but 
the allowance for uncollectible accounts has stayed the same. The president states 
that even though receivables have increased, they still expect uncollectible accounts 
to be less than the stated allowance. 

5. In discussions with the president you determine that there is a material uninsured 
lawsuit against the company from a former customer. The president believes it is a 
frivolous lawsuit and will not permit a footnote about it for fear that it will result in 
similar lawsuits from other customers. 


a. Beyond inquiries and analytical procedures, what are the accountant’s responsibilities Required 
in performing review service engagements? 


b. Describe what you should do in each of the preceding situations, assuming each one is 
material. 


25-23 (Objective 25-1) SSARS contain several procedures that are required when engaged 
to perform a compilation or review engagement. Below are ten statements that may or may 
not be relevant to a compilation or review engagement. For each of the ten statements, 
indicate whether the procedure is to be performed in a compilation or review engagement. 


Required for a 





Compilation Review 
Description of Procedure Engagement? Engagement? 





1. Obtain a written engagement letter. 

Understand the client's industry and the nature of the 

client's business. 

Read the financial statements. 

Design and perform analytical procedures. 

Make inquiries of client management. 

Perform tests of controls. 

Assess fraud risk. 

Obtain a letter of representation f ent: 

Prepare desineiiation in suffi SAO Sovide DE Enhancer 

a clear understanding of the work performed. 

10. Issue a report that contains limited assurance about 
whether the accountant is aware of the need for 
material modification to the financial statements. 


N 
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25-24 (Objective 25-1) In an engagement to review the financial statements of a nonpublic 
company, SSARS require the accountant to obtain review evidence that is primarily based 
on inquiries and analytical procedures. The nature of the accountant’s inquiries is a matter 
of judgment. For example, the accountant may consider the nature and materiality of the 
items, likelihood of misstatement, how the items may be affected by management’s judgment, 
qualifications of client personnel, among other matters. 


Below are several inquiry procedures for the sales and collection cycle: 


Revenue 


1. Are revenues from the sale of major products and services recognized in the appro- 
priate period? 


Receivables 


1. Has an adequate allowance been made for doubtful accounts? 

. Have receivables considered uncollectible been written off? 

. If appropriate, has interest been reflected? 

. Has a proper cutoff of sales transactions been made? 

. Are there any receivables from employees and related parties? 

. Are any receivables pledged, discounted, or factored? 

. Have receivables been correctly classified between current and noncurrent? 


ND WS WD 


a. What other information about accounts receivable and revenue, besides the items Required 
listed, will the accountant have to obtain? 
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Required 


. Compare the illustrative procedures for review services and those commonly per- 


formed for audits. What are the major differences? 


. Of whom should the accountant make inquiries in a small, closely-held company? 
d. Under what circumstances will procedures beyond those illustrated likely be performed? 


Be specific. 


. Compare the levels of achieved assurance for review services and audits. Is the 


achieved level much higher for audits, somewhat higher, or approximately the same? 
Give reasons for your answer. 


25-25 (Objective 25-2) Lucia Johnson, of Johnson and Lecy, CPAs, has completed the 
first-year audit of Tidwell Publishing Co., a publicly held company, for the year ended 
December 31, 2011. She is now working on a review of interim financial statements for the 
quarter ended March 31, 2012. 


Johnson has never done an interim review of a public company, but her firm does exten- 


sive compilation and review work. She therefore has one of her most experienced assistants, 
Fred Blair, do the work. She instructs him to follow the firm’s standard review services pro- 
cedures for SSARS reviews and to do high-quality work because Tidwell is a high-risk client. 


Blair completes the review of Tidwell’s statements and Johnson carefully reviews Blair’s 


work. No exceptions are found. Each page of the client’s financial statements is marked 
“reviewed.” The following report is issued. 


SECURITIES AND EXCHANGE COMMISSION 


We have reviewed the accompanying balance sheet of Tidwell Publishing Co. as of 
March 31, 2012, and the related statements of income, retained earnings, and 
changes in financial position for the year then ended, in accordance with the 
standards of the Public Company Accounting Oversight Board (United States). All 
information included in these financial statements is the representation of the 
management of Tidwell se a Co. 

A review con rinci f inquiries of company personnel and analytical 

Apago..P DF Bhan TL.G@ Fntially less in scope than an audit in 
sApag with the standards of the Public Company Accounting Oversight Board, 
the objective of which is the expression of an opinion regarding the financial 
statements taken as a whole. Accordingly, we do not express such an opinion. 

Based on our review, we are not aware of any material modifications that should 
be made to the accompanying financial statements in order for them to be in 
conformity with generally accepted accounting principles. 

Johnson & Levy, CPAs 
March 31, 2012 


a. Is it appropriate to do a review service for a publicly held company? Explain. 
b. Evaluate the approach taken by Johnson and Blair on the engagement. 
c. Evaluate the report. 


25-26 (Objective 25-4) Each of the following represents different client requests for 
engagements related to WebTrust and SysTrust assurance services. 


a. Ware Hospital Systems, Inc. is in the process of developing a new patient records system. 


Management has approached a licensed SysTrust accountant to perform a SysTrust 
engagement on its new system. Specifically, management wants the CPA to examine the 
system’s processing integrity using the Trust Services processing integrity principle and 
criteria. The examination will be scheduled prior to the new system’s implementation. 


. MoonBay.com’s management requested that their auditor perform a WebTrust assur- 


ance service on their assertion about MoonBay.com e-commerce policies’ compliance 
with the five Trust Services principles and criteria. Although the auditor is not a 
registered WebTrust provider, the CPA firm is a member of the AICPA. 


. The board of directors of Ferguson Hardware Company has requested that their 


auditor perform a SysTrust assurance services engagement on its information tech- 
nology system. The board has requested that the auditor, who is a licensed SysTrust 
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provider, report solely on the company’s IT availability policies and controls using the 
Trust Services availability principle and criteria. 

d. Management of Greenshield Technology, Inc. requested that its auditors perform a 
WebTrust assurance services engagement on its e-commerce security policies. The 
CPA firm performed the WebTrust services as of April 30, 2011, and has not updated 
its work. Management wants its WebTrust seal to stay posted on its Web site through 
May 31, 2012. 


Consider each request separately. Describe whether the requested assurance service can be 
performed. 


25-27 (Objective 25-6) Carl Monson, the owner of Major Products Manufacturing 
Company, a small, successful, longtime audit client of your firm, has requested you to work 
with his company in preparing 3-year forecasted information for the year ending 
December 31, 2012, and two subsequent years. Monson informs you that he intends to use 
the forecasts, together with the audited financial statements, to seek additional financing to 
expand the business. Monson has had little experience in formal forecast preparation and 
counts on you to assist him in any way possible. He wants the most supportive opinion 
possible from your firm to add to the credibility of the forecast. He informs you that he is 
willing to do anything necessary to help you prepare the forecast. 

First, he wants projections of sales and revenues and earnings from the existing 
business, which he believes can continue to be financed from existing capital. 

Second, he intends to buy a company in a closely related business that is currently 
operating unsuccessfully. Monson states that he wants to sell some of the operating assets of 
the business and replace them with others. He believes that the company can then be made 
highly successful. He has made an offer on the new business, subject to obtaining proper 
financing. He also informs you that he has received an offer on the assets he intends to sell. 


a. Explain circumstances under which it is and is not acceptable to undertake the engage- 
ment. 


b. Why is it important that Monson RAG Ohe ROEo BARARGE Fements 


before the engagement proceeds? 


c. What information will Monson have to provide to you before you can complete the 
forecasted statements? Be as specific as possible. 


d. Discuss, in as specific terms as possible, the nature of the report you will issue with the 
forecasts, assuming that you are able to properly complete them. 


25-28 (Objective 25-8) You have been requested by the management of J. L. Lockwood Co. 
to issue a debt compliance letter as a part of the audit of Taylor Fruit Farms, Inc. J. L. 
Lockwood Co. is a supplier of irrigation equipment. Much of the equipment, including 
that supplied to Taylor, is sold on a secured contract basis. Taylor Fruit Farms is an audit 
client of yours, but Lockwood is not. In addition to the present equipment, Lockwood 
informs you they are evaluating whether they should sell another $500,000 of equipment to 
Taylor Fruit Farms. 
You have been requested to send Lockwood a debt compliance letter concerning the 
following matters: 
1. The current ratio has exceeded 2.0 in each quarter of the unaudited statements pre- 
pared by management and in the annual audited statements. 
2. Total owners’ equity is more than $800,000. 
3. The company has not violated any of the legal requirements of California fruit- 
growing regulations. 
4, Management is competent and has made reasonable business decisions in the past 3 years. 
5. Management owns an option to buy additional fruit land adjacent to the company’s 
present property. 
a. Define the purpose of a debt compliance letter. 


b. Why is it necessary to conduct an audit of a company before it is acceptable to issue a 
debt compliance letter? 
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Required 


Required 


Required 
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c. For which of the five requested items is it acceptable for a CPA firm to issue a debt 
compliance letter? Give reasons for your answer. 


25-29 (Objective 25-8) Bengston, CPA, is conducting the audit of Pollution Control 
Devices, Inc. In addition, a supplemental negative assurance report is required to a major 
mortgage holder. The supplemental report concerns indenture agreements to keep the 
client from defaulting on the mortgage. Total assets are $14 million and the mortgage is for 
$4 million. The major provisions of the indentures are as follows: 

1. The current ratio must be maintained above 2.3 to 1. 

2. The debt/equity ratio must be maintained below 3.0. 

3. Net earnings after taxes must exceed dividends paid by at least $1 million. 

Required a. Write the appropriate supplemental report if all three indenture agreement provisions 
have been satisfied. 


b. How would the supplemental report change if net earnings after taxes were $1,010,000 
and dividends paid were $60,000? 

c. Assume the same situation as in part b and also assume that the client refuses to 
modify the financial statements or disclose the violation of the indenture agreement 
provisions on the grounds that the amount is immaterial. What is the nature of the 
appropriate auditor’s report? 

d. What is the nature of the appropriate supplemental report if all the indenture agree- 
ment provisions have been satisfied but there is a lawsuit against the company that has 
resulted in disclosure of the lawsuit in a footnote to the financial statements? 


25-30 (Objective 25-8) Jones, CPA, has completed the audit of Sarack Lumber Supply Co. 
and has issued a standard unqualified report. In addition to a report on the overall financial 
statements, the company needs a special audited report on three specific accounts: sales, net 
fixed assets, and inventory valued at FIFO. The report is to be issued to Sarack’s lessor, who 
bases annual rentals on se three accounts. Jones was not aware of the need for the report 
on i: three go.P until after the overall audit was completed. 


Required a. E APAGOn€: 1 a ANGER the audit report on the three specific 


accounts without additional audit tests. 


b. What additional tests are likely to be needed before the report on the three specific 
accounts can be issued? 


c. Assuming that Jones is able to satisfy all the requirements needed to issue the report 
on the three specific accounts, write the report. Make any necessary assumptions. 


INTERNET PROBLEM 25-1: 


ACCOUNTING AND REVIEW SERVICES COMMITTEE 





The Accounting and Review Services Committee (ARSC) is responsible for issuing standards 
for compilations and reviews of financial statement issued by nonpublic companies. Visit the 
AICPA website (www.aicpa.org) and answer the following questions about the operations 
of this committee: 


Required a. How many individuals serve on the ARSC and how are they chosen to serve? 


b. What is the nature of the due process ARSC follows when developing and establishing 
new standards? 


c. How long must an exposure draft of a new standard (i.e., a new SSARS) be made 
available for public comment? 


d. How many affirmative votes are required before an exposure draft of a proposed or 
final SSARS can be issued? 


e. Are meetings of the ARSC open to the public? 
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INTERNAL AND 


GOVERNMENTAL LEARNING OBJECTIVES 
FINANCIAL AUDITING AND San 


you should be able to 
p E RAT NAL A D lT | N 26-1 Explain the role of internal 
auditors in financial auditing. 


26-2 Describe the auditing and 
reporting requirements under 








Good Auditing Often Government Auditing Standards 
Results In Improved Cash Flows ange nee ae 

a . . . : 26-3 Distinguish operational auditing 
Sandy Previtz is an experienced internal audit staff person with Erhardt from financial auditing. 
Freight Company (EFC), a long-haul trucking company. EFC has been growing 96:4. Provide an ovenreurol 
rapidly, adding customers and shipping agents daily. Daily volume now operational audits. 
exceeds several thousand shipments per day. To address the growing 26-5 Plan and perform an operational 
volume of freight bills and related receivables, EFC implemented a new audit. 
state-of-the-art computerized information system. \ ) 





Previtz was assigned to test the accuracy of the aging of the accounts 

receivable system and the adequacy of the allowance for el accounts. She took an initial sample of 300 freight 
bills selected at random from a PoPURisererO00 Mei catyits eae used the sample to project an aging 
and develop an estimate of the requir ance tor sii u nna Her tests indicated the allowance could be 
understated by as much as $1 million. 


Previtz informed Martha Harris, the head of internal audit, of the situation. Harris informed the chief financial officer that 
as long as the tests indicated there could be a material misstatement, EFC must expand the sample until it was clear 
whether the allowance was materially misstated. 


Previtz's second sample increased the total sample to 600 items, with essentially the same results. However, at Harris's 
request, she analyzed the items from both a management standpoint and an accounting standpoint. When Harris and 
Previtz met with the CFO to discuss the updated information, Harris pointed out that the real problem was not the 
allowance but that receivables were out of control, and EFC faced a significant loss in cash flows if management didn’t 
act quickly. The CFO quickly agreed and responded by hiring a team of temporary workers to analyze the aging of all 
20,000 freight bills and to institute a large-scale collection effort. Not only did the analysis and collection efforts improve 
cash flows, it also showed that Previtz’s estimate was right on target. 


he last chapter discussed types of assurance services that external auditors provide. This chapter examines the 

activities of internal auditors and government auditors, who perform a significant amount of financial auditing 
similar to that done by external CPA firms. As Sandy Previtz of Erhardt Freight Company demonstrates in the 
introductory story, internal auditors can have a significant impact on a company’s operational efficiency and 
effectiveness, as well as on earnings and cash flow. 

The concepts and methodologies studied in the preceding 25 chapters of this book apply to internal and 
governmental audits. We begin this chapter by examining the role of internal auditors in financial auditing. 


INTERNAL FINANCIAL AUDITING 


OBJECTIVE 26-1 





Explain the role of internal 
auditors in financial auditing. 





Institute of 
Internal Auditors 


As discussed in Chapter 1, companies employ their own internal auditors to do both 
financial and operational auditing. During the past two decades, the role of internal 
auditors has expanded dramatically, primarily because of the increased size and 
complexity of many corporations. Because internal auditors spend all of their time 
within one company, they have much greater knowledge about the company’s opera- 
tions and internal controls than external auditors. That kind of knowledge can be 
critical to effective corporate governance. The New York Stock Exchange requires its 
registrants to have an internal audit function, and many other public and private 
companies also have an internal audit function. 

The Institute of Internal Auditors professional practices framework provides the 
following definition of internal auditing: 


Internal auditing is an independent, objective assurance and consulting activity designed to add value 
and improve an organization's operations. It helps an organization accomplish its objectives by bringing 


a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, 
control, and governance processes. 








This definition reflects the changing role of internal auditors. They are expected to 
provide value to the organization through improved operational effectiveness, while 
also performing traditional responsibilities, such as: 


* Reviewing the reliability and integrity of information 
* Ensuring compliance with policies and regulations 
» Safeguarding assets 


The objectives of internal auditors are considerably broader than the objectives of 
external auditors, providing flexibility for internal auditors to meet their company’s 
needs. At one company, internal auditors may focus exclusively on documenting and 
testing controls for Sarbanes—Oxley Act Section 404 requirements. At another company, 
internal auditors may serve primarily as consultants, focusing on recommendations that 
improve organizational performance. Not only may internal auditors focus on different 
areas, but the extent of internal auditing may vary from one company to another. 
Internal audit reports are not standardized because the reporting needs vary for each 
company and the reports are not relied on by external users. 


Professional guidance for internal auditors is provided by the Institute of Internal 
Auditors (IIA), an organization similar to the AICPA that establishes ethical and practice 
standards, provides education, and encourages professionalism for its approximately 
170,000 worldwide members. The IIA has played a major role in the increasing influence 
of internal auditing. For example, the IA has established a highly regarded certification 
program resulting in the designation of Certified Internal Auditor (CIA) for those 
who meet specific testing and experience requirements. 

The IIA professional practice framework includes a code of ethics and IIA 
International Standards for the Professional Practice of Internal Auditing (known as 
the “Red Book”). All IA members and Certified Internal Auditors agree to follow the 
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finer Institute of Internal Auditors Ethical Principles and Code of Ethics 





Integrity 
Objectivity 


Confidentiality 


Competency 


1. Integrity 


2. Objectivity 


3. Confidentiality 


4. Competency 





ETHICAL PRINCIPLES 


RULES OF CONDUCT 


The integrity of internal auditors establishes trust and thus provides the basis for reliance on their judgment. 


Internal auditors exhibit the highest level of professional objectivity in gathering, evaluating, and communicating 
information about the activity or process being examined. Internal auditors make a balanced assessment of all the 
relevant circumstances and are not unduly influenced by their own interests or by others in forming judgments. 


Internal auditors respect the value and ownership of information they receive and do not disclose information 
without appropriate authority unless there is a legal or professional obligation to do so. 


Internal auditors apply the knowledge, skills, and experience needed in the performance of internal auditing 
services. 


Internal auditors: 

1.1. Shall perform their work with honesty, diligence, and responsibility. 

1.2. Shall observe the law and make disclosures expected by the law and the profession. 

1.3. Shall not knowingly be a party to any illegal activity or engage in acts that are discreditable to the profession 
of internal auditing or to the organization. 

1.4. Shall respect and contribute to the legitimate and ethical objectives of the organization. 


Internal auditors: 

2.1. Shall not participate in any activity or relationship that may impair or be presumed to impair their unbiased 
assessment. This participation includes those activities or relationships that may be in conflict with the 
interests of the organization. 

2.2. Shall not accept anything that may impair or be presumed to impair their professional judgment. 

2.3. Shall disclose all material facts known to them that, if not disclosed, may distort the reporting of activities 
under review. 


Internal auditors: 

3.1. Shall be prudent in the use and protection of information acquired in the course of their duties. 

3.2. Shall not use information for any personal gain or in any manner that would be contrary to the law or 
detrimental to the legitimate and ethical objectives of the organization. 


Internal auditors: 

4.1. Shall engage only in those services for which they have the necessary knowledge, skills, and experience. 

4.2. Shall perform internal auditing services in accordance with the International Standards for the Professional 
Practice of Internal Auditing. 

4.3. Shall continually improve their proficiency and the effectiveness and quality of their services. 








Institute’s Code of Ethics, which requires compliance with the Standards. Figure 26-1 
outlines the IIA Code of Ethics, which is based on the ethical principles of integrity, 
objectivity, confidentiality, and competency. 

As shown in Figure 26-2 (p. 818), the International Standards for the Professional 
Practice of Internal Auditing are divided into attribute standards for internal auditors 
and audit departments, and performance standards for the conduct and reporting of 
internal audit activities. 

The IIA created specific standards within each category. For example, Attribute 
Standard 1100 on Independence and Objectivity, includes individual standards to 
address organizational independence (1110), individual objectivity (1120), and impair- 
ments to independence and objectivity (1130). 

In addition, the IIA developed specific implementation standards for assurance and 
consulting engagements. For example, Implementation Standard 1110.A1 provides guid- 
ance for applying Attribute Standard 1110 on organizational independence for assurance 
engagements, stating that the internal audit activity should be free from interference in 
determining the scope of internal auditing, performing work, and communicating results. 

You may want to compare these standards to the AICPA generally accepted auditing 
standards, as detailed in Table 2-3 on page 35, to note similarities and differences. 
Statements on Internal Auditing Standards (SIASs) are issued by the Internal Auditing 
Standards Board to provide authoritative interpretations of the standards. 
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International Standards for the Professional Practice of Internal Auditing 





ATTRIBUTE STANDARDS 

1000 Purpose, Authority, and Responsibility. The purpose, authority, and responsibility of the internal audit activity must be 
formally defined in an independent audit charter, consistent with the Definition of Internal Auditing, the Code of Ethics, and 
the Standards. The chief audit executive must periodically review the internal audit charter and present it to senior 
management and the board for approval. 

1100 Independence and Objectivity. The internal audit activity must be independent, and internal auditors must be objective in 
performing their work. 

1200 Proficiency and Due Professional Care. Engagements must be performed with proficiency and due professional care. 

1300 Quality Assurance and Improvement Program. The chief audit executive must develop and maintain a quality assurance 
and improvement program that covers all aspects of the internal audit activity. 


PERFORMANCE STANDARDS 

2000 Managing the Internal Audit Activity. The chief audit executive must effectively manage the internal audit activity to 
ensure it adds value to the organization. 

2100 Nature of Work. The internal audit activity must evaluate and contribute to the improvement of risk management, control, 
and governance processes using a systematic and disciplined approach. 

2200 Engagement Planning. Internal auditors must develop and document a plan for each engagement including the 
engagement'’s objectives, scope, timing and resource allocations. 

2300 Performing the Engagement. Internal auditors must identify, analyze, evaluate, and document sufficient information to 
achieve the engagement’s objectives. 

2400 Communicating Results. Internal auditors must communicate the engagement results. 

2500 Monitoring Progress. The chief audit executive must establish and maintain a system to monitor the disposition of results 
communicated to management. 

2600 Management's Acceptance of Risks. When the chief audit executive believes that senior management has accepted a level 
of residual risk that may be unacceptable to the organization, the chief audit executive must discuss the matter with senior 
management. If the decision regarding residual risk is not resolved, the chief audit executive must report the matter to the 
board for resolution. 





o 





Source: From The International Standards for the Professional Practice of Auditing, Copyright © 2010 by The Institute of Internal Auditors, Inc. 247 Maitland Avenue, 
Altamonte Springs, FL 32701-4201. Reprinted with permission. 


Apago PDF Enhancer 


Relationship The responsibilities and conduct of audits by internal and external auditors differ in 
of Internal and one important way. Internal auditors are responsible to management and the board, 
External Auditors while external auditors are responsible to financial statement users who rely on the 


auditor to add credibility to financial statements. Nevertheless, internal and external 
auditors share many similarities: 
* Both must be competent as auditors and remain objective in performing their 
work and reporting their results. 
* Both follow a similar methodology in performing their audits, including planning 
and performing tests of controls and substantive tests. 
* Both consider risk and materiality in deciding the extent of their tests and evalu- 
ating results. However, their decisions about materiality and risks may differ 
because external users may have different needs than management or the board. 


External auditors rely on internal auditors when using the audit risk model to assess 
control risk. If internal auditors are effective, the external auditors can significantly 
reduce control risk and thereby reduce substantive testing. As a result, external auditors 
may reduce their fees substantially when the client has a highly regarded internal audit 
function. External auditors typically consider internal auditors effective if they are: 

* Independent of the operating units being evaluated 

* Competent and well trained 

* Have performed relevant audit tests of the internal controls and financial statements 


Auditing standards permit the external auditor to use the internal auditor for direct 
assistance on the audit. By relying on the internal audit staff for performing some of the 
audit testing, external auditors may be able to complete the audit in less time and at a 
lower fee. When internal auditors provide direct assistance, the external auditor should 
assess their competence and objectivity and supervise and evaluate their work. 
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FRAUD ___ The International Standards for the Professional 
Practice of Internal Auditing require internal 
GUIDANCE auditors to have sufficient knowledge to evaluate 
FOR INTERNAL __ the tisk of fraud and how that risk is managed by 
the organization. The Institute of Internal Auditors 
AUDITORS has released two pieces of guidance to help 


internal auditors address fraud risks. 

Internal Auditing and Fraud provides guidance 
on addressing fraud risks during internal audit 
engagements, including fraud awareness, risk 
assessment, and fraud investigation. Fraud 
Prevention and Detection in an Automated World 
focuses on IT-related fraud risks and how 
technology can help internal auditors and others 
in the organization address fraud risks. “A down 
economy produces conditions ripe for fraud” 
states Institute of Internal Auditors Director of 
Technology Practices Lily Bi. “It's important for 
organizations to have a strong fraud program that 
includes awareness, prevention, and detection 
programs, as well as a fraud risk assessment 
process to identify risks within the organization.” 


The IIA announced plans to partner with 
the Center on Audit Quality (CAQ), the Financial 
Executives International (FEI), and the National 
Association of Corporate Directors (NACD) to 
collaborate on developing long-term efforts to 
prevent and deter fraudulent financial reporting. 
Collectively, these organizations plan to leverage 
their experience and resources to advance the 
understanding of conditions that contribute to 
fraud, develop techniques to enhance the 
application of professional skepticism, moderate 
the risks of only focusing on short-term 
results, and leverage the role of technology in 
deterring and detecting fraudulent financial 
reporting. 


Sources: 1. “New Practice Guides Define Internal 
Auditors’ Role in Combating Fraud,” (December 3, 
2009) (www.theiia.org); 2. Press Release, “CAQ 
Releases Report on Deterring and Detecting 
Financial Reporting Fraud, Center on Audit Quality 
(October 6, 2010) (www.thecaq.org). 





GOVERNMENTAL FINANCIAL AUDITING 


OBJECTIVE 26-2 


Federal and state governments employ their own auditing staffs to perform audits in 
ago: BDF Enhancer states 
Government Accountability Office (GAO). All states have their own audit agencies, 
similar to but smaller than the GAO. In addition, CPA firms do considerable financial 
auditing of governmental units. For example, some states require that all city and 


much the same way as internal audi 


school district financial statements be audited by CPA firms. 


The primary source of authoritative literature for doing government audits is 





Describe the auditing and 
reporting requirements 
under Government Auditing 
Standards and the Single 
Audit Act. 





Government Auditing Standards, which is issued by the GAO. Because of the color of 
the cover, it is usually referred to as the “Yellow Book” rather than by its more formal 
name. The initial Yellow Book standards were similar to the GAAS standards but have 
been expanded in subsequent revisions to provide guidance standards for performance 
audits. These standards are often called generally accepted government auditing 
standards (GAGAS). 

Financial auditing under the Yellow Book includes several categories of informa- 
tion to audit, including financial statements of governmental units, government contracts 
and grants, internal control, fraud, and other noncompliance with laws and regulations. 
Because governmental units are as concerned with compliance with laws and 
regulations as they are with the reliability of financial statements, these categories of 
information are broader than audits under auditing standards and encompass the 
types of attestation work outlined in Table 25-1 on page 797. 


The financial auditing standards of the Yellow Book are consistent with the 10 generally 
accepted auditing standards of the AICPA, and also contain extensive additional guidance, 
including the following additions and modifications: 


* Materiality and significance. The Yellow Book recognizes that in government 
audits the thresholds of acceptable audit risk and materiality may be lower than 
in an audit of a commercial enterprise. This is because of the sensitivity of govern- 
ment activities and their public accountability. 


Financial Audit 
and Reporting 
Requirements — 
Yellow Book 
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Audit and Reporting 
Requirements — 

Single Audit Act and 
OMB Circular A-133 


CALIFORNIA CITY 
ROCKED BY 
PAY SCANDAL 


* Quality control. CPA firms and other organizations that audit government 
entities in compliance with the Yellow Book must have an appropriate system of 
internal quality control and participate in an external quality control review 
program. The latter requirement exists for some CPAs, but only as a require- 
ment for membership in the AICPA, and for the audit of public companies. 

Auditors involved in planning, performing, or reporting on audits under 
GAGAS must complete 80 hours of continuing professional education in each 
two-year period. At least 24 of these 80 hours of training must be in subjects 
related to the government environment and government auditing. 

* Compliance auditing. The audit should be designed to provide reasonable 
assurance of detecting material misstatements resulting from noncompliance 
with provisions of contracts or grant agreements that have a material and direct 
effect on the financial statements. 

* Reporting. The audit report must state that the audit was made in accordance 
with generally accepted government auditing standards (GAGAS). In addition, 
the report on financial statements must describe the scope of the auditors’ tests 
of compliance with laws and regulations and internal controls and present the 
results of those tests or refer to a separate report that includes the information. 


The Single Audit Act of 1984 provides for a single coordinated audit to meet the audit 
requirements of all federal agencies. Entities that receive more than $500,000 in federal 
funds are subject to a single audit even if more than one agency provided funds. The 
Single Audit Act applied only to audits of state and local governments, but it was ex- 
tended in 1990 to higher-education institutions and other not-for-profit organizations 
by the Office of Management and Budget (OMB) through the issuance of OMB 
Circular A-133, Audits of States, Local Governments, and Non-Profit Organizations. 


Audit Requirements The Single Audit Act as amended and OMB Circular A-133 
(here pPaga toP Dive nhanCewin requirements for the scope of the 


audit, including: 


* The audit should be in accordance with GAGAS. 

* The auditor must obtain an understanding of internal control over federal pro- 
grams sufficient to support a low assessed level of control risk for major programs. 

* The auditor should determine whether the client has complied with laws, 
regulations, and the provisions of contracts or grant agreements that may have a 
direct and material effect on each of its major programs. 


A-133 Compliance Supplement identifies 14 compliance requirements along with 
suggested audit procedures that should be considered in every audit. In addition, it lists 





Residents of Bell City were shocked to learn in totaling $70 million after state auditors questioned 
July 2010 that city officials in the California city of how the bonds were used. Proceeds from the 
40,000 residents were receiving salaries that were bond sale were placed into the general fund 
likely the largest in the nation. Robert Rizzo, the rather than in a separate account, and were 

city manager, received a salary of $787,637 and placed in a non-interest-bearing account, costing 
his total annual compensation with benefits the city significant amounts of interest income. 
exceeded $1.5 million. In contrast, the President 
of the United States receives an annual salary of 


$400,000 Sources: Adapted from 1. Jeff Gottlieb and Ruben 


: : Vives, “Bell City Manager Might Be Highest Paid in 
Rizzo, Mayor Oscar Hernandez, the assistant the Nation: $787,637 per year,” Los Angeles Times, 


city (ATTEN, and five city council members WET July 14, 2010 (latimesblogs.latimes.com); 2. Jeff 
arrested in September 2010 and charged with Gottlieb and Ruben Vives, “SEC Investigating $70 
misappropriation of public funds. The SEC also Million in Bonds Issued by Bell," Los Angeles Times, 
launched a probe in the sale of three city bonds October 15, 2010 (articles.latimes.com). 
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specific requirements for individual federal programs. The following are examples of 
specific compliance objectives: 


* Whether the amounts reported as expenditures were for allowable services. 

* Whether the records show that those who received services or benefits were 
eligible to receive them. 

* Whether matching requirements (where the government unit matches federal 
funds), levels of effort, and earmarking limitations were met. 


Reporting Requirements The following reports are required under OMB Circular 
A-133: 


» An opinion on whether the financial statements are in accordance with GAAP. 

» An opinion as to whether the schedule of federal awards is presented fairly in all 
material respects in relation to the financial statements as a whole. 

* Areport on internal control related to the financial statements and major programs. 

* A report on compliance with laws, regulations, and the provisions of contracts or 
grant agreements, where noncompliance could have a material effect on the finan- 
cial statements. This report can be combined with the report on internal control. 

* A schedule of findings and questioned costs. 


Auditors doing government auditing often find it complex. The auditor must be familiar 
with both GAAS and a series of government audit documents, laws, and regulations. 
Thus, the first step in preparing for such an engagement is extensive professional 
development. Sources of AICPA guidance include: 


* The audit guide Government Auditing Standards and Circular A-133 Audits 
* AU 801, Compliance Auditing Considerations in Audits of Governmental Entities 
and Recipients of Governmental Financial Assistance 


AICPA Guidance 
for Auditors 


OPERATIONAL AUDITING 


Beyond financial auditing activities, internal auditors, government auditors, and CPAs 
also do operational auditing, which deals with efficiency and effectiveness of an 
organization. Other auditors use the terms management auditing or performance 
auditing instead of operational auditing to refer to these activities, while others do not 
distinguish among the terms performance auditing, management auditing, and 
operational auditing and use them interchangeably. 

We prefer to use operational auditing broadly, as long as the purpose of the test is to 
determine the effectiveness or efficiency of any part of an organization. Testing the 
effectiveness of internal controls by an internal auditor may therefore be considered part 
of operational auditing—if the purpose is to help an organization operate its business 
more effectively or efficiently. Similarly, determining whether a company has adequately 
trained assembly line personnel may also be operational auditing, if the purpose is to 
determine whether the company is effectively and efficiently producing products. 


The three major differences between operational and financial auditing are the 
purpose of the audit, distribution of the report, and inclusion of nonfinancial areas in 
operational auditing. 


Purpose of the Audit This is the most important difference. Financial auditing 
emphasizes whether historical information was correctly recorded, while operational 
auditing emphasizes effectiveness and efficiency. Financial auditing is oriented to the 
past, while operational auditing focuses on improving future performance. An 
operational auditor, for example, may evaluate whether a type of new material is being 
purchased at the lowest cost to save money on future raw material purchases. 


Differences Between 
Operational and 
Financial Auditing 


OBJECTIVE 26-3 





Distinguish operational 
auditing from financial 
auditing. 
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Distribution of the Reports Financial auditing reports are typically distributed to 
external users of financial statements, such as stockholders and bankers, while 
operational audit reports are intended primarily for management. The widespread 
distribution of financial auditing reports requires a well-defined structure and 
wording, as shown in Figure 3-1 on page 47. The limited distribution of operational 
reports and the diverse nature of audits for efficiency and effectiveness allow opera- 
tional audit reports to vary considerably from audit to audit. 


Inclusion of Nonfinancial Areas Financial audits are limited to matters that directly 
affect the fairness of financial statement presentation, while operational audits cover 
any aspect of efficiency and effectiveness in an organization. For example, an opera- 
tional audit might address the effectiveness of an advertising program or efficiency of 
factory employees. 


Effectiveness Before an operational audit can be performed, auditors must define specific criteria for 

Versus Efficiency measuring effectiveness and efficiency. In general, effectiveness refers to meeting 
objectives, such as producing parts without defects. Efficiency refers to determining the 
resources used to achieve those objectives, such as determining whether parts are 
produced at minimum cost. 


OBJECTIVE 26-4 Effectiveness In an operational audit for effectiveness, an auditor, for example, might 
a eer need to assess whether a governmental agency has met its assigned objective of 
operational audits. achieving elevator safety in a city. To determine the agency’s effectiveness, the auditor 





must establish specific criteria for elevator safety. For example, is the agency’s objective 
to inspect all elevators in the city at least once a year? Is the objective to ensure that no 
fatalities occurred as a result of elevator breakdowns, or that no breakdowns occurred? 





Efficiency Like effectiveness, there must be defined criteria for what is meant by 
doing things more efficiently before operational auditing can be meaningful. It is often 
easier tefficienc ffegtivemess criteria if efficiency is defined as reducing cost 
Ab ade OpbR Enhander’ different production processes 
manufacture a product of identical quality, the process with the lower cost is 


considered more efficient. Operational auditing commonly uncovers several types of 
typical inefficiencies, including: 


Types of Inefficiency Example 

* Acquisition of goods and * Bids for purchases of materials are not 
services is excessively costly. required. 

* Raw materials are not available - An entire assembly line must be shut 
for production when needed. down because necessary materials were 

not ordered. 

* There is duplication of effort * Identical production records are kept 

by employees. by both the accounting and production 


departments because they are unaware 
of each other’s activities. 

» Work is done that serves no * Copies of vendors’ invoices and receiving 

purpose. reports are sent to the production 

department where they are filed without 
ever being used. 

» There are too many employees. * The office work could be done effectively 
with one less administrative assistant. 


Relationship Between = Management establishes internal controls to help meet its goals. As we discussed in 
Operational Auditing Chapter 10, three concerns are vital to establishing good internal controls: 
and Internal Controls 1. Reliability of financial reporting 

2. Efficiency and effectiveness of operations 

3. Compliance with applicable laws and regulations 
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Obviously, the second of these three client concerns directly relates to operational 
auditing, but the other two also affect efficiency and effectiveness. For example, 
management needs reliable cost accounting information to decide which products to 
continue producing and the billing price of products. Similarly, failure to comply with 
a law, such as the Sarbanes—Oxley Act, can result in a large fine to the company. 

Two things distinguish internal control evaluation and testing for financial and 
operational auditing: purpose and scope. 


Purpose The purpose of operational auditing of internal control is to evaluate effi- 
ciency and effectiveness and to make recommendations to management. In contrast, 
internal control evaluation for financial auditing has two primary purposes: to determine 
the extent of substantive audit testing required and, when applicable, to report on the 
effectiveness of internal control over financial reporting. 

For both financial and operational auditing, the auditors may evaluate the control 
procedures in the same way, but for different purposes. An operational auditor might 
test whether internal verification procedures for duplicate sales invoices are effective to 
ensure that the company does not offend customers, but also to collect all receivables. 
A financial auditor often does the same internal control tests, but the primary purpose is 
to reduce confirmation of accounts receivable or other substantive tests. (A secondary 
purpose of many financial audits is also to make operational recommendations to 
management.) 


Scope The scope of operational auditing concerns any control affecting efficiency or 
effectiveness, while the scope of internal control evaluation for financial audits is 
restricted to the effectiveness of internal control over financial reporting and its effect 
on the fair presentation of financial statements. For example, an operational audit can 
focus on policies and procedures established in the marketing department to deter- 
mine the effectiveness of catalogs in marketing products. 


Operational audits fall into three AP AI2 RF iRRRAASRE), and 


special assignments. In each case, part of the audit is likely to concern evaluating 
internal controls for efficiency and effectiveness. 


Functional Audits Functions are a means of categorizing the activities of a business, 
such as the billing function or production function. Functions may be categorized and 
subdivided many different ways. For example, the accounting function may be sub- 
divided into cash disbursement, cash receipt, and payroll disbursement functions. The 
payroll function may be subdivided into hiring, timekeeping, and payroll disbursement 
functions. A functional audit deals with one or more functions in an organization, 
concerning, for example, the efficiency and effectiveness of the payroll function for a 
division or for the company as a whole. 

A functional audit has the advantage of permitting specialization by auditors. 
Certain auditors within an internal audit staff can develop considerable expertise in 
an area, such as production engineering. They can be more efficient and effective by 
spending all their time auditing in that area. A disadvantage of functional auditing is 
the failure to evaluate interrelated functions. For example, the production engineering 
function interacts with manufacturing and other functions in an organization. 


Organizational Audits An operational audit of an organization deals with an entire 
organizational unit, such as a department, branch, or subsidiary. An organizational 
audit emphasizes how efficiently and effectively functions interact. The plan of organi- 
zation and the methods to coordinate activities are important in this type of audit. 


Special Assignments In operational auditing, special assignments arise at the 
request of management for a wide variety of audits, such as determining the cause of 
an ineffective IT system, investigating the possibility of fraud in a division, and making 
recommendations for reducing the cost of a manufactured product. 


Types of 
Operational Audits 
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Who Performs 
Operational Audits 


Operational audits are usually performed by one of three groups: internal auditors, 
government auditors, or CPA firms. 


Internal Auditors Internal auditors are in such a unique position to perform opera- 
tional audits that some people use the terms internal auditing and operational auditing 
interchangeably. It is, however, inappropriate to conclude that all operational auditing 
is done by internal auditors or that internal auditors do only operational auditing. 
Many internal audit departments do both operational and financial auditing, often 
simultaneously. Because they spend all their time working for the company they are 
auditing, internal auditors have an advantage in doing operational audits. They can 
develop considerable knowledge about the company and its business, which is essential 
to effective operational auditing. 

To maximize their effectiveness for both financial and operational auditing, the 
internal audit department should report to the board of directors or president. Internal 
auditors should also have access to and ongoing communications with the audit com- 
mittee of the board of directors. This organizational structure helps internal auditors 
remain independent. If internal auditors report to the controller, it is difficult for them 
to do independent evaluations and make recommendations to senior management 
about inefficiencies in the controller’s operations. 


Government Auditors Different federal and state government auditors perform 
operational auditing, often as a part of doing financial audits. As already discussed, the 
most widely recognized government auditor group is the GAO, but many state govern- 
ment auditors are also concerned with financial and operational audits. 

The Yellow Book defines and sets standards for performance audits, which are 
essentially the same as operational audits. Performance audits include the following: 


* Economy and efficiency audits. The purpose of an economy and efficiency audit 
is to determine: 
Apalgs" UP PD Py ish ey wa Hve'eiivs: and using its resources economically 
anfefficiently 
2. The causes of inefficiencies or uneconomical practices 
3. Whether the entity has complied with laws and regulations concerning 
matters of economy and efficiency 


* Program audits. The purpose of a program audit is to determine: 
1. The extent to which the desired results or benefits established by the legisla- 
ture or other authorizing body are being achieved 
2. The effectiveness of organizations, programs, activities, or functions 
3. Whether the entity has complied with laws and regulations applicable to the 
program 


The first two objectives of each of these types of performance audits are clearly opera- 
tional in nature, while the final objective concerns compliance. 

To illustrate specific operational activities of a state governmental audit, the 
following three examples are taken from an article in the publication Internal Auditor: 


* A separate hospital with its own administrative staff occupied three buildings 
on the grounds of another state hospital. Our audit showed that the limited 
workload of the administrative activities of this separate hospital and its 
proximity to the offices of the main hospital would permit consolidation of the 
administrative functions of the two hospitals at a savings of $145,000 a year. 

* A local school district exercised control over 29 individual facilities. Our audit 
showed that the unused classroom facilities amounted to about 28 percent or 
the equivalent of eight schools and that enrollment was continuing to decline. 
We recommended consolidating and closing of individual facilities to the extent 
possible. Such action would not only reduce costs but also provide greater flexi- 
bility in class sizes and course offerings. 
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* The outstanding accounts receivable at a teaching hospital increased from $7 
million to $11 million during a two-year period. An audit showed that this serious 
situation was caused, in part, by a lack of aggressive follow-up action, insufficient 
supervision, and insufficient staff to keep up with an increasing workload.! 


CPA Firms When a CPA firm does an audit of historical financial statements, part of 
the audit often consists of identifying operational problems and making recommen- 
dations that may benefit the audit client. The recommendations can be made orally, 
but they are typically included in a management letter. (For coverage of management 
letters, see pages 777-778 in Chapter 24.) 

The background knowledge about a client’s business, which an external auditor 
must obtain while doing an audit, often provides useful information for giving 
operational recommendations. For example, suppose that the auditor determined that 
inventory turnover for a client slowed considerably during the current year. The 
auditor should determine the cause of the slower turnover to evaluate the possibility of 
obsolete inventory that would misstate the financial statements. In determining the 
cause of the reduced inventory turnover, the auditor may identify operational causes, 
such as ineffective inventory acquisition policies, that can be brought to the attention 
of management. An auditor who has a broad business background and experience with 
similar businesses is more likely to be effective at providing clients with relevant 
operational recommendations than a person who lacks those qualities. 

Clients commonly engage a CPA firm to do operational auditing for one or more 
specific parts of its business. For example, a company can ask the CPA firm to evaluate 
the efficiency and effectiveness of its computer systems. Usually, management engages 
the CPA firm for these audits only when the company does not have an internal audit 
staff or if the internal audit staff lacks expertise in a certain area. In some cases, manage- 
ment or the board of directors outsources the entire internal audit function to a CPA 
firm or co-sources select internal audit ee: such as IT operational auditing 
activities, to be done jointly by a Apagead PDE mnEnhanicexpany S 
internal audit staff. In most cases, the CPA firm’s management consulting staff per- 
forms these services. Note that CPA firms cannot provide these services to their public 
company audit clients. 


The two most important qualities for an operational auditor are independence and 
competence. The auditor should report to the appropriate level of management to 
ensure that investigation and recommendations are made without bias. Indepen- 
dence is seldom a problem for CPA firm auditors because they are not employed by 
the company being audited. The independence of internal auditors is enhanced by 
having the internal audit department report to the board of directors or president. 
Similarly, government auditors should report to a level above the operating depart- 
ments. The GAO, for example, reports directly to Congress as a means of enhancing 
independence. 

The responsibilities of operational auditors can also affect their independence. The 
auditor should not be responsible for operating functions in a company or for correcting 
deficiencies when ineffective or inefficient operations are found. For example, it would 
negatively affect auditors’ independence when they audit an IT system for acquisitions 
if they designed the system or are responsible for correcting deficiencies they found 
during the audit. 

While it is acceptable for auditors to recommend changes in operations, operating 
personnel must have the authority to accept or reject those recommendations. If 
auditors had the authority to require implementation of their recommendations, their 
independence would be reduced. 


From Round Table, © 1982 by The Institute of Internal Auditors, Inc., 249 Maitland Avenue, Altamonte Springs, 
Fla. 32701. Reprinted with permission. 


Independence and 
Competence of 
Operational Auditors 
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Criteria for 
Evaluating Efficiency 
and Effectiveness 


OBJECTIVE 26-5 


Plan and perform an 
operational audit. 








Competence is, of course, necessary to determine the cause of operational problems 
and to make appropriate recommendations. When operational auditing deals with 
wide-ranging operating problems, however, competence can be a major obstacle. For 
example, imagine the difficulties of finding qualified internal auditors who can evaluate 
both the effectiveness of an advertising program and the efficiency of a production 
assembly process. The internal audit staff doing that type of operational auditing will 
presumably have to include some personnel with backgrounds in marketing and others 
in production. 


A major challenge of operational auditing is in selecting specific criteria for evaluating 
whether efficiency and effectiveness have occurred. In auditing historical financial 
statements, accounting standards provide the broad criteria for evaluating fair 
presentation, and audit objectives facilitate more specific criteria in deciding whether 
those standards have been followed. In operational auditing, there are no well-defined 
criteria. 

To establish criteria for operational auditing, auditors could define the objectives 
as determining whether some aspect of the entity could be made more effective or 
efficient, and recommending improvements. This approach may be adequate for 
experienced and well-trained auditors, but it provides little guidance for most auditors. 


Specific Criteria More specific criteria are usually desirable before starting an 
operational audit. For example, suppose that you are doing an operational audit of the 
equipment layout in plants for a company. Here are some specific criteria, stated as 
questions, that might be used to evaluate plant layouts: 


* Were all plant layouts approved by home office engineering at the time of 
original design? 

* Has home office engineering done a reevaluation study of plant layout in the 
ast 5 years? 
PAGQe PRE pp EARARGEED percent of capacity or more for at 

least 3 months each year? 

* Does layout facilitate the movement of new materials to the production floor? 

* Does layout facilitate the production of finished goods? 

* Does layout facilitate the movement of finished goods to distribution centers? 

* Does the plant layout effectively use existing equipment? 

* Is the safety of employees endangered by the plant layout? 


Sources of Criteria To develop specific evaluation criteria, the operational auditor 
can use several sources, including: 


* Historical performance. Criteria can be based on actual results from prior periods. 
By using these criteria, auditors can determine whether things have become 
“better” or “worse” in comparison. The advantage of this approach is that the 
criteria are easy to derive. However, they may not provide much insight into how 
well or poor the results are compared to what they could be. 

* Benchmarking. Entities within or outside the client’s organization may be 
sufficiently similar to the client’s organization to use their operating results as 
criteria. Auditors should use care in selecting organizations to use as benchmarks. 
It makes little sense to benchmark with dissimilar organizations or those that 
perform at a substandard level. For internal comparable entities, the data are 
often readily available to use as criteria. Outside organizations are often willing 
to make their operating information available. Also, benchmarking data are 
often available through industry groups and governmental regulatory agencies. 

* Engineered standards. It may be possible in some engagements to develop criteria 
based on engineered standards. For example, auditors can use time and motion 
studies to determine efficient production output rates. These criteria are often 
time-consuming and costly to develop because they require considerable expertise, 
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but in some cases it may be worth the cost. Standards can be developed by 
industry groups for use by all their members, thereby spreading the cost. 

* Discussion and agreement. Sometimes objective criteria are difficult or costly to 
obtain, and are best developed through discussion and agreement. The parties 
involved should include management of the entity to be audited, the opera- 
tional auditor, and the entity or persons to whom the findings will be reported. 


The three phases in an operational audit are planning, evidence accumulation and 
evaluation, and reporting and follow-up. 


Planning Planning for operational audits is similar to planning for audits of his- 
torical financial statements that we’ve discussed in earlier chapters. Like auditors of 
financial statements, the operational auditor must determine the scope of the engage- 
ment and communicate it to the organizational unit. It is also necessary to: 


» Staff the engagement properly 

* Obtain background information about the organizational unit 
* Understand internal control 

* Decide on the appropriate evidence to accumulate 


The major difference between planning an operational audit and a financial audit 
is the diversity created by the breadth of operational audits, which often makes it 
difficult to decide on specific objectives. Auditors select objectives based on the criteria 
developed for the engagement, depending on the specific circumstances at hand. For 
example, the objectives for an operational audit of the effectiveness of internal controls 
over payroll will be dramatically different from those of an operational audit of the 
efficiency of a research and development department. Yet, these diverse objectives 
might be part of a single operational audit. 

The breadth of operational audits often makes staffing more complicated than in a 
financial audit. Not only are the TAD. erge, suc duetiow c a adver- 
tising, but the objectives within th ac’ en Tequire ahah a ls. For 
example, the auditor may need an engineering background to evaluate performance on 
a major construction project. 

Finally, unlike financial audits, operational audits require auditors to spend more 
time with the interested parties agreeing on the terms of the engagement and the 
criteria for evaluation. Regardless of the source of the criteria for evaluation, it is 
essential that representatives of the entity to be audited, the operational auditor, and 
the entity or persons to whom the findings will be reported are clear and in agreement 
on the objectives and criteria involved. 


Evidence Accumulation and Evaluation The eight types of evidence introduced in 
Chapter 7 and discussed throughout this book are equally applicable to operational 
auditing. Because internal controls and operating procedures are a critical part of 
operational auditing, it is common to use documentation, client inquiry, analytical 
procedures, and observation extensively. Confirmation, reperformance, and recalcula- 
tion are used less extensively for most operational audits than for financial audits because 
the existence and accuracy objectives are not relevant for most operational audits. 

To illustrate evidence accumulation in operational auditing, reconsider the example 
of the agency evaluating the safety of elevators in a city. Assume the parties agree that 
the objective is to determine whether a competent inspector makes an annual inspec- 
tion of each elevator in the city. To satisfy the completeness objective, auditors might 
examine blueprints of city buildings and elevator locations and trace them to the 
agency’s list to ensure that all elevators are included in the population. Additional tests 
on newly constructed buildings will be appropriate to assess the timeliness with which 
the central listing is updated. 

Assuming auditors determine that the agency’s list is complete, they can select a 
sample of elevator locations and collect evidence as to the timing and frequency of 


Phases in 
Operational Auditing 
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Examples of 
Operational 
Audit Findings 


inspections. The auditor may want to consider inherent risk by doing greater sampling 
of older elevators or elevators with previous safety defects. The auditor may also want 
to examine evidence of the elevator inspectors’ competence by reviewing resumes, 
training programs, competency examinations, and performance reports. It is also likely 
that the auditor will want to reperform the inspection procedures for a sample of 
elevators to obtain evidence of inconsistencies in reported and actual conditions. 

Just like financial auditors, operational auditors must accumulate sufficient appro- 
priate evidence to provide a basis for a conclusion about the objectives being tested. For 
an audit of elevator safety, the auditor must accumulate sufficient evidence about 
elevator safety inspections. After the evidence is accumulated, the auditor must decide 
whether it is reasonable to conclude that an inspection is made annually of each 
elevator in the city by a competent inspector. 


Reporting and Follow-Up Two major differences in operational and financial 
auditing reports affect operational auditing reports: 


1. In operational audits, the report is usually sent only to management, with a 
copy to the unit being audited. The lack of third-party users reduces the need 
for standardized wording in operational auditing reports. 

2. The diversity of operational audits requires a tailoring of each report to address 
the scope of the audit, findings, and recommendations. 


Operational auditors often take a significant amount of time to clearly communi- 
cate audit findings and recommendations. On performance audits, when reports are 
being prepared following Yellow Book requirements, specified content must be 
included, but considerable freedom is permitted in the form of the report. Follow-up is 
common in operational auditing when auditors make recommendations to manage- 
ment to determine whether the recommended changes were made, and if not, why not. 


Each igsue of the Int J Auditor, agbimonthly publication of the IIA, includes several 
intern PAG BPR BORARGe Reticing internal auditors. Most of the 
findings deal with efficiency rather than effectiveness. Readers of the journal are more 
likely to find efficiency findings more interesting than those related to effectiveness. An 
operational audit resulting in savings of $68,000 will probably engage readers more than 
a report on improved accuracy of financial reporting. The following examples from the 
Internal Auditor include examples related to effectiveness and to efficiency: 


Outside Janitorial Firm Saves $160,000 
* An internal auditor reviewed the efficiency and effectiveness of the janitorial 
services furnished by state employees for the buildings in the state capitol 
complex. The audit disclosed the costs of the janitorial services were excessive 
when compared with similar services performed by outside janitorial firms. In 
addition, the auditors found many janitorial tasks were not completed as 
required, resulting in unacceptable quality. A study of alternative janitorial 
services indicated equal or better service could be provided by an outside 
janitorial firm and at a savings of $137,000 a year. The auditor recommended 
the state seek competitive bids and contract with the janitorial firm submitting 
the lowest bid that meets the specifications. The resultant contract actually 
saved more than $160,000, and the quality of the cleaning improved noticeably. 


Use the Right Tool 

» A company leased 25 heavy-duty trucks for use by service employees who 
installed and repaired about 20,000 vending machines in a large metropolitan 
area. All of the trucks were equipped with hydraulic lift-gates for loading and 

unloading vending machines. 
The internal auditor found that only a few of the trucks were actually delivering 
and picking up vending machines. Most of the trucks were used for service 
calls, which consisted of on-the-scene repair of the machines or other simple 
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adjustments not requiring the hydraulic lift-gates. The auditor recommended 
most of the heavy-duty trucks be phased out and replaced by conventional light 
vans. Management agreed and the savings in lease rates and operating expenses 
were estimated at $25,000 a year. 


Computer Programs Save Manual Labor 
* The federal Employee Retirement Income Security Act (ERISA) requires an 
annual audit of profit-sharing plans. Internal auditors tested the profit sharing 
plans as required by ERISA, but also performed an operational review, which 
provided a number of valuable recommendations to management. 

The IT auditors on the audit team developed several computer-assisted audit 
programs to test control over enrollment in and termination from the company’s 
profit-sharing plan. The computer assistance saved manual labor and detected 
several employees who were not eligible for the plan, such as employees with less 
than the required one year of service and terminated employees still on the plan. 
The computer portion of the audit program also detected conflicting data 
between the payroll and profit-sharing plan master files. 

When shown the results of the audit, management corrected all of the problems 
and instituted additional controls to prevent the problems in the future. And the 
additional controls were ... well, guess. Yep, they wanted the IT auditors to leave 
their computer programs in the machine. The profit-sharing plan manager uses 
the programs periodically as a control to detect enrollment errors.? 


SUMMARY 


This chapter discussed the financial auditing activities of internal auditors and the effect of 
internal auditors on external audits. We also discussed government auditors and the 
auditing and reporting requiremen AAG" PDR Enharce rns 
internal auditors and government auditdrs, as"well as CPA firms, are also asked to perform 
operational audits of the efficiency or effectiveness of a company or government unit. In 
these engagements, the appropriate criteria for evaluating efficiency or effectiveness is 
essential. 


ESSENTIAL TERMS 


Economy and efficiency audit—a govern- Government Auditing Standards (GAGAS)— 
ment audit to determine whether an entity see Yellow Book 

is acquiring, protecting, and using its Government audits—financial or opera- 
resources economically and efficiently; the tional audits of government agencies or 
causes of any inefficiencies or uneconomi- government-funded institutions 


cal practices; and whether the entity has 
complied with laws and regulations con- 
cerning matters of economy and efficiency 


International Standards for the Profes- 
sional Practice of Internal Auditing— 
guidelines issued by the Institute of 
Effectiveness—the degree to which the Internal Auditors covering the attributes 


organization’s objectives are accomplished 


Efficiency—the degree to which costs are 
reduced without reducing effectiveness 


Functional audit—an operational audit 
that deals with one or more specific 
functions within an organization, such as 
the payroll function or the production 
engineering function 


Ibid. 
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and performance of internal auditors 


Institute of Internal Auditors (IIA)— 
organization for internal auditors that 
establishes ethical and practice standards, 
provides education, and encourages pro- 
fessionalism for its members 


Operational auditing—the review of 
an organization for efficiency and 
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effectiveness. The terms management 
auditing, performance auditing, and opera- 
tional auditing are often synonymous terms 


Organizational audit—an operational 
audit that deals with an entire organiza- 
tional unit, such as a department, branch, 
or subsidiary, to determine how efficiently 
and effectively functions interact 


Program audit—a government audit to 
determine the extent to which the desired 
results or benefits established by the legis- 
lature or other authorizing body are being 
achieved; the effectiveness of organizations, 
programs, activities, or functions; and 
whether the entity has complied with laws 
and regulations applicable to the program 


Single Audit Act—federal legislation that 
provides for a single coordinated audit to 


satisfy the audit requirements of all federal 
funding agencies 


Special assignments—management requests 
for an operational audit for a specific pur- 
pose, such as investigating the possibility 
of fraud in a division or making recom- 
mendations for reducing the cost of a 
manufactured product 


Statements on Internal Auditing Standards 
(SIASs)—statements issued by the Internal 
Auditing Standards Board of the IA to 
provide authoritative interpretations of 
the ITA Practice Standards 


Yellow Book—a publication of the GAO 
that is widely used as a reference by 
government auditors and CPAs who do 
governmental audit work; the official title 
is Government Auditing Standards 


REVIEW QUESTIONS 


26-1 (Objective 26-1) Explain the role of internal auditors for financial auditing. How is it 
similar to and different from the role of external auditors? 


26-2 (Objective 26-1) What is the nature of the two categories of standards in the HA 
International Standards for the Professional Practice of Auditing? 


26-3 ‘Apag * Pd Me eet saters ween the independence of internal 
audit ne eeternalatditors i iStorical financial statements. How can 
internal auditors best achieve independence? 


26-4 (Objective 26-2) Explain how governmental financial auditing is similar to and 
different from audits of commercial companies. Who does governmental auditing? 


26-5 (Objective 26-2) Explain what is meant by the Single Audit Act. What is its purpose? 


26-6 (Objective 26-2) In what ways is the Yellow Book consistent with generally accepted 
auditing standards, and what are some additions and modifications? 


26-7 (Objective 26-2) Identify the primary specific objectives that must be incorporated 
into the design of audit tests under the Single Audit Act. 


26-8 (Objective 26-2) Identify the key required reports of the Single Audit Act and OMB 
Circular A-133. 


26-9 (Objective 26-3) Describe what is meant by an operational audit. 
26-10 (Objective 26-3) Identify the three major differences between financial and opera- 
tional auditing. 


26-11 (Objective 26-4) Distinguish between efficiency and effectiveness in operational 
audits. State one example of an operational audit explaining efficiency and another 
explaining effectiveness. 


26-12 (Objective 26-4) Distinguish among the following types of operational audits: 
functional, organizational, and special assignment. State an example of each for a not-for- 
profit hospital. 


26-13 (Objective 26-4) Explain why many people think of internal auditors as the primary 
group responsible for conducting operational audits. 


26-14 (Objective 26-4) Explain the role of government auditors in operational auditing. 
How is this similar to and different from the role of internal auditors? 
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26-15 (Objective 26-4) Under what circumstances are external auditors likely to be 
involved in operational auditing? Give one example of operational auditing by a CPA firm. 


26-16 (Objective 26-5) Explain what is meant by the criteria for evaluating efficiency and 
effectiveness. Provide five possible specific criteria for evaluating effectiveness of an IT system 
for payroll. 


26-17 (Objective 26-5) Identify the three phases of an operational audit. 


26-18 (Objective 26-5) Explain how planning for operational auditing is similar to and 
different from financial auditing. 


26-19 (Objective 26-5) What are the major differences between reporting for operational 
and financial auditing? 


MULTIPLE CHOICE QUESTIONS 





FROM CPA, CIA, AND CMA EXAMINATIONS 


26-20 (Objectives 26-1, 26-4) The following questions deal with independence of auditors. 
Choose the best response. 


a. The operational auditor’s independence is most likely to be compromised when the 
internal audit department is responsible directly to the 
(1) vice president of finance. (4) executive vice president. 
(2) president. (5) audit committee of the board of directors. 
(3) controller. 


b. The independence of the internal audit department will most likely be assured if it 
reports to the 


(1) president. (4) audit committee of the board of directors. 
(2) controller. (5) vice president of finance. 
(3) treasurer. Apago BOF Enhancer 


c. You have been asked to assess the organizational independence of an internal audit 

activity. You should consider all of the following factors except 

(1) functional reporting to the board and administrative reporting to the chief 
executive officer. 

(2) the criteria of education and experience considered necessary when filling vacant 
positions on the internal audit staff. 

(3) the degree to which internal auditors assume operational responsibilities. 

(4) a limitation on the scope of objectives for the engagements included in the review. 


26-21 (Objective 26-2) The following questions deal with governmental auditing. Choose 
the best response. 


a. A governmental audit may extend beyond an examination leading to the expression of 
an opinion on the fairness of financial statement presentation to include 





Program Economy 
Results Compliance and Efficiency 
(1) Yes Yes No 
(2) Yes Yes Yes 
(3) No Yes Yes 
(4) Yes No Yes 


b. When engaged to audit a governmental entity in accordance with Government Auditing 
Standards, an auditor prepares a written report on internal control 
(1) on all audits, regardless of circumstances. 
(2) only when the auditor has noted material weaknesses. 

(3) only when requested by the governmental entity being audited. 

(4) only when requested by the federal government funding agency. 


Chapter 26 / INTERNAL AND GOVERNMENTAL FINANCIAL AUDITING AND OPERATIONAL AUDITING 831 


832 


c. Ward is auditing an entity’s compliance with requirements governing a major federal 


financial assistance program in accordance with the Single Audit Act. Ward detected 
noncompliance with requirements that have a material effect on the program. Ward’s 
report on compliance should express 

(1) no assurance on the compliance tests. 

(2) reasonable assurance on the compliance tests. 

(3) a qualified or adverse opinion. 

(4) an adverse opinion or a disclaimer of opinion. 


26-22 (Objectives 26-3, 26-4, 26-5) The following questions deal with operational auditing. 
Choose the best response. 


a. Which of the following best describes the operational audit? 


(1) It requires constant review by internal auditors of the administrative controls as 
they relate to the operations of the company. 

(2) It concentrates on implementing financial and accounting controls in a newly 
organized company. 

(3) It attempts and is designed to verify the fair presentation of a company’s results of 
operations. 

(4) It concentrates on seeking aspects of operations in which waste would be reduced 
by the introduction of controls. 


. The evaluation of audit field work of an operating unit should answer the following 


questions: 

1. What are the reasons for the results? 
2. How can performance be improved? 
3. What results are being achieved? 


What is the chronological order in which these questions should be answered? 


(iy 3=—1— 
1—3—2 
pago PDF Enhancer 
(4) 1-33 
(5) 2—3—1 


. The purpose of governmental effectiveness or program auditing is to determine if the 


desired results of a program are being achieved. The first step in conducting such an 
audit is to 

(1) evaluate the system used to measure results. 

(2) determine the time frame to be audited. 

(3) collect quantifiable data on the program’s success or failure. 

(4) identify the legislative intent of the program being audited. 


26-23 (Objectives 26-1, 26-4, 26-5) The following questions deal with internal auditing. 
Choose the best response. 


a. Which of the following is generally considered to be a major reason for establishing an 


internal auditing function? 

(1) To relieve overburdened management of the responsibility for establishing effec- 
tive systems of internal control. 

(2) To ensure that operating activities comply with the policies, plans, and procedures 
established by management. 

(3) To ensure the accuracy, reliability, and timeliness of financial and operating data 
used in management’s decision making. 

(4) To evaluate and improve the effectiveness of control processes. 


b. The scope of an internal auditing engagement is initially defined by the 


(1) engagement objectives. 

(2) scheduling and time estimates. 
(3) preliminary survey. 

(4) engagement work program. 
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c. With regard to corrective action on audit results, which of the following is not the 
internal auditor’s responsibility? 
(1) Soliciting auditees’ suggestions for corrective actions. 
(2) Recommending possible alternative corrective actions. 
(3) Directing the corrective actions. 
(4) Determining that the corrective actions are responsive to the audit results. 
(5) Evaluating new policy statements to determine whether they address the unsatis- 
factory conditions disclosed in the audit results. 


Sat Ne at Sr 


26-24 (Objectives 26-1, 26-4) Lajod Company has an internal audit department consisting 
of a manager and three staff auditors. The manager of internal audits, in turn, reports to 
the corporate controller. Copies of audit reports are routinely sent to the audit committee 
of the board of directors as well as to the corporate controller and the individual respon- 
sible for the area or activity being audited. 

The manager of internal audits is aware that the external auditors have relied on the 
internal audit function to a substantial degree in the past. However, in recent months, the 
external auditors have suggested there may be a problem related to the objectivity of the 
internal audit function. This objectivity problem may result in more extensive testing and 
analysis by the external auditors. 

The external auditors are concerned about the amount of nonaudit work performed by 
the internal audit department. The percentage of nonaudit work performed by the internal 
auditors in recent years has increased to about 25% of their total hours worked. A sample 
of five recent nonaudit activities are as follows: 


1. One of the internal auditors assisted in the preparation of policy statements on 
internal control. These statements included_such things as policies regarding 
sensitive payments and standrAPaAga foktA Rial ancer 

2. The bank statements of the corporation are reconciled each month as a regular 
assignment for one of the internal auditors. The corporate controller believes this 
strengthens internal controls because the internal auditor is not involved in the 
receipt and disbursement of cash. 

3. The internal auditors are asked to review the budget data in every area each year for 
relevance and reasonableness before the budget is approved. In addition, an internal 
auditor examines the variances each month, along with the associated explanations. 
These variance analyses are prepared by the corporate controller’s staff after consul- 
tation with the individuals involved. 

4. One of the internal auditors has recently been involved in the design, installation, 
and initial operation of a new computer system. The auditor was primarily con- 
cerned with the design and implementation of internal accounting controls and the 
computer application controls for the new system. The auditor also conducted the 
testing of the controls during the test runs. 

5. The internal auditors are often asked to make accounting entries for complex trans- 
actions before the transactions are recorded. The employees in the accounting 
department are not adequately trained to handle such transactions. In addition, this 
serves as a means of maintaining internal control over complex transactions. The 
manager of internal audits has always made an effort to remain independent of the 
corporate controller’s office and believes that the internal auditors are objective and 
independent in their audit and nonaudit activities. 


a. Define objectivity as it relates to the internal audit function. 


b. For each of the five situations outlined, explain whether the objectivity of Lajod 
Company’s internal audit department has been materially impaired. Consider each 
situation independently. 


c. The manager of audits reports to the corporate controller. 
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(1) Does this reporting relationship result in a problem of objectivity? Explain your 
answer. 

(2) Would your answer to any of the five situations in requirement b have changed if 
the manager of internal audits reported to the audit committee of the board of 
directors? Explain your answer.* 


26-25 (Objectives 26-1, 26-4, 26-5) Weston Corporation has an internal audit department 
operating out of the corporate headquarters. Various types of audit assignments are 
performed by the department for the eight divisions of the company. The following 
findings resulted from recent audits of Weston Corporation’s White Division: 


1. 


3. 


One of the departments in the division appeared to have an excessive turnover rate. 
Upon investigation, the personnel department seemed to be unable to find enough 
workers with the specified skills for this department. Some workers are trained on 
the job. The departmental supervisor is held accountable for labor efficiency 
variances but does not have qualified staff or sufficient time to train the workers 
properly. The supervisor holds individual workers responsible for meeting pre- 
determined standards from the day they report to work. This has resulted in a rapid 
turnover of workers who are trainable but not yet able to meet standards. 
. The internal audit department recently participated in a computer feasibility study 
for this division. It advised and concurred on the purchase and installation of a 
specific computer system. Although the system is up and operating, the results are 
less than desirable. The software and hardware meet the specifications of the feasi- 
bility study, but there are several functions unique to this division that the system 
has been unable to accomplish. Linking of files has been a problem. For example, 
several vendors have been paid for materials not meeting company specifications. A 
revision of the existing software is probably not possible, and a permanent solution 
probably requires replacing the existing computer system with a new one. 
One of the products manufactured by this division was recently redesigned to 
iminate a 3p} Bo t.. This Ger was discovered after several users were 
Apa ga. nhan GFrdnits because none of the injured parties 
has identified a defect in the product : a cause of the injury. There is insufficient 
information to determine whether the defect was a contributing factor. 


The director of internal auditing and assistant controller is in charge of the internal 
audit department and reports to the controller in corporate headquarters. Copies of inter- 
nal audit reports are sent routinely to Weston’s board of directors. 


a. 


Explain the additional steps in terms of field work, preparation of recommenda- 
tions, and operating management review that ordinarily should be taken by Weston 
Corporation’s internal auditors as a consequence of the audit findings in the first 
situation (excessive turnover). 


. Discuss whether there are any objectivity problems with Weston Corporation’s 


internal audit department as revealed by the audit findings. Include in your discussion 
any recommendations to eliminate or reduce an objectivity problem, if one exists. 


. The internal audit department is part of the corporate controllership function, and 


copies of the internal audit reports are sent to the board of directors. 

(1) Evaluate the appropriateness of the location of the internal audit department 
within Weston’s organizational structure. 

(2) Discuss who within Weston should receive the reports of the internal audit 
department.* 


26-26 (Objectives 26-4, 26-5) Haskin Company was founded 40 years ago and now has 
several manufacturing plants in the Northeast and Midwest. The evaluation of proposed 
capital expenditures became increasingly difficult for management as the company became 
geographically dispersed and diversified its product line. Thus, the Capital Budgeting Group 
was organized in 2010 to review all capital expenditure proposals in excess of $100,000. 


*CMA adapted. 
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The Capital Budgeting Group conducts its annual planning and budget meeting each 
September for the upcoming calendar year. The group establishes a minimum return for 
investments (hurdle rate) and estimates a target level of capital expenditures for the next 
year based on the expected available funds. The group then reviews the capital expenditure 
proposals that have been submitted by the various operating segments. Proposals that meet 
either the return on investment criterion or a critical need criterion are approved to the 
extent of available funds. 

The Capital Budgeting Group also meets monthly, as necessary, to consider any projects 
of a critical nature that were not expected or requested in the annual budget review. These 
monthly meetings allow the Capital Budgeting Group to make adjustments during the year 
as new developments occur. 

Haskin’s profits have been decreasing slightly for the past 2 years despite a small but 
steady sales growth, a sales growth that is expected to continue through 2012. As a result of 
the profit stagnation, top management is emphasizing cost control and all aspects of 
Haskin’s operations are being reviewed for cost reduction opportunities. 

Haskin’s internal audit department has become involved in the companywide cost 
reduction effort. The department has already identified several areas where cost reductions 
could be realized and has made recommendations to implement the necessary procedures 
to effect the cost savings. Tom Watson, internal audit director, is now focusing on the 
activities of the Capital Budgeting Group in an attempt to determine the efficiency and 
effectiveness of the capital budgeting process. 

In an attempt to gain a better understanding of the capital budgeting process, Watson 
decided to examine the history of one capital project in detail. A capital expenditure proposal 
of Haskin’s Burlington Plant that was approved by the Capital Budgeting Group in 2011 
was selected randomly from a population of all proposals approved by the group at its 2010 
and 2011 annual planning and budget meetings. 

The Burlington proposal consisted of a request for five new machines to replace equip- 
ment that was 20 years old and for which preventive maintenance had become expensive. 
Four of the machines were for replace sess ‘er | rowth 
in demand. Each of the four rela @o"“PDF.'E eT tots ai 
maintenance cost savings of $20,000. The fifth machine was exactly like the other four and 
was expected to generate an annual contribution of $30,000 through increased output. 
Each machine had a cost of $110,000 and an estimated useful life of 8 years. 


a. Identify and discuss the issues that Haskin Company’s internal audit department must Required 
address in its examination and evaluation of Burlington Plant’s 2011 capital expendi- 
ture project. 


b. Recommend procedures to be used by Haskin’s internal audit department in the audit 
review of Burlington Plant’s 2011 capital expenditure project.* 


26-27 (Objectives 26-4, 26-5) Lecimore Company has a centralized purchasing department 
that is managed by Joan Jones. Jones has established policies and procedures to guide the 
clerical staff and purchasing agents in the day-to-day operation of the department. She is 
satisfied that these policies and procedures are in conformity with company objectives and 
believes there are no major problems in the regular operations of the purchasing department. 

Lecimore’s internal audit department was assigned to perform an operational audit of 
the purchasing function. Their first task was to review the specific policies and procedures 
established by Jones. The policies and procedures are as follows: 


» All significant purchases are made on a competitive bid basis. The probability of timely 
delivery, reliability of vendor, and so forth, are taken into consideration on a subjective 
basis. 

* Detailed specifications of the minimum acceptable quality for all goods purchased are 
provided to vendors. 

* Vendors’ adherence to the quality specifications is the responsibility of the materials 
manager of the inventory control department and not the purchasing department. The 


*CMA adapted. 
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materials manager inspects the goods as they arrive to be sure that the quality meets the 
minimum standards and then sees that the goods are transferred from the receiving 
dock to the storeroom. 

» All purchase requests are prepared by the materials manager based on the production 
schedule for a 4-month period. 


The internal audit staff then observed the operations of the purchasing function and 

gathered the following findings: 

* One vendor provides 90% of a critical raw material. This vendor has a good delivery 
record and is reliable. Furthermore, this vendor has been the low bidder over the past 
few years. 

* As production plans change, rush and expedite orders are made by production directly 
to the purchasing department. Materials ordered for cancelled production runs are 
stored for future use. The costs of these special requests are borne by the purchasing 
department. Jones considers the additional costs associated with these special requests 
as “costs of being a good member of the corporate team.” 

* Materials to accomplish engineering changes are ordered by the purchasing depart- 
ment as soon as the changes are made by the engineering department. Jones is proud of 
the quick response by the purchasing staff to product changes. Materials on hand are 
not reviewed before any orders are placed. 

* Partial shipments and advance shipments (that is, those received before the requested 
date of delivery) are accepted by the materials manager, who notifies the purchasing 
department of the receipt. The purchasing department is responsible for follow-up on 
partial shipments. No action is taken to discourage advance shipments. 


Based on the purchasing department's policies and procedures and the findings of Lecimore’s 
internal audit staff, 
a. Identify deficiencies and/or inefficiencies in Lecimore Company’s purchasing function. 
b. Make recommendations for those deficiencies/inefficiencies that you identify.* 
Use pages PDE Bahance tase: 


Deficiencies/Inefficiencies Recommendations 





1 1. 


26-28 (Objectives 26-4, 26-5) Superior Co. manufactures automobile parts for sale to the 
major U.S. automakers. Superior’s internal audit staff is to review the internal controls over 
machinery and equipment and make recommendations for improvements when appro- 
priate. The internal auditors obtained the following information during the assignment: 

* Requests for purchase of machinery and equipment are normally initiated by the 
supervisor in need of the asset. The supervisor discusses the proposed acquisition with 
the plant manager. A purchase requisition is submitted to the purchasing department 
when the plant manager is satisfied that the request is reasonable and that there is a 
remaining balance in the plant’s share of the total corporate budget for capital acquisitions. 
Upon receiving a purchase requisition for machinery or equipment, the purchasing 
department manager looks through the records for an appropriate supplier. A formal 
purchase order is then completed and mailed. When the machine or equipment is 
received, it is immediately sent to the user department for installation. This allows the 
economic benefits from the acquisition to be realized at the earliest possible date. 

The property, plant, and equipment ledger control accounts are supported by 
computerized depreciation lapse schedules organized by year of acquisition. These 
lapse schedules are used to compute depreciation as a unit for all assets of a given type 
that are acquired in the same year. Standard rates, depreciation methods, and salvage 
values are used for each major type of fixed assets. These rates, methods, and salvage 
values were set 10 years ago during the company’s initial year of operation. 

* When machinery or equipment is retired, the plant manager notifies the accounting 

department so that the appropriate entries can be made in the accounting records. 


*CMA adapted. 
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* There has been no reconciliation since the company began operations between the 
accounting records and the machinery and equipment on hand. 


Identify the internal control deficiencies and recommend improvements that the internal Required 
audit staff of Superior Co. should include in its report regarding the internal controls over 
fixed assets. Use the following format in preparing your answer:* 


Deficiencies Recommendations 





1. 1. 


INTERNET PROBLEM 26-1: INSTITUTE OF INTERNAL AUDITORS 


The Institute of Internal Auditors (IIA) is an international professional association of more 
than 170,000 members with global headquarters in Altamonte Springs, Florida. Throughout 
the world, The IIA is recognized as the internal audit profession’s leader in certification, 
education, research, and technical guidance. Visit the I[A’s website (www.theiia.org) to 
answer questions about the IIA and certification of internal auditors. 


a. Why should an organization have an internal auditing department? (Hint: open Required 
“frequently asked questions” under the “About the Internal Audit Profession” link.) 


b. What are the six steps to receiving a certification in internal auditing? 
c. What certifications are available to internal auditors? 


d. What are the four parts of the CIA exam? How are the requirements for passing the 
CIA exam similar to and different from the CPA exam? 


Apago PDF Enhancer 


*CMA adapted. 
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ACL is generalized audit software used by auditors to extract and analyze data on 
client’s computerized systems. Generalized audit software is discussed on pages 385-386 
of the text. 

The ACL Problems included in selected chapters (Chapters 7, 8, 11, 12, 14, 16 and 
17) are intended to provide you with an introduction to ACL. An in-depth study of its 
use is beyond the scope of most first auditing courses. The guidance provided in this 
Appendix is intended only to help you solve the problems in the text. 


The software should be installed on your personal computer. For any other installation, 
see your instructor. 


1. Insert the CD in the CD holder on your computer. 

2. On the opening screen, select “Install” and select the “ACL 9 Educational Edition.” 
Proceed through the prompts to completion. You may be prompted to install 
additional MSXML or other components if they are not already installed on 
your computer. 


* You must accept th cay eee to complete the installation 
Apaga..POR..knhancer 
* Exit after the installation is complete 


An icon to open the ACL Education Edition should be on your desktop after installa- 
tion. If it does not appear, then go to Windows Start and select “Programs” to then 
locate the ACL Desktop Education Edition link. Select the “ACL Desktop Education 
Edition” to launch the software. 


The main screen Welcome to ACL should appear when you open ACL. Look at that 
screen now. 

On that screen, you will see a header “ACL Projects.” Click on the link for “Open an 
existing project.” You will then see a list of four projects. The ACL assignments in the 
text use only two of these projects: ACL_Demo and Sample_Project. Both of these 
projects have several files, which ACL calls tables. You will first click on a project to 
identify the tables, which will appear in the left side of your screen window once you 
click on the project folder. (Note: When you open ACL again, any projects you have 
accessed will appear under “Recent Projects” and can be accessed using those links.) 


Note: From now on, when you see italics it means you should use your computer to 
follow an instruction. The arrow sign (>) indicates an additional action to be taken. 
Click Sample_Project to open the tables under Sample_Project > Click the plus sign 


next to the yellow tables folder > Click the plus sign next to the yellow accounts payable 
subfolder. 


Observe that there are now two blue lined boxes under the accounts payable subfolder. 
Each of those represents a table. 


Double click AP_Trans and observe that a typical ACL table labeled AP_Trans for 
accounts payable transactions opens. On the bottom row of that screen, the 


number of records in the table is listed (102). The table includes columns with 
titles and data in each column. That is the information that auditors verify using 
various commands. 


Click the top of the Invoice Amount column on the table (make sure the column is now 
all dark > Go to the Windows drop down options at the top of the screen and select 
“Analyze” (on the Menu bar) > Under “Analyze”; select “Total Fields” (on the drop 
down list). 


The amount shown on the screen should be 278,641.33. You just used an ACL command 
(Total Fields) to calculate the total of the invoice amounts in the table. That sure beats 
using an adding machine or reentering the data in Excel. (Note: Commands can be 
accessed through the Menu bar or using the icons at the top of the screen. In this text 
we use the Menu bar.) 


Click the small x below the large X at the top right hand side of your screen to close 
that window and return to the AP_Trans table. 


> Click the small x below the large X to close the AP_Trans table. This will return you 
to the “Welcome to ACL” screen; “Sample Project” will be open on the left side of 
the screen. 

> Click the large X to exit ACL. 


You will use the remainder of this material to help you answer the assigned questions in 
the text. The first three functions (Quick Sort, Filters, and Computed Fields) are not con- 
sidered ACL commands. The remaining functions included here are all ACL commands. 
You will use these commands in ACL homework problems that are included in selected 
chapters. The descriptions below provide a brief overview of the functions that will be used 
to complete those problems. Within each ACL homework problem in the text, you will see 
the commands needed to answer the problem listed within parentheses in that problem. 


Quick Sort Used to sort data in vAbagS: Spe BH HYAS Bepressa. 
oftthe 


1. Click on the column heading you want to sort. 

2. Right click using your mouse to find the > Quick Sort Ascending or Quick Sort 
Descending (you can right click Quick Sort Off to undo the sort). 

Filters Used to ask questions of data in a table without adding a new field. 

1. Click the Edit View Filter button |%x| in an open table to enter the Edit view filter 
window. 

2. Use the Expression box to build an expression. 

3. The Expression box is where you build filters using the available fields in the current 
table, as well as the operators (=, < >, AND, etc.). There are three components to 
a filter: (1) field, (2) operator and (3) a numeric value, character value, or date. 

4. In the Available Fields portion of the window, double-click the name of the field 
for which you are building a filter. Notice that the field name is inserted in the 
Expression box. 

5. Use the operator buttons (=, +, <, >, etc.) and the numeric keypad on the key- 
board to build the filter. Note: If you are performing a recalculation to determine 
if the original calculation already in the data table is correct, use <> as the 
operator with no spaces between the less than and greater than signs. 

6. Enter an appropriate string or value after the operator. Use the following guidelines: 
Numeric values—enter as a number with no commas or dollar signs. For 
example, to enter $1,000, type 1000. 

Character values—enclose with one or two quotations. For example, to 
enter department D10, type “D10” or ‘D10”. Use the same case as is used in the 
data field. 

Dates—click on the Date button located just below the mathematical opera- 
tors to open the Date Selector box. Click the drop-down arrow to enter the 
monthly calendar box. Select the date, then click OK. 
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11. 


12. 


For more complex filters, use the AND, OR, or NOT operators and repeat the 
preceding process for each portion of the filter. After selecting an AND, OR or 
NOT, it is necessary to repeat all three components [(1) field, (2) operator 
and (3) a numeric value, character value, or date] of the filter. 

An example of an expression to select all invoices from the AP _Trans table 
dated after October 1, 2000 greater than $1000 is as follows: 


Invoice_Date > ‘20001001’ AND Invoice_Amount > 1000 


Click OK to complete the filter. 

If you want to change the filter, click [se] again to return to the Edit view filter 
window. Make changes in the filter and click OK. 

You can also apply additional commands to a filtered table until you remove 
the filter. 

Click the Remove Filter button |%| after you have completed all additional tests on 
the filtered table to return to the unfiltered table. 


Computed Fields Used to ask questions of data in a table by adding a new field. The 
new field is derived from calculations using other fields in the table. 


1. 
2. 
3. 


5. 


Click Edit > Table Layout to open the Layout Options window. 

Select the “Edit Fields/Expressions” tab folder on the top row of the Layout window. 
Click the Add a New Expression button |§], which is the third button down on the 
left side of the window under the “Edit Fields/Expressions” tab. (You may need to 
expand the window to see the [§j.) 

Add a name for the computed field in the Name box that describes the new 
column. Also add a column title in the Alternative Column Title box, which will 
appear in the Table after you complete the new field. 

Click the Expression button [fgq], which is located to the right of the Name box to 
open the 5 RDF box, 


6 a oe ee RDFin Bnhance yz the same way as for filters. 


: 


9. 


After building the expression, click OK to return to the original tables window. 
Click the Accept Entry button [¥ on the top left of the screen to save the new 
computed field. 

The new field can be added to the table view by completing the following steps: 
Close the Edit Fields/Expressions window if it is still open. 

Return to the data table which contains all the data for the file you are examining. 
Place the cursor in the column heading to the right of where you want the new 
computed field to appear in the table view. 

Right Click and then Click Add Columns from the drop-down menu. 
Double-click on the name of the new computed field you just created. 

Click OK. The new computed field now appears in the table view. 


Age Command. Used to accumulate data in a table by age, usually for accounts receivable. 


1. 
2 


3. 


4. 


5. 


Click Analyze —- Age to open the Age window. 

Use the Age On drop-down arrow to select the date field you want to run the Age 
command on. 

In the Subtotal Fields portion of the command dialog, click on the name of the 
numeric field you want to list for each aging interval. 

Enter a date in the Cutoff Date box using the calendar. This date is used to cal- 
culate the aging. It is typically the client’s year-end date. 

Click OK to run the Age command. 


Classify Command Used to count and aggregate the number and percentage of 
records for each value of a character field and to subtotal the numeric fields for the field. 


1. 
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Click any cell in the column for the document number or any other character field 
you want summarized (Do not click the column heading). 


2. Click Analyze > Classify, then select the field you want to classify on. Next click 
on the quantity field in the Subtotal Field that you want summarized. 
3... Click OK, 


Count Command Used to count records in a table that you have filtered. (For a table 
that has not been filtered, the record count is indicated at the bottom of the open 
table.) After a filter is applied to a table, observe that there is now a ?/ in the lower left 
corner that replaces the original count. 


1. Click Analyze > Count Records. 
2. Click OK. The new count replaces ?/ in the lower left corner. 


Duplicates Command Used to detect duplicates in the sequence of numbers in a 
table, usually document numbers. 


1. Click on the column heading for the document numbers you want to test for 
duplicates. 

2. Click Analyze > Look for Duplicates. 

3. The result is a list of duplicates if any exist. When prompted click on OK and 
type any output file name such as “Duplicates” (you can change the radio button 
from “file” to “screen” under the output tab if you want to see the output on 
your screen and not save it to a file). 


Gaps Command Used to detect gaps in the sequence of numbers in a table, usually 
document numbers. 


1. Click on the column heading for the document numbers you want to test for gaps. 
2. Click Analyze > Look for Gaps. The result is a table of gaps if any exist. 


Statistics Command Used to identify characteristics in client data files to better 
understand the data being audited. 


1. Click Analyze > Statistical istics to Steal stigs wi 
2. Select the numeric or date ie ant 10 DE CEnhatGer on 
the line(s) containing the field name(s). Use the Shift or Control key to select more 


than one field. 
3. Click OK to run the command. 


Stratify Command. Used to accumulate stratification of numeric information in a field. 


1. Select the field on which you intend to stratify. Use Quick Sort to identify large 
and small population items you want to exclude from the stratification. 

2. Click Analyze > Stratify to open the Stratify window. 

3. Use the Stratify On drop-down arrow to choose the name of the field you want to 
stratify. 

4. Enter the minimum and maximum values in the minimum and maximum boxes 
with no dollars or commas. 

5. Click OK to run the Stratify command. 


Summarize Command Used to count records and accumulate numeric amounts 
for a character or date field. 


1. Click Analyze > Summarize to open the Summarize window. 
In the Summarize On portion of the window, click on the field you want to 
summarize on. For example, in the AP-Trans table in Sample-Project, if you 
want the total amount of all invoices for each vendor, you would summarize 
on vendor number. Once you click on the desired field, click “OK”. 

3. In the Subtotal Fields portion of the window, click on the name of the numeric field 
you want to accumulate for each summary category (for example, invoice amount). 

4. When prompted, click OK and type any name for the file you are summarizing 
such as “Customers”. 

5. Click OK for a new table. 
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Total Command Used to total one or more data fields for a table. 


1. 
2. 


Click on the column heading for the column you want to total. 
Click Analyze > Total Fields to obtain a total. 


Sampling Command Used to perform sampling for transactions or balances. 


To determine sample size: 


1. 
2s 


Click Sampling > Select Sample Size from the menu bar. 
Select the Monetary radio button to determine an MUS sample size; select the 


Record radio button to determine a sample size for records. 


3. Input the sampling parameters and select Calculate. The sample size and sampling 


interval will appear below the calculate bar. 


To select a sample: 


1. 
2 


Click Sampling > Sample Records. 

Select the Record radio button to sample records. Select the fixed interval or random 

radio button. 

* For random selection, input the sample size and indicate the output file name 
(you can also indicate a random seed number, but it is not required). 

* For fixed interval selection, indicate the size of the sampling interval and output 
file name (you can also indicate a random seed number, but it is not required). 


Select the MUS radio button to select an MUS sample. Also indicate the monetary 
amount field to be sample from. Select the fixed interval or random radio button. 
For random selection, input the sample size and population size and indicate 
the output file name (you can also indicate a random seed number, but it is not 
required). 

* For fixed interval selection, indicate the size of the sampling interval and output 


aApkgs" PDE obo hh caer erepn seed number, but it is not required). 


Note: The evaluation of sample errors is not illustrated. 





NOTE: 
ESSENTIAL TERMS APPEAR IN BOLDFACE 


A 


Absence of causal connection, 121 
Acceptable audit risk, 211 
assessment of, 263-265 
Acceptable risk 
of assessing control risk too low, 491-492, 
561 
of incorrect acceptance, 561—562, 577, 583 
of incorrect rejection, 583 
specification of ARIA and ARIR, 584 
Accounting 
comprehensive basis of, 804-805 
by CPA firms, 26-27 
defined, 6 
distinguish between auditing and, 6 
principles 
departure from, 53 
shopping for, 89-90 
Accounting system, walkthroughs of, 307 
Accounts payable 
fraud risks, 355-356 
master file, 605 
tests of details of balances, 612-620 
Accounts receivable 
client business risks affecting, 417 
confirmation of, 532-538 
designing tests of details of balances for, 
520-532 
fraud risks, 351-354 
lapping of, 463 
master file, 446 
tests of details of balances audit program for, 
421 (table) 
trial balance, 446 
uncollectible, 447 
Accrued interest, notes payable and, 
716-718 (figure) 
Accrued liabilities, audit of, 645 
Accrued payroll expenses, 670-672 
Accumulated depreciation, ending balance 
verification, 641 
Accuracy 
accounts receivable, 527-528 
as balance-related audit objective, 160 
as transaction-related audit objective, 157 
Acquisition and payment cycle 
accounts and classes of transactions in, 602-603 
audit of 
accrued liabilities, 644-645 
income and expense accounts, 646-649 
prepaid expenses, 641-644 
property, plant, and equipment, 634-641 
business functions in, 603-606 
misappropriations in, 356 
other account types in, 634 
tests of controls and substantive tests of 
transactions, 606-612 
tests of details of balances, 612-620 
Acquisitions journal, 605 


Adjusting entries, 191-192 
Adjustments to revenues, manipulation of, 
352-353 
Adverse opinion, 56, 316 
Advertising and solicitation (Rule 502), 100 
Agreed-upon procedures engagement, 799, 
803-804 
Allocation 
of expenditures, tests for, 648-649 
of preliminary judgment about materiality, 
254-256 
Alternative procedures, 536 
American Institute of Certified Public 
Accountants (AICPA), 31-32, 821 
Analysis of differences, 537 
Analysis of exceptions, 498 (figure) 
Analytical procedures 
for accounts payable, 614 
for accounts receivable, 523-524 
as audit evidence, 183 
in audit plan development, 407-408 
common financial ratios, 230-233 
in design of audit program, 416 
five types of, 226-230 


for inventory and warehousing, 689 

for manufacturing equipment, 636 (table) 

for notes payable, 714-715 

in payroll and personnel cycle, 669 

performed during engagement phases, 

223-226 

in phase III of audit process, 425 

preliminary, 222-223 

relationship to substantive tests, 407-408 

signaling of revenue frauds by, 353 
Application controls 

Automated controls, 378 

input controls, 378-379 

output controls, 379-380 

processing controls, 379 
Application service providers (ASPs), 388 
Appropriateness 

of evidence, 176-177 

of types of evidence, 178-187 
Assertions. See Management Assertions 
Assessment inquiry, 357 
Asset account, ending balance verification, 641 
Asset custody, separation from other functions, 607 
Assets 

and costs, transfer of, 687-688 

fixed, and fraud risk, 356 

misappropriation of, 145-146, 336-337 

and records, physical control over, 300 
Assurance engagements, limited, 804-806 
Assurance services, 8—12 

attestation services, 9-10 

green initiatives, 11 

on IT, 10-11 

nonassurance services, 12 
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Attestation engagements, 796-799 

Attestation services, 9-10 

Attorneys, clients’, inquiry of, 762-764 

Attributes 
and exception conditions, 487-488 
sampling, 502-507, 612 

AU 161, 36 

AU 311, 112 

AU 316, 337 

AU 326, 156 

AU 330, 182, 741 

AU 622, 804 

AU 623, 805 

AU 801, 821 

Audit 
in acquisition and payment cycle, 602-603, 

634 
of capital stock and paid-in capital, 720-722 
changing overall conduct of, 350 
communicate with audit committee and 
management, 776-778 

cycle approach to segmenting of, 148-151 
documentation. See Documentation 
evaluate results, 771-775 


ip j ificalty ud yey 349-3 evidence. See Evidence 
Ap age. POF: Enhance r fee payment by management, 90 


final evidence accumulation, 767-771 
of financial statements, 142 
of historical financial statements, 9 
in inventory and warehousing cycle, 686-689 
review for 
contingent liabilities and commitments, 
759-764 
subsequent events, 766-767 
sampling. See Sampling 
scope limitation, 55 
subsequent discovery of facts, 778-779 
types of, 12-15 
Audit assurance, 262 
Audit committee, 88—89 
communicate with, 497-498, 776-778 
communications and management letters, 312 
oversight, 349 
participation in control environment, 
295-296 
Audit failure, 115 
Audit file contents and organization, 
190 (figure) 
Auditing 
around the computer, 382 
defined, 4 
distinguish between accounting and, 6 
economic demand for, 6-8 
governmental financial, 819-821 
internal financial, 816-819 
in IT environments, 382—386 
nature of, 4-6 
operational, 821-829 
profession, response to legal liability, 130 
through the computer, 383 


843 


Audit objectives, 142 
balance-related, 158-160 
meeting, 161-163 
presentation and disclosure-related, 161 
setting, 152-153 
transaction-related, 156-158 
Auditors 
decision process for audit reports, 62-65 
defenses against 
client suits, 120-121 
third-party suits, 123 
direct knowledge of, 177 
discovery of material misstatements, 
144-147 
evaluation of management’s integrity, 265 
external, 818 
independent, 5 
internal, 16, 824 
legal liability, sources of, 118-130 
listening techniques, 358 
operational, 824-825 
opinion of, and supporting evidence, 772-773 
reports involving other auditors, 53-54 
responsibilities related to internal control, 
292-293 
restricted scope, 59-60 
types of, 15-16 
utilization of monetary unit sampling, 
577-578 
Audit plan development 
evidence mix, 413-414 
IT impact on audit testing, 412-413 
selection of tests to perform, 409-412 
types of tests, 404-409 
Audit planning 
assess client business risk, 220-222 
audit risk model for, 259 
initial, 211 
key parts of, 224 (figure) 
perform preliminary analytical procedures, 
222-223 
understand client’s business and industry, 
215-220 
Audit procedures 
to address fraud risks, 350 
design and performance format, 458 
evidence decisions and, 175 
for finding contingencies, 760-761 
performance of, 493-494, 564 
terms used in, 187 (table) 
Audit process 
and financial statement cycles, 148-152 
IT effect on, 380-386 
phases of, 161-163 
summary of, 424-428 
Audit program 
defined, 176 
design of, 414-423 
evidence decisions and, 174 
tests of details development, 538-541 
Audit report 
auditor’s decision process for, 62-65 
combined report on financial statements 
and internal control, 49-51 
conditions requiring departure, 59-62 
defined, 5 
issuance of, 163, 247 
materiality, 56-59 
preparation of, 5-6 
report on internal control over financial 
reporting, 302-307 
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standard unqualified, 46—49 
unqualified 
departures from, 55-56 
with explanatory paragraph or modified 
wording, 51-54 
Audit risk 
acceptable, 211 
assessing, 263-265 
audit failure vs., 115-116 
model, 259, 405 (figure) 
for segments, 269-270 
Audit sampling, 478 
Audit strategy, 213-215 
Audit tests 
analytical procedures. 
See Analytical procedures 
detailed, reduction of, 183 
integration of, 697-699 
IT effect on testing, 412-413 
objectives of, 486 
for petty cash, 747 
of prepaid insurance, 641-644 
procedures to obtain understanding of 
internal control, 303-305 
selection of which types to perform, 
409-412 
for subsequent events review, 764-767 
substantive tests of transactions. See 
Substantive tests of transactions 
tests of controls. See Tests of controls 
tests of details of balances. See Tests of details 
of balances 
for uncollectible accounts, 463—464 
Authorization 
proper, 665 
of sales, 450 


Cc 


Capital acquisition and repayment cycle 
accounts in, 712—713 
notes payable, 713-716 
owners’ equity, 716-723 
Capital stock 
audit of, 720-722 
certificate record, 719 
Cash accounts 
fraud-oriented procedures, 742-746 
general, audit of, 735-742 
imprest payroll, 746-747 
imprest petty cash fund, 734, 747 
types of, 734-735 
Cash disbursements 
processing and recording of, 605-606 
subsequent, 616 
Cash equivalents, 735 
Cash flow, lack of statement of, 62 
Cash in the bank, and transaction cycles, 732-733 
Cash receipts 
cutoff, 529-530 
designing tests of controls and substantive 
tests of transactions for, 459-463 
processing and recording of, 446-447 
Certified Public Accountants. See CPAs 
Chart of accounts, 300 
Civil liability under federal securities laws, 
123-127 
Classification 
acquisitions, 610 
as balance-related audit objective, 159 
prepaid insurance-related expense, 644 
of recorded sales, 456-457 
as transaction-related audit objective, 157 
Client business risk 
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rchases, 606-607 accounts payable, 612-613 


of transactions and activities, 299 


Backup and contingency planning, 377 
Bad debt 
expense, 531—532 
provision for, 447 
Balance-related audit objectives, 153, 158-160, 
416-417, 616 (table), 637 (table), 
695 (table), 718 (table), 739 (table) 
accounts receivable, 521 
Bank confirmation 
receipt, 737-740 
standard form, 738 
Bank reconciliation, 738 (figure) 
tests of, 743 
Batch input controls, 379 (table) 
Behavioral cues during inquiry, 358 
Bills not paid after year-end, 616-617 
Blank confirmation form, 533 
Block sample selection, 481 
Board of directors, participation in control 
environment, 295-296 
Bonuses, accrued, 671 
Bookkeeping services 
by CPA firms, 27 
Rule 101 and, 94—95 
Branch bank account, 734 
Budgets, 228 
Business failure, 115 
Business risk, client. See Client business risk 


accounts receivable, 417, 521 
cash, 735-736 
payroll, 668 
assessment of, 220-222 
management of, 296 
and nature of the business, 266 
Clients 
acceptance of, 211-212 
attorneys of, inquiry of, 762-764 
and CPA firms, litigation between, 93 
data comparisons of, as analytical procedures, 
226-227 
inquiries of, 184 
liability to, 118-121 
personnel, inquiries of, 305 
rights to 
accounts receivable, 532 
all insurance policies, 643 
Client’s business and industry, understanding of, 
183, 215-220 
Client’s internal control 
effectiveness of, 177 
understanding of, 35-36 
Code of Professional Conduct, 32, 84—87 
Collusion, 291 
Combined report on financial statements and 
internal control over financial reporting, 
49-51 
Commissions 
accrued, 670-671 
Rule 503 and, 100-101 
Commitments, 760 
Committee of Sponsoring Organizations of the 


Treadway Commission. See COSO 
Comparability, explanatory paragraph for, 
51-54 
Compensating control, 310 
Competence 
commitment to, 295 
of operational auditor, 825-826 
Compilation services, 793-794 
Completeness 
as balance-related audit objective, 159 
existing acquisitions and, 610 
management assertions about, 154 
as transaction-related audit objective, 156-157 
Completing the audit checklist, 772 
Compliance audit, 14 
Computed upper exception rate, 484—485 
Computer-assisted audit programs, 829 
Computer-generated random numbers, 482-483 
Confidence limits, calculation of, 586-587 (table) 
Confidential client information, 96—98 
Confidentiality 
of audit files, 189 
Rule 301 and, 96-98 
Confirmation 
of accounts receivable, 532-538 
as audit evidence, 180-182 
bank, 737-741 
of code of conduct compliance, 347-348 
Consistency, explanatory paragraph for, 51-52 
Consulting services, Rule 101 and, 94 
Contingent fees (Rule 302), 98-99 
Contingent liabilities, review for, 759-764 
Contract labor, 672 
Contributory negligence, 120 
Control activities 
adequate documents and records, 299-300 
adequate separation of duties, 298-299 
independent checks on performance, 300-301 
physical control over assets and records, 300 
proper authorization of transactions, 299 
Control deficiency, 308-310 
Control environment, 295-297 
control activities, 298-301 
information and communication, 301 
monitoring, 301-302 
risk assessment, 297-298 
Control risk, 262 
assessing too low, 491-492 
assessment of, 307-312, 319, 320 (figure), 497, 
614, 669, 736-737 
effect of 
general controls, 380-381 
IT controls, 381 
matrix, 308-310, 309 (figure), 460 (figure) 
planned 
acquisitions, 608-610 
sales, 448-450 
for sales and collection cycle, 418, 522 
Corporate governance oversight, to reduce fraud 
risks, 345-349 
Corporate minutes, 219 
Corporations 
general, of CPA firms, 29 
professional, 29 
publicly held and closely held, 716-717 
COSO 
components of internal control, 294-302 
Internal Control-Integrated Framework, 291 
Internal Control Over Financial Reporting 
for Smaller Public Companies, 304 
Cost 


of audit test types, 409-410 
of evidence types, 185-186 
persuasiveness and, 179 
Cost accounting 
audit of, 686 
controls, 687 
records, 685 
Cost systems, in inventory and warehousing 
cycle, 683 
Covered members, Rule 101 and, 90-91 
CPA firms, 15 
activities of, 27-28 
and client, litigation between, 93 
ethical conduct by, 82-84 
professional conduct in, 40 (figure) 
quality control, 37-39 
size categories, 26-27 
structure of, 28-29 
CPAs 
assurance services provided by, 8-12 
legal liability, 117-118 
professional conduct by, 84-87 
protection from, 130-131 
requirements to becoming, 17 
Credit Alliance v. Arthur Andersen & Co., 122 
Credit approval, 444 
Credit memo, 447 
Criminal liability, 127-130 
for accountants, 127-128 
Criteria 
established, information and, 4 
for evaluating efficiency and effectiveness, 
826-827 
Current files 
adjusting and reclassification entries, 191-192 
supporting schedules, 192-194 


Curre™ft year 
acquisitions and disposals, verifying, 638-639 
balance, comparison with preceding year’s, 227 
Customer 
billing, and recording of sales, 444-445 
business risk for, 6 
order processing, 444 
Cutoff 
for accounts receivable, 528-530 
bank statement, 741 
tests, 159, 617 
Cycle approach, 148-151 


Database management systems, 387-388 
Data comparisons, client, 226-227 
Debit memo, 604 
Debt compliance letters, 806 
Decisions 
audit evidence, 175-176, 186 
auditors’ 
in observation of inventory, 691-692 
regarding audit reports, 62-65 
materiality, 56-59 
Deficiencies in control 
identification of, 310-311 
letter regarding, 318 (figure) 
Depreciation expense, verifying, 640-641 
Design format audit program, 458 
Detail tie-in, 159 
Difference estimation, 581, 584-585 
Digital signatures, 388 
Direct-effect illegal acts, 146 


Direct financial interest, 91 
Direct projection estimate of misstatement, 258 
Directed sample selection, 480-481 
Direct financial interest, 91 
Disclaimer of opinion, 56, 316-317 
Discovery of facts, subsequent, 778-779 
Discreditable acts (Rule 501), 99 
Dividends, audit of, 722 
Documentary discrepancies, 354 
Documentation. See also Evidence; Information 
adequate, 499-501 
audit, 188-196 
as audit evidence, 182-183, 188 
audit, review of, 774 
of fraud assessment, 345 
of understanding of internal control, 303-305 
Documents and records 
acquisition and payment cycle, 603-606 
adequate, 299-300, 450 
examination of, 305, 313 
inventory and warehousing cycle, 682-684 
payroll and personnel cycle, 660-663 
sales and collection cycle, 443-447 
Dual-dated audit report, 767 
Dual dating, 767 
Due professional care, as GAAS, 35 


Earnings management, 336 
Earnings, retained, 722-723 
E-commerce and IT systems issues, 388 
Economy and efficiency audit, 824 
Effectiveness, 822 

audit committee, 295-296 

criteria for evaluating, 826-827 
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operating, of controls, 292 

of operations, 290 
Efficiency, 822 
Embedded audit module approach, 385-386 
Emphasis of a matter, 53 
Employees, appropriate, hiring and promoting, 347 
Employment relationships, conflicts arising 

from, 89 

Encryption techniques, 388 
Enforcement of rules of conduct, 103 
Engagement letter, 213-214 
Engagement risk, 263 
Engagement 

attestation, 796-799 

initial vs. repeat, 266 

staff selection for, 215 
Enron, 209 
Enterprise resource planning (ERP) systems, 387 
Enterprise risk management, 221 
Equipment-related accounts, 635-656 
Error, 145 
Errors vs. fraud, 145 
Estimated population exception rate, 492 
Ethical conduct 

elements of, 347 (table) 

need for, 82-84 
Ethical dilemmas, 79-82 
Ethical rulings, 86 
Ethical values, as subcomponent of control 

environment, 295 

Ethics 

code of, 219, 817 (figure) 

principles of, 78 (figure), 85 

and reducing fraud risks, 346-348 
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and unethical behavior, 78—79 
Evaluating audit results, 771-775 
Evidence. See also Documentation; Information 

accumulation 

and evaluation of, 4—5, 827-828 
final, 767-771 

appropriateness of, 176-177 

decisions regarding, 175-176 

differing, among cycles, 260 (table) 

vs. legal and scientific evidence, 174 

persuasiveness of, 176-179 

from prior year’s audit, 314 

relationship to risk, 268-274 

reliability of, 618-619 

revising risk and, 273-274 

sufficient appropriate, 772 

sufficient appropriate (as GAAS), 36 

terms related to, 423-424 

types of, 179-187 

audit tests involving, 404—409 
Evidence mix, 413-414 
Evidence-planning worksheet, 499 (figure) 
Examination, 798 
Exception rate 

defined, 484 

population, 576-577 

estimated, 492 

sampling for, 484-485 

tolerable, 489-490 
Exchange transactions, complex, 7 
Existence 

as balance-related audit objective, 158 

management assertions about, 153-156 

occurrence as transaction-related audit 

objective, 156 
Expected results, and client data comparisons, 230 
Expense account 

analysis, 648 

tests of details of balances for, 671, 648 
Explanatory paragraph, of unqualified audit 

report, 51-54 
External document, 182 


F 


Family members, Rule 101 and, 92 
Fees 
audit, payment by management, 90 
contingent (Rule 302), 98 
referral (Rule 503), 100-101 
unpaid, 94 
Fictitious revenues, 351—352 
Final evidence accumulation, 767—77 1 
Financial interests, Rule 101 and, 90-91 
Financial ratios, common, 230-233 
Financial reporting 
fraudulent, 336 
internal control over, 9-10 
reliability of, 290, 292-293 
risk assessment for, 297-298 
Financial statement audit, 14-15 
Financial statements 
auditable, 307 
audit of historical, 9 
cycles of, 148-152 
disclosure checklist, 773-774 
disclosures, 773-774 
historical, 9-10 
information accompanying, 769-771 
preparation, GAAP departure, 55, 59-62 
prospective, 801-803 
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standard unqualified audit report on, 46-49 
Finished goods, storage and shipping of, 683-684 
Firewall, 388 
Fixed asset master file, 635 
Flowchart 

of internal control, 605 

of sales and cash receipts, 449 (figure) 
Follow-up on nonresponses, 536-537 
Forecasts, 802 
Foreign Corrupt Practices Act of 1977, 127 
Forensic accounting, 14 
Foreseeable users, 122 
Foreseen users, 122 
Former practitioners, Rule 101 and, 91 
Forms, S, K, and Q, 30 
Fraud 

conditions for, 337-341 

error vs., 145 

and general cash account audit, 742-746 

material, 145 

occurrence rates for, 348 (figure) 

risk factors, 337—339 

suspected, 356-360 

types of, 336-337 
Fraud risk 

assessment of, 341-345 

organizational factors contributing to, 

348 (figure) 
reduction by corporate governance oversight, 
345-349 

responding to, 349-351 

specific areas of, 351-356 
Fraud triangle, 337-338 
Full disclosure, compilation with, 793-794 
Functional audit, 823 
Further audit PDE 404 


G 


General authorization, 299 
General cash account 
audit of, 735-742 
defined, 734 
General controls 
administration of IT function, 374-375 
backup and contingency planning, 377 
effect on control risk, 380-381 
hardware controls, 378 
physical and online security, 377 
separation of IT duties, 375-377 
systems development, 377 
Generalized audit software, 384—385, 386 (table) 
Generally accepted accounting principles 
(GAAP), 4 
comparison with attestation standards, 
797 (table) 
lack of consistent application of, 51-52 
Generally accepted auditing standards (GAAS) 
defined, 34 
general standards, 34-35 
standards of field work, 35-36 
Going concern 
entity’s ability to continue as, 183 
substantial doubt about, 52-53 
Government accountability office auditor, 15-16 
Government Auditing Standards (GAGAS), 
819-821. See also Yellow Book 
Government auditors, 824—825 
Government audits, 819 
Governmental financial auditing, 819-821 
Guidelines, for materiality, 253 (figure) 


Haphazard sample selection, 481-482 

Hardware controls, 378 

Hierarchy of CPA firm, 29 

Hochfelder v. Ernst & Ernst, 126 

Horizontal analysis, 344 

Human resource records, 661 

Human resources, policies and practices, 
296-297 


Illegal acts, 146 
Imprest payroll account, 663, 734, 746-747 
Imprest petty cash fund, 734 

audit of, 747 
Income and expense accounts, audit of, 

646-649 

Income smoothing, 336 
Independence 

in fact and in appearance, 87 

in mental attitude (as GAAS), 35 

of operational auditor, 825-826 

of provider, evidence and, 177 

rule of conduct (Rule 101), 90-95 

and Sarbanes—Oxley Act, 88-89 
Independent auditors, 5 
Independent checks, 300-301, 665 
Independent registrar, 720 
Independent review 

in completion of audit, 774-775 

of transactions, 607-608 
Indirect-effect illegal acts, 147 
Indirect financial interest, 91 
Information. See also Documentation; Evidence 


DF Enhance L about fraud risks, sources of, 342-344 


accompanying basic financial statements, 
773-774 
and communication, 301 
confidential client, Rule 301 and, 96-98 
and established criteria, 4 
interim financial, review of, 795-796 
Informational inquiry, 357 
Informational schedule, 194 
Information risk, 6 
causes of, 7 
reduction of, 7-8 
Information technology (IT) 
effect on 
audit process, 380-386 
audit testing, 412-413 
enhancement of internal control, 372 
internal controls specific to, 374-380 
risk assessment of, 372-374 
separation from user departments, 298-299 
Inherent limitations, 291 
Inherent risk, 211, 261-262, 273 
for accounts receivable, 418 
assessing, 266-268, 613-614 
Initial audit planning, 211-215 
Initial sample size, 492-493, 563 
Input controls, 378-379 
Inquiry 
of client, 184 
of client’s attorneys, 762-764 
interrogative, 357 
of management, regarding fraud, 342-343 
Institute of Internal Auditors (IIA), 816-818 
Insurance, prepaid, 641-644 
Insurance register, 642 


Integrity 
Rule 102 and, 95-96 
as subcomponent of control environment, 295 
Interbank transfers, tests of, 744-746 
Interest rate, risk-free, 6 
Internal auditors, 16, 818—819, 824 
Internal comparisons and relationships, 228 (table) 
Internal control. See also Tests of controls 
client’s. See Client’s internal control 
components of, 303 (table) 
COSO components of, 294-302 
IT enhancement of, 372 
management and auditor responsibilities for, 
291-294 
for nonpublic companies, 317-319 
objectives of, 290 
over account balances, 464 
over financial reporting, 9-10, 49-51 
over petty cash, 747 
owner’s equity, 717-720 
for prepaid insurance, 642 
procedures to obtain an understanding of, 404 
reevaluation of, 537-538 
relationship to operational auditing, 822-823 
Section 404 reporting on, 315-317 
specific to IT, 374-380 
understanding of 
in acquisition and payment cycle, 606 
obtaining and documenting, 302-307 
in payroll and personnel cycle, 664-665 
summary of, 320 (figure) 
Internal control over financial reporting, 9-10 
Internal document, 182 
Internal financial auditing, 816-819 
Internal revenue agents, 16 
International Standards on Auditing (ISAs), 32-34 
Interrogative inquiry, 357 
Inventory 
compilation tests, 685-686 
fraud risks, 354-355 
and fraudulent payroll considerations, 667-668 
master file, perpetual, 684 
price tests, 693 
pricing and compilation of, 685-686 
in transit, 618 
valuation of, 694-697 
Inventory and warehousing cycle 
analytical procedures, 689 
audit of 
cost accounting, 686-689 
inventory, 684-686 
pricing and compilation, 693-697 
business functions in, 682-684 
integration of tests, 697-699 
physical observation of inventory, 689-693 
Investigation of new client, 212 
Invoice 
confirmation, 533 
vendor’s, 604, 617 


Job cost system, 683 
Job time ticket, 662 
Joint investor relationship with client, 92 
Journal or listing 
acquisitions, 605 
cash receipts, 447 
payroll, 662 
sales, 445-446 
Judgment, professional, 507 


K 


Key controls, 308, 452-453 (table), 461 (table), 
609 (table), 666 (table) 
Kiting, 744-746 


L 


Lack of duty to perform, 120 
Lawsuits, opposed by CPA firms, 130 
Lead schedule, 191 
Legal liability 
business failure and, 115-116 
changed legal environment, 114-115 
of CPAs, 117-118 
protection from, 130-131 
lack of privileged communication, 117 
profession’s response to, 130 
prudent person concept, 116 
sources of, 118-130 
Lending procedures, Rule 101 and, 91 
Letter of representation, 768-769 
Level of disaggregation of planning activities, 
419-420 
Liability 
accrued, audit of, 644-645 
civil, under federal securities laws, 123—127 
to clients, 118-121 
contingent, review for, 759-764 
criminal, 127-130 
legal concepts affecting, 116-118 
out-of-period liability tests, 616 
payroll, tests of details of balances for, 671 
recognition of, 604-605 
to third parties under common law, 121-123 


Liquidffty activity ratios, 232 
Listening techniques, auditors’ 358 
Litigation 

auditor, 129 

between CPA firm and client, 93 
Local area networks (LANs), 386-387 
Long-term debt obligations, ability to meet, 

232-233 


Management 
communication with, 497-498, 776-778 
and governance, 218-219 
information risk shared with, 7-8 
inquiries of, regarding fraud, 342-343 
letter, 312 
override of controls, 350-351 
payment of audit fees, 90 
philosophy and operating style of, 296 
representation letter, 768-769 
responsibilities, 143-144 
related to internal control, 291 
Management assertions 
about account balances, 155 
about classes of transactions, 154-155 
about presentation and disclosure, 155 
defined, 153 
Management consulting services, 12, 27-28 
Manual controls, 378 
Manufactured inventory, pricing of, 696-697 
Materiality 
applying, steps in, 250-251 
decisions, 57—59 


levels of, 56—57, 63 (table) 
preliminary judgment about, 251-254, 568 
relationship to risk, 272-273 
revised judgment about, 252 
Rule 101 and, 91 
Material weakness, 310-312, 316 (figure) 
Mean-per-unit estimation, 582 
Measurement of audit risk model components, 
270-271 
Minutes of meetings, 219 
Misappropriation 
in acquisition and payment cycle, 356 
of assets, 145-146, 336-337 
of receipts involving revenue, 354 
risk factors for, 339-341 
Misstatement bounds, 570 
Misstatements 
analysis of, 565 
comparison with preliminary judgment, 
257-258 
cutoff, 528 
define conditions of, 584 
of information, 7 
known, 257 
likely, 257 
material, 46-47, 57 
discovery by auditors, 144-147 
and monetary unit sampling, 568 
in population, 584 
estimation of, 584 
possible, 183 
as result of fraud, 356-360 
in sales, 453-455 
tolerable, 254—256, 270, 521-522, 
613-614, 736 
Monetary unit sampling 


Limited liability company (LLC), 29 
Apa Oi: PDE Enhan CEL acceptability of population using, 574-575 


audit uses of, 577-578 
comparison with nonstatistical sampling, 
568-570 
generalizing 
from sample to population, 570-571 
when misstatements are found, 571-574 
sample size determination using, 575-577 
Monitoring 
fraud risk prevention programs, 348-349 
of internal control performance, 301-302 
Monthly statements, 450 


Name and form of organization (Rule 505), 101 
Narrative, describing internal controls, 304-305 
Negative confirmation, 533-535 
Network environments, 382-386 
Nonassurance services, 12 
Nonexistent payroll, tests for, 668 
Nonnegligent performance, 120 
Nonpublic companies, internal control for, 
317-319 
Nonresponses, follow-up on, 536-537 
Nonroutine transactions, 267 
Nonsampling risk, 478 
Nonstatistical sampling 

application of, 485-501 

comparison with 

monetary unit sampling, 568-570 
variables sampling, 578 

defined, 479 

for tests of details of balances, 558-567 
Nonverbal cues, during inquiry, 359 (table) 
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Notes payable 
analytical procedures, 714-715 
internal controls, 713-714 
and related interest accounts, 714 (figure) 
tests of controls and substantive tests of 
transactions for, 714 
tests of details of balances for, 715-716 


O 


Objectivity 
degree of, 177 
Rule 102 and, 95 
Obligations 
long-term debt, 232-233 
related to technical standards, 96 
rights and, 160 
Observation 
as audit evidence, 184 
physical, of inventory, 692-693 
Occurrence 
recorded acquisitions and, 610 
of recorded sales , 453-454 
as transaction-related audit objective, 156 
Occurrence and rights and obligations 


(presentation and disclosure-related audit 


objective), 161 

Occurrence rate. See Exception rate 

Office of Management and Budget (OMB), 
Circular A-133, 820-821 

Officers’ compensation, 671 

Online security, 377 

Operational audit, 13 

Operational auditing 

criteria for evaluating efficiency and 
effectiveness, 826-827 


difference from financial auditing, 821-822 


effectiveness vs. efficiency, 822 
examples of findings, 828-829 
independence and competence of auditor, 
825-826 
performance of audits, 824-825 
phases in, 827-828 
relationship to internal controls, 822-823 
types of audits, 823 
Opinion paragraph 
of separate report, 50 (figure) 
of unqualified shared report, 54 (figure) 


of standard unqualified audit report, 47-48 


Organizational audit, 823 
Organizational structures 

and control environment, 296 

of CPA firms, 28-29 

Rule 505 and, 101 
Other information included in annual 

reports, 771 

Out-of-period liability tests, 616 
Output controls, 379-380 
Outsourcing, of IT, 388-390 
Owners’ equity, 716-723 
Ownership interests, 89 
Ownership of audit files, 188-189 


P 


Parallel simulation testing, 384-385 
Parallel testing, 377 
Partner rotation, 89 
Partnerships 
general, of CPA firms, 28 
limited liability (LLP), 29 
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Payment of payroll, 663 
Payments, authorization of, 608 
Payroll and personnel cycle 
accounts and transactions in, 660 
business functions in, 660-663 
tests of controls and substantive tests of 
transactions, 664-668 
tests of details of balances, 668-672 
Payroll expenses, and fraud risk, 356 
Payroll master file, 662 
Payroll tax forms, 665-667 
Peer review 
of CPA firms, 37-39 
Rule 301 and, 97 
Performance 
client, measurement system, 220 
independent checks on, 300-301 
Performance format audit program, 458 
Permanent files, 190-191 
Perpetual inventory master file, 684 
Personnel records, 661 
Persuasiveness of evidence, 176-179 
Petty cash, 734 
audit of, 747 
Physical controls 
over records, 300, 665 
over computer equipment, 377 
over raw materials, 687 
Physical examination, as audit evidence, 180 
Physical observation, of inventory, 692-693 
Pilot testing, 377 
Planned detection risk, 261, 315 
Planning and supervision, adequate, (as GAAS), 35 
Planning phase 
of audit process, 162-163 


in aoa s auditing, 827 
ate PDF 


pe ion 
acceptability of, 495-498, 564-565, 574-575, 
588 


defining of, 488-489 
generalize from sample to, 494-495, 570-571, 
586-590 
misstatements in, 562, 584 
recorded dollar, 560 
rejected, subsequent action, 566-567 
Positive confirmation, 533 
Posting and summarization, as transaction-related 
audit objective, 157 
Preliminary judgment about materiality, 251-254 
Premature revenue recognition, 352 
Prenumbered documents, for sales, 450 
Prepaid expenses, audit of, 641-644 
Presentation and disclosure-related audit 
objectives, 161 
for accounts receivable, 532 
for capital stock, 721-722 
and completing the audit, 427-428, 758-759 
relationship to transaction-related audit 
objectives, 422-423 
Pricing and compilation, audit of, 693-697 
Private Company Practice Section (PCPS), 39 
Private Securities Litigation Reform Act of 
1995, 130 
Privileged communication, lack of, 117 
Privileged information, 97 
Probability proportional to size sample 
selection, 483-484 
Procedures to obtain an understanding, 303-305 
Process cost systems, 683 
Processing controls, 375 (table) 


Professional conduct. See also Ethical conduct 
code of, 32, 84-87 
in CPA firms, 40 (figure) 
by CPAs, 84 (figure) 
Professional skepticism, 145, 341 
Profitability ratios, 233 
Program audit, 824 
Projections, 802 
Proof of cash, 743-744 
Proof of cash receipts, 463 
Property, plant, and equipment, audit of, 634-641 
Property taxes, accrued, audit of, 644-645 
Proprietorship, 28 
Prospective financial statements, 801-803 
Prudent person concept, 116 
Public Company Accounting Oversight Board 
(PCAOB), 30 
report on internal control, 49-51, 306 
PCAOB Standard 5, 49-51, 296, 301-302, 314, 
349, 360, 769 
role of the PCAOB, 30 
Public company interim review, 795-796 
Purchased inventory, pricing of, 695-696 
Purchase order, processing of, 603, 683 
Purchase requisition, 603 
Purchases, fraud risks for, 355-356 


Q 


Qualifications, of individuals providing 
information, 177 
Qualified opinion, 55-56, 316-317 
Quality control 
of CPA firms, 37-39 
elements of, 37-38, 38 (table) 
peer review, 37-39 


E nhan Ce Peestionnaire, internal control, 305, 306 (figure) 


Random sample, simple, 482 
Ratio estimation, 581—582 
Raw materials 
physical controls over, 687 
receipt and storage of, 685 
Realizable value 
of accounts receivable, 530-532 
as balance-related audit objective, 160 
Reasonable assurance, 144—145, 291 
Recalculation, 184 
Receipts involving revenue, misappropriation of, 354 
Receiving report, 603-604, 617 
Reclassification entries, 191-192 
Reconciliation 
of amounts, 193 
of imprest payroll bank account, 663 
Referral fees (Rule 503), 100-101 
Related party, 218 
Related party transaction, 218 
Relevance of evidence, 176 
Relevant assertions, 156 
Reliability 
of evidence, 176-177, 618-619 
of financial reporting, 290, 292-293 
Remittance advice, 446 
Reperformance, 184 
Reports on internal control over financial reporting 
separate or combined report, 49-51 
management assertions, 9-10 
review for subsequent event changes to 
internal control, 764-767 


Representative sample, 478-479 
Resolving ethical dilemmas, 80-82 
Restatement of torts, 122 
Retained earnings, 722-723 
Revenue fraud risks, 351-354 
Review, 799 
Review of audit documentation, 774 
Review of historical financial statements, 10 
Review for subsequent events, 764—767 
Review service (SSARS review), 791-793 
Risk. See also Client business risk; Control risk 
acceptable. See Acceptable audit risk 
audit. See Audit risk 
fraud. See Fraud risk 
information, 6—8 
inherent. See Inherent risk 
of material misstatement, 262 
relationship to 
evidence, 268-274 
materiality, 254-256 
revising, 273-274 
sampling 
and nonsampling, 478-479 
in variables sampling, 582-583 
types of, 261-263 
Risk assessment 
for financial reporting, 297-298 
of IT, 372-374 
procedures, 404 
updating of process of, 351 
Risk factors 
for fraudulent financial reporting, 337-339 
for misappropriation of assets, 339-341 
Rules of conduct, 86 
advertising and solicitation (Rule 502), 100 
applicability of, 87 


commissions and referral fees (Rule 503), A 


100-101 
confidentiality (Rule 301), 96-98 
contingent fees (Rule 302), 98-99 
discreditable acts (Rule 501), 99 
enforcement of, 103 
form of organization and name (Rule 505), 101 
independence (Rule 101), 90-95 
integrity and objectivity (Rule 102), 95 
summary of, 102 (table) 
technical standards (Rules 201—203), 96 


S 


Salaries and wages, accrued, 670 
Sales 
cutoff, 528-529 
designing tests of controls and substantive 
tests of transactions for, 451—457 
recorded, existing, 455 
returns and allowances, 458—459, 529 
summary of methodology for, 457-458 
Sales and collection cycle 
accounts and classes of transactions in, 442—443 
business functions for the, 443 
classes of transactions in, 442-443 
control risk for, 418, 522 
role of audit tests in audit of, 406 (figure) 
Sample exception rate (SER), 494-495 
Sample selection 
evidence decisions and, 175-176 
methods, 482—484 
nonprobabilistic, 480 
for nonstatistical sampling, 559-567 
probabilistic, 482-484 


probabilistic vs. nonprobabilistic, 480 
probability proportional to size, 568-569 
Sample size 
for accounts payable tests, 620 
for attributes sampling, 504 (table) 
calculation with difference estimation, 584—585 
for confirming accounts receivable, 535 
determination using monetary unit sampling, 
577-578 
evidence decisions and, 175 
initial, 492-493, 563 
in physical observation, 692-693 
Sampling 
attributes, application of, 502-507 
audit, 478 
error, 258 
for exception rates, 484—485 
monetary unit, 567-578 
nonstatistical, 479, 485-501, 559-567 
statistical, 479, 501 
statistical vs. nonstatistical, 479 
variables, 578-583 
Sampling distribution, 501-502 
Sampling risk, 478-479 
in variables sampling, 582-583 
Sampling unit, defining of, 489 
Sarbanes—Oxley Act, 4, 49-51 
and audit documentation, 189 
independence and, 88-89 
and PCAOB, 30 
Section 404, 4, 9-10, 49-51, 291-294, 315-317 
SAS 25—Relationship of Generally Accepted 
Auditing Standards to Quality Control 
Standards, 36 
SAS 32—Adequacy of Disclosures in Financial 
Statements, 774 (Figure) 
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SAS 99—Consideration of Fraud in a Financial 
Statement Audit, 335, 337, 341-345, 
350-351, 358-360, 455, 521 

SAS 120, 36 

Scienter, 126 

Scientific evidence, 174 

Scope limitation 

of audit, 55 
materiality of, 59 
Scope paragraph 
of separate report, 50 
of unqualified shared report, 54 (figure) 
of standard unqualified audit report, 46-47 
Section 404 of the Sarbanes-Oxley Act of 2002 
auditor responsibilities, 291-294 
combined report, 49-51 
management responsibilities, 291-292 
types of audit opinions, 315-317 

Securities Act of 1933, 124-125 

Securities and Exchange Commission (SEC), 
30-31 

Advisory Committee on Smaller Public 
Companies, 305 
authority to sanction, 126-127 

Securities Exchange Act of 1934, 125 

Segregation of IT duties, 375-377 

Separate report on internal control over 
financial reporting, 49-51 

Separation of duties 

adequate, 298-299, 449-450, 665 
and proper record keeping, 719-720 
reduced, 374 
Service center, 388-389 
Shareholders’ capital stock master file, 719-720 


Shipping contract 
FOB destination, 618 
FOB origin, 618 
Shipping document, 444 
Short-term debt-paying ability, 232 
Significant deficiency, 310 
Significant risks, 314 
Simple random sample selection, 482 
Single Audit Act, 820-821 
Six-step approach to resolving ethical dilemmas, 
81-82 
Skepticism, professional, 145, 341-342 
Special assignments, in operational auditing, 
823 
Specific authorization, 299 
Specified elements, accounts, or items, 805 
Staff selection, for engagement, 215 
Standard cost records, 693 
Standards 
accounting principles (Rule 203), 96 
attestation, 796 
compliance with (Rule 202), 96 
of conduct, 86 (figure) 
ethical, 78 
of field work, 35-36 
general (Rule 201), 96 
International, on Auditing (ISAs), 32-33 
of reporting, 36 
set by AICPA, 31-32 
Standard unqualified audit report, 46-49 
Statements on Auditing Standards (SASs), 
31, 36-37 
Statements on Internal Auditing Standards 
(SIASs), 817 
Statements on Standards for Accounting and 
Review Services (SSARS) review service, 
791-793 
Statements on Standards for Attestation 
Engagements (SSAE), 796 
Statistical audit sampling, 501 
Statistical inferences, 580-581 
Stock transfer agent, 720 
Stratified sampling, 560-561 
Subpoenas, 97 
Subsequent discovery of facts, 778-779 
Subsequent events 
audit tests, 766-767 
dual dating, 767 
types of, 765-766 
Substantive tests, 406 
Substantive tests of transactions 
in audit plan development, 406-407 
designing for 
acquisition and payment cycle, 608-612 
cash receipts, 459-463 
payroll and personnel cycle, 666 
sales, 451-453 
in design of audit program, 414-416 
effect of results of, 464-465 
IT controls effect on, 381 
for notes payable, 714 
in phase II of audit process, 163, 425 
relationship to 
analytical procedures, 411 
tests of controls, 404—406 
trade-off with tests of controls, 407-409 
Sufficiency of evidence, 178, 772 
Supporting schedules, 192-194 
Systematic sample selection, 482-483 
Systems development, 376 
SysTrust services, 10, 800 
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T 


Tax return 
audit of, 5 (figure) 
payroll, 663 
Tax services, by CPA firms, 27-28 
Technical training, adequate (as GAAS), 
34-35 
Test data approach, 383-384 
Tests of controls 
in audit plan development, 404-406 
designing for 
acquisition and payment cycle, 606-612 
cash receipts, 459-463 
payroll and personnel cycle, 660-663 
sales, 451 
in design of audit program, 414-416 
effect of results of, 464-465 
extent of, 319 
illustration of, 407 (table) 
in phase II of audit process, 163, 426 
procedures for, 313 
purpose of, 312-313 
relationship to 
procedures to obtain understanding, 
314-315 
substantive tests, 406-407 
trade-off with substantive tests, 407-409 
Tests of details of balances 
for accounts payable, 612-620 
in audit plan development, 408 
audit program, 538-541 
of cash, 735-741 
designing for 
accounts receivable, 526-532 
in design of audit program, 416-417 
evidence-planning worksheet, 271-272 
expense account analysis, 648 
for notes payable, 715-716 
payroll and personnel cycle, 668-672 
in phase III of audit process, 163, 426 
Tests of reasonableness, 193-194 
Third parties 
legal liability to, 121-123 
suits by, auditor defenses against, 123 
Those charged with governance, 188, 295-296, 
312, 317, 343, 360, 497 
Tick marks, 195 
Time record, 662 
Timeliness of audit evidence, 177 
Timing 
of audit tests, 427 (table) 
of confirmations, 535 
difference, 530 
evidence decisions and, 175 
as transaction-related audit objective, 157 
Tolerable exception rate, 489-490 
Tolerable misstatement, 254—256, 270, 521-522, 
613-614, 669, 736 
Training, fraud awareness, 347 
Transaction classes 
controls over, 293 
in sales and collection cycle, 442-443 
Transaction cycles, 148-152 
cash in the bank and, 734-735 
Transaction file 
acquisitions, 604-605 
cash receipts, 447 
payroll, 662 
sales, 445-446 
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Apa 


Transaction-related audit objectives, 153, 
307-308, 422-423, 452-453 (table), 
461 (table), 609 (table), 666 (table) 
Trial balance 
accounts payable, 605 
accounts receivable, 446 
aged, 526-527 
or list, 193 
working, 191 
Types of tests, 404-409 


Ultramares doctrine, 121 
Unadjusted misstatement audit schedule, 772 
Unasserted claim, 762-763 
Uncollectible accounts 
audit tests for, 463-464 
authorization form, 447 
nethical behavior, 78-79 
nit cost records, 688-689 
nited States v. Andersen, 128-129 
nqualified opinion, 315-316 
musual fluctuations, 183 
nusual transactions, significant, 350-351 


V 


Vacation pay, accrued, 671 
Valuation 
of inventory, 694-695 
inventory, payroll and, 667 
management assertions about, 155 
Variables sampling 
comparison with nonstatistical sampling, 578 
difference estimation, 581 
O-PDFioknhancer 
ratf estimation, 581—582 
sampling distributions, 578-580 
sampling risks, 582-583 
statistical inference, 580-581 
stratified statistical methods, 582 
Vendor’s invoice, 604 
Vendor’s statement, 605, 617 
Verbal cues, during inquiry, 358 (table) 
Verification 
in acquisition and payment cycle, 636-638 
of information, by user, 7 
internal procedures for, 450 
Vertical analysis, 344 
Viruses, computer, 382 
Voucher, 604 
Vouching, 183 


Ww 


Walkthrough, 307 

WebTrust assurance services, 10, 799-800 
Wide area networks (WANS), 387 
Working trial balance, 191 

Workplace environment, positive, 346 


Y 


Yellow Book, 819-820 
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Rick Chulick, President and Chief naratlicy Officer 


DEAR SHAREHOLDERS 


March 29, 2012 
We are proud to announce another year of noticeable improvement. 

In last year’s letter we stated, “We are committed to increasing the efficiency and effectiveness of 
operations through costa ego’ PDE I Ofek el bat el 0 al current economic conditions. 
In addition, we intend to maintain and further develop our customer base through recently implemented 
post-sale service programs.” The operating results in this report demonstrate that our objectives have 
been achieved, resulting in a net income increase of $740,000 from 2010 to 2011. This amounts to 15 
cents per share, a 23.2% increase from last year. Our goal in the current year is to further improve the 
results of operations and create value for shareholders. In doing so, we will focus primarily on the following 


three strategic components of our business plan: 


1. Post-sale service arrangements designed to further develop and maintain our customer base. 

2. Aggressive advertising campaigns that allow us to penetrate markets dominated by national wholesale 
hardware store chains. 

3. Implementation of new warehouse technology designed to increase productivity and reduce stocking 


and distribution costs. 
We will report our progress throughout the year. 
Christopher J. Kurran Rick Chulick 
Chief Executive Officer President and Chief Operating Officer 





History 

Hillsburg Stores Inc. began operations in 1982 in Gary, Indiana, 
as a retail hardware store chain. On September 25, 1988, 
Hillsburg merged with Handy Hardware and Lumber Company, 
which established the concept of selling high-quality hardware 
through wholesale distribution outlets, to form Handy-Hillsburg, 
Inc., a Washington corporation. On June 5, 1992, after spinning 
off all of its lumber-related assets to Handy Corporation, the 
company changed its name to Hillsburg Hardware, Inc. 

On October 22, 1994, the company reincorporated from 
Washington to Delaware and changed its name to Hillsburg 
Hardware Company (hereafter referred to as “the Company”), 
which trades on the NASDAQ under the symbol “HLSB.” 


Overview 
Hillsburg Hardware Company is a wholesale distributor of 
hardware equipment to a variety of independent, high-quality 
hardware stores in the midwestern part of the United States. 
The primary products are power and hand tools, landscaping 
equipment, electrical equipment, residential and commercial 
construction equipment, and a wide selection of paint products. 
More than 90% of the Company’s products are purchased 
from manufacturers and shipped either directly to customers or 


to the main warehouse in Gary, ne Ap fe nts 
ago PDE 


combined to minimize the costs of freig g. 

Hardware retailers, now more than ever, find it advantageous 
to purchase from us rather than directly from manufacturers. We 
make it possible for smaller, independent retailers to purchase 
on an as-needed basis, rather than in bulk. Moreover, we offer 
our customers a range of high-quality products that cannot be 
found at most national chains. 

We also offer far more post-sale services to customers than 
are offered by manufacturers and other national distributors. We 
simplify the purchasing process by assigning each customer a 
permanent salesperson. Each salesperson becomes involved in 





the sales process, and also acts as a liaison between the cus- 
tomer and post-sale service areas. For example, when customers 
experience technical problems with recently purchased hardware, 
their salesperson has the responsibility to coordinate both 
exchanges and warranty repairs with the manufacturer. This 
process adds value for customers and makes post-sales service 
more efficient and less problematic. Low turnover and extensive 
training of our salespeople enhance this service. 

To further encourage customer loyalty, each customer 
is given access to our internal database system—ONHAND 
(Online Niche-Hardware Availability Notification Database). 

The ONHAND system lets customers check the availability of 
hard-to-find products instantly over the Internet. Moreover, the 
system includes data such as expected restock dates for items 
that are currently sold out and expected availability dates for 
items that will soon be introduced to the market. 

Because of the two aforementioned processes, we have 
managed to maintain a repeat-customer base. Nearly 75% of 
all first-time customers make at least one additional purchase 
within one year of their first purchase. 

Recently, there have been major consolidations in the whole- 
sale hardware industry. We believe this consolidation trend is 
advantageous to our operations as a distributor of hard-to-find, 
Brnkiaty opeipment. The recent consolidation of 

uilder's Plus Hardware, Inc., one of the top ten largest national 
hardware store chains, is a case in point. One month after the 
consolidation, Builder’s Plus decided not to carry high-end 
construction and landscaping equipment in order to focus on 
what it called the “typical hardware customer.” 


Products 

To more effectively manage inventory, we carefully monitor the 
composition of net sales by category of items sold. The follow- 
ing chart indicates the percentage of net sales by class of 
merchandise sold during the years 2011, 2010, and 2009: 
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Marketing Program 

This year, the Company made a significant investment in a 

new advertising campaign. Various Internet, radio, newspaper, 
magazine, and television advertisements were purchased at the 
local and regional levels using the Company’s new catchphrase, 
“Hardware for Hard Workers.” The new jingle has been partially 
responsible for the fiscal 2011 increase in sales of 9%. 


Customers 

The majority of our customers are located in Illinois, Michigan, 
Wisconsin, Ohio, and Missouri. Our current customer base 
consists of more than 400 independently owned hardware 
stores. Approximately 25% of our customers make up more 
than 80% of total sales revenue. To prAPAageodinP DF 
relationships with customers, we offer an array of incentive 

and customer appreciation programs. Since these programs 

were implemented in 2002, customer satisfaction ratings have 
improved steadily in each subsequent year. 


Suppliers 

We purchase hardware and other products from more than 300 
manufacturers in the United States. No single vendor accounted 
for more than 5% of our purchases during fiscal 2011, but our 
25 largest vendors accounted for nearly 35%. We currently have 
long-term supply agreements with two vendors: Mechanical 
Tools and Painter’s Paradise. These agreements are in effect 
until the end of fiscal year 2012. The combined dollar amount of 
each contract is not expected to exceed 5% of total purchases 
for the year. 
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Competitors 

There are other regional wholesale hardware distributors that 
compete with the Company, but national wholesale hardware 
store chains dominate the industry. Most of our competitors 
are not only larger, but have greater financial resources than 
our company. Ten national chains exist in the geographic area 
in which Hillsburg Hardware Co. operates. Of the ten national 
chains, Hardware Bros., Tools & Paint, and Construction City 
account for a significant portion of the wholesale hardware 
market share and also carry the hard-to-find and high-quality 
items we provide. The success of our business depends on 
our ability to keep distribution costs to a minimum and our 
customers satisfied through superior customer service. 

The chart below is a breakdown of market share in the 
wholesale hardware market by competitor category, including 
the 2% market share held by the Company. The chart illustrates 
that we have considerable opportunity for sales growth. 
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Employees 

Hillsburg Hardware currently employs 319 individuals. The 
majority of our employees are involved in day-to-day sales. 
Because of our marketing and customer relations strategy, 
we make significant investments in ongoing training and 
professional development activities. Each year employees 
are required to attend 75 hours of professional training. Each 
employee receives a performance evaluation at least four 
times per year, usually once each quarter. Our turnover is 
among the lowest in the industry because of our compen- 
sation, training, and evaluation programs. We regard our 
En es as our most valuable asset. 
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The Company owns and operates its main warehouse and an 
administrative office. The main warehouse and administrative 
office are in the same 475,000 square-foot building. We also 
rent a second warehouse for which rental fees are $312,000 
annually. The building, located in Detroit, Michigan, serves as 


John P. Higgins 55 —‘ Chairman of the Board 





an off-site storage facility. 
Christopher J. Kurran 47 Chief Executive 


Officer (b) 


KuUSINeSS 


Legal Proceedings 
On September 3, 2010, a suit was filed in the Circuit Court in 
Gary, Indiana, against the Company. The product liability suit, 





“Don Richards v. Hillsburg Hardware Co.” is related to injuries 
that resulted from an alleged defective design of a tractor 
manufactured by Silo-Tractor, a U.S. corporation. The suit is 
currently in pretrial proceedings. In the opinion of our legal 
counsel the suit is without merit. We intend to vigorously defend 


Rick Chulick 54 President and Chief 
Operating Officer (a) 





our position. 
The Company does not believe any other legal issues 
materially affect its finances. 


Avis A. Zomer 44 Chief Financial Officer 


Executive Officers 








The following list provides names, ages, and present positions of 
the Company’s officers: 


Brandon S. Mack 51 ~_—* Vice President Sales 
and Marketing 











Vanessa M. Namie 53 ~~ Vice President 
Operations (c) 


§ ) 
Mary R. Moses 36 “Vice President 
Merchandising 
ancer 








Joseph A. Akins 64 Vice President Quality 
Assurance (d) 





(a) Mr. Chulick has been President and Chief Operating Officer of the Company for ten 
years, since November 2001. Mr. Chulick was Chairman of the Board from 2004 to 
2006. 

(b) Mr. Kurran has been Chief Executive Officer of the Company since September 2001. 
Prior to his role as CEO, Mr. Kurran was employed from 1992-2000 by Trini Enterprises, 
an industrial distributor. 

(c) Ms. Namie has been employed by the company since its inception in 1994. She has 
held her current position since 2000 and served as an operations manager from 1994- 
2000. 

(d) Mr. Akins was Chief Operating Officer and President of Hardware Bros., one of the 
ten largest wholesale hardware chains in the nation, from 1998-2003. 
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Controls and Procedures 

Pursuant to Section 404 of the Sarbanes-Oxley Act of 2002 
and related Exchange Act Rules, we have carefully evaluated 
the design and operating effectiveness of our internal control 
over financial reporting. After careful review of all key controls 
over financial reporting, our Chief Executive Officer and Chief 
Financial Officer implemented new controls over the internal 
verification and timely recording of sales transactions. In com- 
pliance with Section 404 and related Exchange requirements, 
management has issued its report that internal controls over 
financial reporting are operating ofect ADSL OvP DE 
31, 2011 based on criteria established in the CO 


Internal 
Control-Integrated Framework. 


“We offer Our 
customers a range = 
of high-quality D 
products that cannot 7? 
be found at most 

national chains." 











Information Regarding Common Equity 
Hillsburg Hardware Company’s common stock currently trades 
on the NASDAQ under the symbol “HLSB.” The following chart 
shows the high and low prices of the Company’s common 
stock by quarter for the years 2011 and 2010: 

















2011 2010 
HIGH LOW HIGH LOW 
Quarter 1 22.50 19.05 23.30 20.00 
Emhancers 2.10 22.75 20.25 
Quarter 3 22.30 20.99 24.10 19.75 
Quarter 4 22.40 17.95 21.50 18.20 





On March 23, 2012, there were 1,250 shareholders of our com- 
mon stock. 


Dividend Policy 

Dividend payments on common stock are authorized annually by 
the Board of Directors. For 2011, dividend payments totaled $1.9 
million, which is $.38 per share. 
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Board of Directors and Stockholders 
Hillsburg Hardware Company 


We have audited the accompanying balance sheets of Hillsburg Hardware Company as of December 31, 2011 and 2010, and the 
related statements of income, stockholders’ equity and comprehensive income, and cash flows for each of the years in the three- 
year period ended December 31, 2011. We have also audited Hillsburg Hardware Company, Inc.’s internal control over financial 
reporting as of December 31, 2011, based on criteria established in Internal Control-Integrated Framework issued by the Committee 
of Sponsoring Organizations of the Treadway Commission (COSO). Hillsburg Hardware Company’s management is responsible for 
these financial statements, for maintaining effective internal control over financial reporting, and for its assessment of the effective- 
ness of internal control over financial reporting, included in the accompanying report, Management’s Responsibility for the Financial 
Statements. Our responsibility is to express an opinion on these financial statements and an opinion on the company’s internal 
control over financial reporting based on our audits. 


We conducted our audits in accordance with the standards of the Public Company Accounting Oversight Board (United States). 
Those standards require that we plan and perform the audits to obtain reasonable assurance about whether the financial state- 
ments are free of material misstatement and whether effective internal control over financial reporting was maintained in all material 
respects. Our audit of financial statements included examining, on a test basis, evidence supporting the amounts and disclosures in 
the financial statements, assessing the accounting principles used and significant estimates made by management, and evaluating 
the overall financial statement presentation. Our audit of internal control over financial reporting included obtaining an understanding 
of internal control over financial reporting, assessing the risk that a material weakness exists, and testing and evaluating the design 
and operating effectiveness of internal control based on the assessed risk. Our audits also included performing such other proce- 
dures as we considered necessary in the circumstances. We believe that our audits provide a reasonable basis for our opinions. 


A company’s internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability 

of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted 
accounting principles. A company’s internal control over financial reporting includes those policies and procedures that (1) pertain to 
the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the 
company; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements 
in accordance with generally accepted accounting principles, and that receipts and expenditures of the company are being made only 
in accordance with authorizations of management and directors of the company; and (3) provide reasonable assurance regarding the 
prevention or timely detection of unauthorized acquisition, use, or disposition of the company’s assets that could have a material effect 
on the financial statements. 


Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections 
of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes 
in conditions, or that the degree of compliance with the policies or procedures may deteriorate. 


In our opinion, the financial statements referred to above present fairly, in all material respects, the financial position of Hillsburg 
Hardware Company, Inc. as of December 31, 2011 and 2010, and the results of its operations and its cash flows for each of the 
years in the three-year period ended December 31, 2011 in conformity with accounting principles generally accepted in the United 
States of America. Also in our opinion, Hillsburg Hardware Company maintained, in all material respects, effective internal control 
over financial reporting as of December 31, 2011, based on criteria established in Internal Control-Integrated Framework issued by 


the Committee of Sponsoring Organizations of the Treadway Commission (COSO). 
Berger & Anthony, og 


Berger and Anthony, LLP 
March 21, 2012 





MAD 





Management’s Responsibility for the Financial Statements 
To Our Shareholders: 


The accompanying financial statements of Hillsburg Hardware Company have been prepared by management, which is responsible 
for their integrity and objectivity. The statements have been prepared in conformity with accounting principles generally accepted in 
the United States of America and include amounts based on management’s best estimates and judgments. Management has also 
prepared information elsewhere in this Annual Report that is consistent with data in the financial statements. The Company’s financial 
statements have been audited by Berger and Anthony, independent Certified Public Accountants. Our auditors were given unrestricted 
access to all financial records and related data, including minutes of the meetings of the Board of Directors. We believe all 
representations made to Berger and Anthony were legitimate and appropriate. 


The management of Hillsburg Hardware Company is responsible for establishing and maintaining adequate internal control over 
financial reporting. Hillsburg Hardware Company’s internal control system was designed to provide reasonable assurance to the com- 
pany’s management and board of directors regarding the preparation and fair presentation of published financial statements. 


Hillsburg Hardware Company management assessed the effectiveness of the company’s internal control over financial reporting as 
of December 31, 2011. In making this assessment, it used the criteria set forth by the Committee of Sponsoring Organizations of the 
Treadway Commission (COSO) in Internal Control-Integrated Framework. Based on our assessment we believe that, as of December 31, 


2011, the company’s internal control over financial reporting is effective based on those criteria. 


Hillsburg Hardware Company’s independent auditors have issued an audit report on our financial statements and internal control over 
financial reporting. This report appears on the preceding page. 


Apago PDF Enhancer 
PMeltign foe Aigner 


John P. Higgins Christopher J. Kurran Avis A. Zomer 
Chairman of the Board Chief Executive Officer Chief Financial Officer 
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Hillsburg Hardware Company 
Balance Sheets (in thousands) 


December 31 
































ASSETS 2011 2010 
Current assets 
Cash and cash equivalents $ 828 743 
Trade receivables (net of allowances of $1,240 and $1,311) 18,957 16,210 
Other receivables 945 915 
Merchandise inventory 29,865 31,600 
Prepaid expenses 432 427 
Total current assets 51,027 49,895 
Property and equipment 
Land 3,456 3,456 
Buildings 32,500 32,000 
Equipment, furniture, and fixtures 6,304 8,660 
Less: accumulated depreciation (31,920) (33,220) 
Total property and equipment (net) 10,340 10,896 
Total assets $ 61,367 $ 60,791 
LIABILITIES AND STOCKHOLDERS’ EQUITY 
Current liabilities 
Trade accounts payable $ 4,720 $ 4,432 
Notes payable Apago PDF Enhancex, 4,589 
Accrued payroll 1,350 715 
Accrued payroll tax 120 116 
Accrued interest and dividends payable 2,050 1,975 
Accrued income tax 796 523 
Total current liabilities 13,216 12,350 
Long-term notes payable 24,120 26,520 
Deferred income taxes 738 722 
Other long-term payables 830 770 
STOCKHOLDERS’ EQUITY 
Capital stock ($1 par value; 5,000,000 shares issued) 5,000 5,000 
Capital in excess of par value 3,500 3,500 
Retained earnings 13,963 11,929 
Total stockholders’ equity: 22,463 20,429 
Total liabilities and stockholders’ equity $ 61,367 $ 60,791 








See Notes to Financial Statements. 


Hillsburg Hardware Company 
Statement of Operations (in thousands) 


Year Ended December 31 


2011 2010 2009 
Net sales $ 143,086 $ 131,226 $ 122,685 
Cost of sales 103,241 94,876 88,724 
Gross profit 39,845 36,350 33,961 
Selling, general and administrative expenses 32,475 29,656 28,437 
Operating income 7,370 6,694 5,524 
Other income and expense 
Interest expense 2,409 2,035 2,173 
Gain on sale of assets (720) - — 
Total other income/expense (net) 1,689 2,035 2,173 
Earnings before income taxes 5,681 4,659 3,351 
Provision for income taxes 1,747 1,465 1,072 
Net income $ 3,934 $ 3,194 $ 2,279 
Earnings per share $ 0.79 $0.64 $ 0.46 


See Notes to Financial Statements. 
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Hillsburg Hardware Company 
Statement of Stockholders’ Equity (in thousands) 











Common Stock Paid-in Retained Total 
Shares Par value Capital Earnings Stockholders’ Equity 
Balance as of December 31, 2008 5,000 $ 5,000 $ 3,500 $ 10,256 $ 18,756 
Net income 2,279 2,279 
Dividends paid (1,900) (1,900) 
Balance as of December 31, 2009 5,000 $ 5,000 $ 3,500 $ 10,635 $ 19,135 
Net income 3,194 3,194 
Dividends paid (1,900) (1,900) 
Balance as of December 31, 2010 5,000 $ 5,000 $ 3,500 $ 11,929 $ 20,429 
Net income 3,934 3,934 
Dividends paid (1,900) (1,900) 





Balance as of December 31, 2011 5,000 $ 5,000 $ 3,500 $ 13,963 $ 22,463 


See Notes to Financial Statements. 


Hillsburg Hardware Company 
Statement of Cash Flows (in thousands) 


Year Ended December 31 


OPERATING ACTIVITIES 2011 2010 2009 
Net income $ 3,934 $ 3,194 $ 2,279 


Adjustments to reconcile net income to net cash 
provided by (used in) operating activities: 


Depreciation and amortization 1,452 1,443 1,505 
(Gain) or Loss on sale of assets (720) = 7 
Deferred income taxes increase (decrease) 16 (8) 43 


Changes in assets and liabilities: 





Trade and other receivables (2,777) (393) (918) 
Merchandise inventory 1,735 (295) (430) 
Prepaid expenses (5) (27) (55) 
Accounts payable 288 132 76 
Accrued liabilities 714 77 142 
Income taxes payable 273 23 13 

Net cash provided by operating activities 4,910 4,146 2,655 





INVESTING ACTIVITIES 





Capital expenditures (10,500) (1,800) (2,292) 
Sale of equipment 10,324 - = 
Net cash used in investing activities (176) (1,800) (2,292) 





Apago PDF Enhancer 


FINANCING ACTIVITIES 











Dividend payment (1,900) (1,900) (1,900) 
Proceeds (repayments) from borrowings (net) (2,749) (423) 1,602 

Net cash used in financing activities (4,649) (2,323) (298) 
Net increase in cash and cash equivalents 85 23 65 
Cash and cash equivalents at beginning of year 743 720 655 
Cash and cash equivalents at end of year $ 828 $ 743 $ 720 





See Notes to Financial Statements. 





1. Description of Significant Accounting 
Policies and Business 
We are a wholesale distributor of high-quality power tools, hand 
tools, electrical equipment, landscaping equipment, residential 
and commercial construction equipment, and paint products. 
The majority of our customers are smaller, independent hard- 
ware stores located in Illinois, Michigan, Wisconsin, Ohio, and 
Missouri. 


Allowance for Doubtful Accounts: Our allowance for 
doubtful accounts is maintained to account for expected credit 
losses. Estimates of bad debts are based on individual customer 
risks and historical collection trends. Allowances are evaluated 
and updated when conditions occur that give rise to collection 
issues. 


Merchandise Inventory: Merchandise inventory is presented 
at the lower of average cost or market. To present accurately 
the estimated net realizable value of the accounts, we adjust 
inventory balances when current and expected future market 
conditions, as well as recent and historical turnover trends, 
indicate adjustments are necessary. 


Property, Plant and Equipment: Land, buildings, comput- 
ers and other equipment, and furniture and fixtures are stated 
at historical cost. Depreciation is calculated on a straight-line 
basis over estimated useful lives of the assets. Estimated 
useful lives are 20 to 35 years for buildings and 2 to 10 years 
for equipment and furniture and fixtures. 


Revenue Recognition: Revenues are recognized when goods 
are shipped, title has passed, the sales price is fixed, and col- 
lectibility is reasonably assured. A salegy aAGowkbDF 
account is maintained to reflect estimated future returns and 
allowances. Adjustments to the sales returns and allowance 
account are made in the same period as the related sales are 
recorded and are based on historical trends, as well as analyses 
of other relevant factors. Sales are recorded net of returns and 
allowances in the statements referred to in this report. 


Income Taxes: The deferred income tax account includes 
temporary differences between book (financial accounting) 
income and taxable income (for IRS reporting purposes). The 
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account consists largely of temporary differences related to (1) 
the valuation of inventory, (2) depreciation, and (3) other accruals. 


2. Other Receivables 

The other receivables balance consists largely of vendor allow- 
ances and vendor rebates. When vendor allowances and vendor 
rebates are recognized (all activities required by the supplier 
are completed, the amount is determinable, and collectibility is 
reasonably certain), they are recorded as reductions of costs of 
goods sold. 


3. Notes Payable 

Notes payable for the year ended December 31, 2011, consists 
of three notes payable to the bank. Each note carries a fixed 
interest rate of 8.5%. One note for $4,180,000 matures in June 
2012 and the other two mature on December 31, 2014. During 
2011, there was an additional note outstanding in the amount of 
$4,400,000, which was paid off during October 2011. 


4. Commitments 

The Company is currently committed to an operating lease that 
expires in 2015. Rental payments for the remainder of the con- 
tract are set at $312,000 per annum. 


5. Segment Reporting 

The Company operates in one segment. The breakdown of 
revenues (in thousands) from different products is listed in the 
chart below: 


SEGMENT REPORTING 





Enhancer 2011 2010 2009 
Power Tools $ 31,479 $ 27,557 $ 26,991 
Hand Tools 21,463 19,684 18,403 
Landscaping Equipment 14,309 15,645 13,494 
Electrical Goods 17,170 15,849 11,042 
Residential 

Construction Equipment 21,463 18,372 15,949 
Commercial 

Construction Equipment 11,447 10,498 9,815 
Paint Products 25,755 23,621 26,991 





$143,086 $131,226 $122,685 


6. Earnings Per Share 
Earnings per share calculations for 2011, 2010, and 2009 were 
computed as follows: 


Numerators 

(net income in thousands): $3,934, $3,194, and $2,279 
Denominators 

(shares of common stock): 
(unchanged for all years) 


5,000,000 


Diluted earnings per share was the same as basic earnings per 
share for all years. 
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Management’s Discussion and 
Analysis of Financial Condition and 
Results of Operations 


The following discussion and analysis of the results of our 
operations and our financial condition are based on the finan- 
cial statements and related notes included in this report. When 
preparing the financial statements, we are frequently required 
to use our best estimates and judgments. These estimates and 
judgments affect certain asset, liability, revenue, and expense 
account balances. Therefore, estimates are evaluated constantly 
based on our analyses of historical trends and our understand- 
ing of the general business environment in which we operate. 
There are times, however, when different circumstances and 
assumptions cause actual results to differ from those expected 
when judgments were originally made. The accounting policies 
referred to in Note 1 to the financial statements, in our opinion, 
influence the judgments and estimates we use to prepare our 
financial statements. 


Results of Operations 
For the year ended December 31, 2011, gross profit increased 
by 9.6% or $3,495,000 from 2010. This increase in gross profit 
more than offsets the increase in operating expenses from 2010 
to 2011 of $2,819,000 or 9.5%. The increase in gross margin 
largely explains the operating income increase of $676,000. 

For the year ended December 31, 2010, gross profit 
increased by $2,389,000 or 7% from 2009. Total operating 
expenses increased by $1,219,000 or approximately 4.3% from 


2009. The increase in gross profit * RAG LP F 
expense increase, and the net result w ' in D 


in operating income. 


Net Sales: From 2010 to 2011 net sales increased by 
$11,860,000 or 9%. The increase in net sales can be explained 
largely by an aggressive advertising campaign that the 
Company organized during the second half of 2011. Net sales 
for 2010 increased by $8,541,000 or 7.0% from 2009, which 

is consistent with industrywide average revenue growth of 7% 
from 2009 to 2010. 


Gross Profit: Gross profit as a percentage of net sales stayed 
relatively stable at 27.68% and 27.70% in 2009 and 2010, 
respectively, but increased to 27.85% in 2011. The 2011 
increase is mostly due to improved vendor incentive programs, 
our focus on cost containment, and increases in the resale 
values of certain commodities such as PVC piping material and 
certain types of metal wiring. While gross profit percentages in 
the industry have declined somewhat, our position as a niche 
provider in the overall hardware market allows us to charge pre- 
mium prices without losing customers. 


Selling, General and Administrative Expenses: Selling, 
General and Administrative Expenses: Selling expenses 
increased by $1,911,000 or 14.8% from 2010 to 2011 and by 
$805,000 or 6.7% from 2009 to 2010. As a percentage of net 
sales, selling expenses increased by 0.52% since 2010 and 
decreased by 0.03% from 2009 to 2010. The increase in selling 
expenses as a percentage of net sales from 2010 to 2011 is 


due to our new advertising campaign and increased expendi- 
tures on sales meetings and training. 

General and administrative expenses increased by 
$908,000 or 5.4% from 2010 to 2011 and by $414,000 or 2.5% 
from 2009 to 2010. As a percentage of net sales, general and 
administrative expenses decreased by 0.42% since 2010 and 
decreased by 0.55% from 2009 to 2010. The overall increase 
from 2010 to 2011 was caused mostly by unexpected repairs 
needed to reattach and replace damaged shelving units in our 
main warehouse building. 


Interest Expense: In 2011, interest expense increased by 
$374,000, or approximately 18.4%, compared to 2010. The 
increase was due to an overall interest rate increase and 

the restructuring of debt covenants that are less restrictive 

but demand higher interest rates. In 2010 interest expense 
decreased by $138,000 or 6.4% compared to 2009. The 

2010 decrease was mainly due to the Company’s decision to 
decrease the level of long-term debt. The average interest rates 
on short- and long-term debt during 2011 were approximately 
10.5% and 8.5% respectively. 


Liquidity 

During 2011, our working capital requirements were primarily 
financed through our line of credit, under which we are 
permitted to borrow up to the lesser of $7,000,000 or 75% of 
accounts receivable outstanding less than 30 days. The aver- 
age interest rate on these short-term borrowings in 2011 was 
approximately 10.5% 

Cash provided by operating activities for 2011 and 2010 was 
BHnnante 0 respectively. The change from 2010 
to is primarily due to the increase in net income. Increases 
in receivables were largely offset by decreases in inventories and 
increases in payables and other current liabilities. The increase in 
cash provided from operating activities of $1,491,000 from 2009 
to 2010 is largely the result of the increase in net income and 
smaller increases in receivables and merchandise inventory in 
2010 compared to 2009. We believe that cash flow from opera- 
tions and the available short-term line of credit will continue to 
allow us to finance operations throughout the current year. 


Statement of Condition 

Merchandise inventory and trade accounts receivable together 
accounted for over 95% of current assets in both 2011 and 
2010. Merchandise inventory turned over approximately 3.4 
times in 2011 and 3.0 times in 2010. Average days to sell inven- 
tory were 108.6 and 120.9 in 2011 and 2010 respectively. Net 
trade receivables turned over approximately 7.6 times in 2011 
and in 2010. Days to collect accounts receivable computations 
were 48.1 and 48.0 in 2011 and 2010 respectively. Both inven- 
tory and accounts receivable turnover are lower than industry 
averages. We plan for this difference to satisfy the market in 
which we operate. Our market consists of smaller, independent 
hardware stores that need more favorable receivable collection 
terms and immediate delivery of inventory. Because we hold 
large amounts of inventory, we are able to fill orders quicker 
than most of our competitors even during the busiest times of 
the year. 


Outlook 

During 2011 we experienced another year of noticeable 
improvement, despite the economic downturn. The Company’s 
financial performance can largely be attributed to (1) a continued 
focus on cost containment, (2) productivity improvements, (3) 
aggressive advertising, and (4) the implementation of programs 
designed to enhance customer satisfaction. 

During 2012, we will continue to apply the same strategic 
efforts that improved 2011 performance. We are also imple- 
menting a new warehouse information system designed to 
increase productivity and reduce stocking and distribution 
costs. Management believes that earnings growth will be pri- 
marily driven by (1) continued focus on customer satisfaction, 
(2) penetration into markets currently dominated by national 
wholesale hardware store chains, and (3) the use of technol- 
ogy to attract additional customers and promote more efficient 
operations. 


Hillsburg Hardware Company 
Statement of Cash Flows (in thousands) 


Information Concerning Forward-Looking 
Statements 

This report contains certain forward-looking statements (ref- 
erenced by such terms as “expects” or “believes”) that are 
subject to the effects of various factors including (1) changes 
in wholesale hardware prices, (2) changes in the general busi- 
ness environment, (3) the intensity of the competitive arena, 

(4) new national wholesale hardware chain openings, and (5) 
certain other matters influencing the Company’s ability to react 
to changing market conditions. Therefore, management wishes 
to make readers aware that the aforementioned factors could 
cause the actual results of our operations to differ consider- 
ably from those indicated by any forward-looking statements 
included in this report. 


BALANCE SHEET DATA: 2011 2010 2009 2008 2007 
Current assets $ 51,027 $ 49,895 $ 49,157 $ 47,689 $ 46,504 
Total assets 61,367 60,791 59,696 57,441 51,580 
Current liabilities 13,216 12,350 12,173 12,166 9,628 
Long-term notes payable 24,120 26,520 26,938 25,432 25,223 
Total stockholders’ equity 22,463 20,429 19,135 18,756 15,764 
INCOME STATEMENT DATA: Apago PDF Enhancer 
Net sales $ 143,086 $ 131,226 $ 122,685 $ 120,221 $ 117,115 
Cost of sales 103,241 94,876 88,724 88,112 85,663 
Gross profit 39,845 36,350 33,961 32,109 31,452 
Earnings before income taxes 5,681 4,659 3,351 3,124 1,450 
Net income 3,934 3,194 2,279 2,142 994 
Cash provided by operating activities 4,910 4,146 2,655 1,811 1,232 
Per common share data: 

Net income $ 0.79 $ 0.64 $ 0.46 $ 0.43 $ 0.22 

Cash dividends per share $ 0.38 $ 0.38 $ 0.38 $ _ $ _ 

Common shares outstanding 5,000 5,000 5,000 5,000 4,500 
KEY OPERATING RESULTS AND FINANCIAL POSITION RATIOS: 
Gross profit (%) 27.85% 27.70% 27.68% 26.71% 26.86% 
Return on assets (%) 9.30% 7.13% 5.72% 5.73% 2.86% 
Return on common equity (%) 26.49% 23.55% 17.69% 18.10% 9.50% 
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ACL Software License Agreement 
ACL Education Edition 

THIS ACL SOFTWARE LICENSE AGREEMENT (“AGREEMENT”) IS A LEGAL AGREEMENT BETWEEN YOU (EITHER A SINGLE ENTITY 
OR AN INDIVIDUAL, REFERRED TO AS “YOU” OR “YOUR”) AND ACL SERVICES LTD. OF 1550 ALBERNI STREET, VANCOUVER, BRITISH 
COLUMBIA, CANADA, V6G 1A5 (“ACL”). CAREFULLY READ THE TERMS OF THIS AGREEMENT BEFORE YOU INSTALL OR USE THE ACL 
EDUCATION EDITION SOFTWARE AND ACCOMPANYING DOCUMENTATION (“SOFTWARE”). BY INSTALLING OR USING THE 
SOFTWARE, YOU AGREE TO BE BOUND BY THE TERMS OF THIS AGREEMENT. You will not be able to install the Software unless you click 
on the button that indicates your acceptance of the terms of this Agreement. If you do not agree to all of the terms of this Agreement, then do not 
install or use the Software. 

If there is any conflict or ambiguity between the English language version and any other language version of this Agreement, the English 
language version will prevail and it will be the authentic text for the purposes of interpretation. 


Grant of License. ACL rants you the personal, non-assignable, non-transferable and non-exclusive license to install and use the Software for 
educational purposes only. Any commercial use of the Software is expressly forbidden and is a breach of the terms of this Agreement. If you are 
supplied the Desktop Edition of the Software, a specific individual (a “Named User”) is permitted to install and use the Software on a computer 
assigned to the Named User. If you are supplied the Network Edition of the Software, you are permitted to install and use the Software on a single 
computer network for a designated number of concurrent users at any particular time. 

Ownership. The grant of license is not a sale of the Software to you. No title to or ownership of the Software is transferred to you. All title, ownership 
rights and intellectual property rights in and to the Software, including any adaptations or copies of the Software, belong to ACL and its licensors. 
The Software is protected by copyright laws and international copyright treaties and ACL may incorporate certain measures in the Software to 
prevent unauthorized use of the Software. You further agree to indemnify ACL for any copyright infringement that is caused, contributed to or 
encouraged by your failure to abide by this Agreement. 

License Restrictions. ACL reserves all rights not expressly granted to you. Without limiting the generality of the foregoing, you acknowledge that 
the Software contains trade secrets and subject to applicable laws, you agree that you will not: (a) use the Software for any commercial purpose; (b) 
copy the Software, except as expressly permitted under this Agreement; (c) modify, adapt or translate the Software; (d) de-compile, reverse engineer 
or disassemble the Software or otherwise reduce the Software from object code to source code; (e) use the Software to develop any works which are 
functionally compatible or competitive to the Software or create any works which are derived from the Software (using the Software to produce 
reports or other tasks permitted by the Software are not deemed to be works derived from the Software); (f) lease, rent, loan, sell or distribute the 
Software to a third party; or (g) assign this Agreement, transfer your license rights to a third party or sub-license any or all of your license rights 
under this Agreement without the prior written agreement of ACL. 

Documentation. You are permitted to print and make a reasonable number of copies of the Software documentation (i.e. manuals and installation 
guides) for your internal use in accordance with this Agreement, provided that you reproduce all copyright and other proprietary notices that are 
on the original copy of Software documentation. 

Termination. This Agreement becomes foci uy @e y BRE acdhNAan Ce Wil remain in force until terminated. ACL may 
terminate this Agreement immediately if you: (a) breach any intellectual property right of ACL in the Software, including any of the License 
Restrictions set out in this Agreement; or (b) breach any other term of this Agreement and do not correct such breach within thirty (30) days of 
ACL providing you with notice of such breach. 

Upon termination of this Agreement, you must destroy the original and all copies of the Software and immediately cease any use of the Software. 
Within thirty (30) days following such termination, an authorized signatory of your entity will certify in writing to ACL that the original and all 
copies of the Software have been destroyed or returned to ACL. If you are in breach of this Agreement, then in addition to any other right or remedy 
available to ACL, you agree to reimburse ACL for all of its reasonable costs arising out of or in connection with the breach and related investigation. 
The termination of this Agreement will not constitute a waiver of any fees, amounts or charges due to ACL, nor will termination in any way reduce 
or compromise any other rights of ACL pursuant to this Agreement. 

Disclaimer. THE SOFTWARE IS PROVIDED “AS IS” AND FREE OF CHARGE FOR EDUCATION PURPOSES. ACL, ITS LICENSORS, AND 
THEIR RESPECTIVE EMPLOYEES, OFFICERS, DIRECTORS, CONTRACTORS, DISTRIBUTORS OR AGENTS, MAKE NO WARRANTIES OR 
REPRESENTATIONS, EXPRESSED OR IMPLIED, ORAL OR IN WRITING, WITH RESPECT TO THE SOFTWARE, INCLUDING ITS FITNESS 
FOR A PARTICULAR PURPOSE, MERCHANTABILITY, DURABILITY, QUALITY OR ITS NON-INFRINGEMENT. ACL, ITS LICENSORS, AND 
THEIR RESPECTIVE EMPLOYEES, OFFICERS, DIRECTORS, CONTRACTORS, DISTRIBUTORS OR AGENTS WILL NOT BE LIABLE FOR 
ANY DAMAGES, INCLUDING, BUT NOT LIMITED TO, DIRECT, INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL OR PUNITIVE 
DAMAGES (INCLUDING LOST PROFITS AND LOST DATA) ARISING OUT OF THE USE OF, OR THE INABILITY TO USE THE SOFTWARE. 
Notices. Any notice that either party is required or permitted to give to the other party under this Agreement will be in writing, and be delivered to 
ACL at the address stated on the first page of this Agreement (Attention: Legal Department) and to you at the address provided on the order form 
for the Software. Either party may, from time to time, change their address for notice by providing written notice of the change to the other party. 
The delivery of notice will be by personal delivery, courier or registered mail. Delivery will be deemed effective upon receipt, if delivered personally 
or by courier, or five (5) business days from sending, if delivered by registered mail. 

Governing Law. This Agreement will be governed by and construed in accordance with the laws of the Province of British Columbia and the federal 
laws of Canada, excluding conflict of laws provisions. Subject to and without restriction of the rights of a party to injunctive relief or other interim 
measures of relief, the parties agree to submit to the jurisdiction of the courts of British Columbia, Canada. The application of the United Nations 
Convention of Contracts for the International Sale of Goods is expressly excluded. 

Severability. If any provision of this Agreement is unenforceable, that provision will be construed, limited, modified or, if necessary, severed to the 
extent necessary to eliminate its unenforceability and the other provisions of this Agreement will remain in full force. 

Complete Agreement. This Agreement comprises the complete and exclusive statement of the agreement between the parties with respect to the 
license of the Software and supersedes any prior discussions or agreements regarding the license of the Software. 

Version: Jun 27-06 

© 2006 ACL Services Ltd. All rights reserved. 


